Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/19f07d9e932581d67b15313ebb0dca1683d6d786.roa
File:                     19f07d9e932581d67b15313ebb0dca1683d6d786.roa (raw, json)
Hash identifier:          linpy0sTCqStUFDc2yA0WVAxkVzzlRs4xgVKJQVRr8M=
Subject key identifier:   7D:DE:47:09:27:C8:18:25:C6:88:1A:95:FC:BB:7F:EF:49:C9:27:12
Certificate issuer:       /CN=f2afc5245823b4a2e05112126779653ab332c108
Certificate serial:       06C3
Authority key identifier: 1F:09:E3:2F:A9:BC:E7:1C:5D:DB:06:6E:2F:86:60:A8:96:36:4C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2afc5245823b4a2e05112126779653ab332c108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/19f07d9e932581d67b15313ebb0dca1683d6d786.roa
Signing time:             Fri 13 Jan 2023 11:57:05 +0000
ROA not before:           Thu 12 Jan 2023 11:56:23 +0000
ROA not after:            Mon 13 Jan 2025 11:56:23 +0000
asID:                     265791
IP address blocks:        192.141.176.0/22 maxlen: 24
                          2803:4020::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2afc5245823b4a2e05112126779653ab332c108
        Validity
            Not Before: Jan 12 11:56:23 2023 GMT
            Not After : Jan 13 11:56:23 2025 GMT
        Subject: CN=19f07d9e932581d67b15313ebb0dca1683d6d786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:8a:74:de:73:4e:e6:57:62:c0:95:14:0b:
                    70:69:cc:89:08:f4:ea:c0:12:d0:e9:09:07:d7:26:
                    ee:b0:9b:06:49:ba:35:30:a6:7b:83:23:f3:44:bb:
                    02:30:fe:9c:fd:94:ce:b4:42:51:0e:87:70:af:32:
                    10:4f:10:87:59:e4:f8:86:f3:ff:e3:67:de:27:73:
                    ca:92:64:fa:b9:84:78:b1:17:61:53:29:37:2c:ec:
                    a2:11:7f:60:3b:97:df:27:d2:94:65:5c:94:1e:72:
                    9d:c9:5d:6c:41:1a:d4:70:39:2e:d4:6b:6d:c5:73:
                    cd:bf:77:70:d2:e6:ef:f9:58:32:0a:70:09:0e:b5:
                    ed:fd:44:dc:94:63:a0:e4:f8:f6:30:4c:7f:87:b8:
                    d2:27:b0:7f:59:a6:d9:93:38:40:c1:48:91:48:c5:
                    47:f8:24:01:67:f8:b2:b2:06:a1:95:c4:98:e3:ff:
                    02:1b:33:a4:64:9a:34:f3:f1:22:0a:24:0b:21:e5:
                    c6:eb:25:3a:08:b6:f8:92:d9:6f:f3:1a:8e:85:da:
                    67:a2:5b:da:93:e7:34:08:72:11:01:72:c2:1e:2b:
                    b6:21:d8:4b:09:60:62:1b:cc:be:8c:d0:45:71:30:
                    ee:df:f7:53:69:fe:33:32:15:02:41:d0:21:a8:2d:
                    14:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:47:09:27:C8:18:25:C6:88:1A:95:FC:BB:7F:EF:49:C9:27:12
            X509v3 Authority Key Identifier:
                keyid:1F:09:E3:2F:A9:BC:E7:1C:5D:DB:06:6E:2F:86:60:A8:96:36:4C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2afc5245823b4a2e05112126779653ab332c108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/19f07d9e932581d67b15313ebb0dca1683d6d786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/f2afc5245823b4a2e05112126779653ab332c108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.176.0/22
                IPv6:
                  2803:4020::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:22:f3:21:d2:bc:f6:31:b6:dc:dd:9e:45:b4:89:16:04:
         1b:94:45:c9:b7:3a:3e:99:2d:f0:19:00:f9:0f:7d:5a:7b:a7:
         0c:3b:dd:0d:3b:ea:2e:0e:41:c7:b6:b8:52:33:a5:87:37:c2:
         5e:0a:da:d3:cf:63:28:95:e9:56:15:bf:58:c3:2c:12:66:78:
         2c:30:5c:7c:a5:66:82:39:29:d1:45:eb:1a:cc:72:6b:b0:17:
         8a:ec:3a:9a:ac:59:46:c6:e6:6c:16:4e:0e:2f:3e:df:27:79:
         31:aa:e7:c6:22:f0:2b:5c:d9:d7:39:7a:4a:30:80:7e:9a:68:
         30:37:7e:e1:8b:8c:29:3e:1a:a4:dd:37:ae:2c:0c:5b:f8:ef:
         ee:72:02:9f:fe:8f:da:4b:1d:f2:2d:bb:71:9a:ea:1a:2e:a5:
         9b:88:7d:d7:0c:31:f8:44:ba:7c:ea:21:d6:ad:27:92:d8:87:
         12:44:dc:6a:43:89:e9:b4:c4:1f:7f:47:45:35:ce:b5:41:0a:
         ad:24:03:18:92:6d:c9:2b:fe:fa:97:77:14:1d:b7:db:7b:40:
         ee:31:7f:13:b1:ed:b9:12:c6:e2:bc:c5:c2:e1:a4:64:aa:6e:
         dc:91:ac:53:10:61:d4:ab:b1:65:0b:9f:eb:60:d0:ee:24:a6:
         24:da:66:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZjJh
ZmM1MjQ1ODIzYjRhMmUwNTExMjEyNjc3OTY1M2FiMzMyYzEwODAeFw0yMzAxMTIx
MTU2MjNaFw0yNTAxMTMxMTU2MjNaMDMxMTAvBgNVBAMTKDE5ZjA3ZDllOTMyNTgx
ZDY3YjE1MzEzZWJiMGRjYTE2ODNkNmQ3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC09Yp03nNO5ldiwJUUC3BpzIkI9OrAEtDpCQfXJu6wmwZJujUw
pnuDI/NEuwIw/pz9lM60QlEOh3CvMhBPEIdZ5PiG8//jZ94nc8qSZPq5hHixF2FT
KTcs7KIRf2A7l98n0pRlXJQecp3JXWxBGtRwOS7Ua23Fc82/d3DS5u/5WDIKcAkO
te39RNyUY6Dk+PYwTH+HuNInsH9ZptmTOEDBSJFIxUf4JAFn+LKyBqGVxJjj/wIb
M6RkmjTz8SIKJAsh5cbrJToItviS2W/zGo6F2meiW9qT5zQIchEBcsIeK7Yh2EsJ
YGIbzL6M0EVxMO7f91Np/jMyFQJB0CGoLRRPAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUfd5HCSfIGCXGiBqV/Lt/70nJJxIwHwYDVR0jBBgwFoAUHwnjL6m85xxd2wZu
L4ZgqJY2THAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mMmFmYzUy
NDU4MjNiNGEyZTA1MTEyMTI2Nzc5NjUzYWIzMzJjMTA4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kYjAxMjFkMi1mNWE0LTRhNTUtODE2ZS0yMTk1YWZk
YzU0ZTIvMTlmMDdkOWU5MzI1ODFkNjdiMTUzMTNlYmIwZGNhMTY4M2Q2ZDc4Ni5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2RiMDEyMWQyLWY1YTQtNGE1NS04MTZlLTIxOTVh
ZmRjNTRlMi9mMmFmYzUyNDU4MjNiNGEyZTA1MTEyMTI2Nzc5NjUzYWIzMzJjMTA4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCwI2wMA0EAgACMAcDBQAoA0AgMA0GCSqGSIb3DQEBCwUAA4IB
AQCtFiLzIdK89jG23N2eRbSJFgQblEXJtzo+mS3wGQD5D31ae6cMO90NO+ouDkHH
trhSM6WHN8JeCtrTz2MolelWFb9YwywSZngsMFx8pWaCOSnRResazHJrsBeK7Dqa
rFlGxuZsFk4OLz7fJ3kxqufGIvArXNnXOXpKMIB+mmgwN37hi4wpPhqk3TeuLAxb
+O/ucgKf/o/aSx3yLbtxmuoaLqWbiH3XDDH4RLp86iHWrSeS2IcSRNxqQ4nptMQf
f0dFNc61QQqtJAMYkm3JK/76l3cUHbfbe0DuMX8Tse25EsbivMXC4aRkqm7ckaxT
EGHUq7FlC5/rYNDuJKYk2mb2
-----END CERTIFICATE-----