Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/99910812ff3c89736e6594ea1dc54d208185f54f.roa
File:                     99910812ff3c89736e6594ea1dc54d208185f54f.roa (raw, json)
Hash identifier:          cZZyFdk2bp0RTfpSvT8ZwElBiGVGfZBs9RUiHVgVa4Y=
Subject key identifier:   CD:15:78:46:32:A0:A1:D9:23:3B:F6:7D:39:07:0A:B5:50:28:43:96
Certificate issuer:       /CN=b33596c5bda819ba4815e88789b6d43c8973f503
Certificate serial:       1190C7
Authority key identifier: B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/99910812ff3c89736e6594ea1dc54d208185f54f.roa
Signing time:             Sat 25 Sep 2021 20:34:22 +0000
ROA not before:           Sat 25 Sep 2021 03:00:00 +0000
ROA not after:            Mon 25 Sep 2023 03:00:00 +0000
asID:                     263698
IP address blocks:        191.102.36.0/22 maxlen: 24
                          2803:aa80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151175 (0x1190c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33596c5bda819ba4815e88789b6d43c8973f503
        Validity
            Not Before: Sep 25 03:00:00 2021 GMT
            Not After : Sep 25 03:00:00 2023 GMT
        Subject: CN=99910812ff3c89736e6594ea1dc54d208185f54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:c1:44:2a:07:7d:f2:02:52:e7:55:a6:42:
                    68:20:aa:81:e2:d4:ac:b1:d3:b2:14:e2:74:81:cc:
                    e3:2c:22:10:c2:28:a1:3e:70:22:2b:0e:23:8d:d7:
                    d3:ea:2f:c5:30:bf:d8:65:ac:9f:9b:37:b2:e8:9f:
                    d6:56:49:c3:67:10:be:d3:e9:cb:89:cb:74:32:24:
                    a2:8e:15:72:97:78:de:0e:42:90:19:69:06:f2:e1:
                    6a:7f:41:df:bb:76:9a:e3:13:44:0d:e5:b5:4a:d5:
                    6e:e1:0c:17:a7:a5:68:81:79:94:5a:34:4e:fe:04:
                    ab:76:4f:50:bf:b2:9f:13:00:ff:d8:4c:1f:5d:18:
                    af:ae:cf:f9:1b:97:f0:88:58:df:1e:bd:a6:cf:8e:
                    c9:c4:5c:e7:be:e6:93:1b:44:7b:3d:69:01:68:9b:
                    77:dc:9d:b7:5b:e3:ca:38:ab:f3:33:0e:47:7b:c5:
                    6b:f7:23:f9:42:1c:1e:ab:47:ad:54:e8:51:31:cd:
                    a2:54:6a:94:c3:67:b5:3e:6b:03:6b:22:38:e1:3a:
                    1a:58:6b:4d:96:5a:99:7b:43:8d:ce:9c:e0:10:04:
                    60:c4:e5:db:9c:ac:f3:26:34:a4:b6:d2:67:47:05:
                    4e:ae:b6:20:75:c1:26:f9:aa:6d:b8:32:8d:53:71:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:78:46:32:A0:A1:D9:23:3B:F6:7D:39:07:0A:B5:50:28:43:96
            X509v3 Authority Key Identifier:
                keyid:B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/99910812ff3c89736e6594ea1dc54d208185f54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.36.0/22
                IPv6:
                  2803:aa80::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:71:e9:42:8d:eb:15:39:75:c6:97:c0:c9:c1:1e:c2:57:b5:
         d5:27:46:6f:a1:5d:8a:08:db:05:d1:6f:ce:57:13:00:d7:94:
         4e:2a:4c:4b:bc:8f:ce:0a:86:73:25:5d:4f:7c:58:ad:78:da:
         24:6f:6d:87:0e:58:3a:08:1c:15:3e:56:82:d7:9f:3c:09:ce:
         b6:ba:6a:70:35:13:26:95:48:04:90:0c:34:cc:35:49:74:25:
         c6:51:e4:86:9d:49:8b:2b:a3:56:8d:ab:c7:f1:b7:93:71:91:
         e7:12:c7:a6:81:00:19:30:a3:b4:52:41:84:b7:b9:d4:f6:b7:
         42:b2:e5:a7:b6:5b:97:dc:9f:33:7d:09:1f:85:29:82:ed:d5:
         1f:8d:1b:e2:17:8c:33:d0:0d:f2:1d:64:37:1a:b0:dc:9a:e1:
         41:df:ca:96:4a:f9:38:63:fe:1b:48:e3:07:b4:3e:0f:25:59:
         d1:66:42:6b:74:c7:87:0f:80:91:24:9e:d9:f0:85:f4:af:84:
         37:7e:46:2f:4e:aa:2c:b0:0c:53:0d:17:bf:82:ab:2b:a6:4a:
         97:69:12:c0:49:10:26:1e:0e:3f:a5:b3:78:c5:29:4d:ea:b9:
         cf:69:65:db:82:09:14:5a:83:60:92:68:b0:c4:bd:5b:12:9f:
         78:36:d4:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEZDHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
MzU5NmM1YmRhODE5YmE0ODE1ZTg4Nzg5YjZkNDNjODk3M2Y1MDMwHhcNMjEwOTI1
MDMwMDAwWhcNMjMwOTI1MDMwMDAwWjAzMTEwLwYDVQQDEyg5OTkxMDgxMmZmM2M4
OTczNmU2NTk0ZWExZGM1NGQyMDgxODVmNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgWHBRCoHffICUudVpkJoIKqB4tSssdOyFOJ0gczjLCIQwiih
PnAiKw4jjdfT6i/FML/YZayfmzey6J/WVknDZxC+0+nLict0MiSijhVyl3jeDkKQ
GWkG8uFqf0Hfu3aa4xNEDeW1StVu4QwXp6VogXmUWjRO/gSrdk9Qv7KfEwD/2Ewf
XRivrs/5G5fwiFjfHr2mz47JxFznvuaTG0R7PWkBaJt33J23W+PKOKvzMw5He8Vr
9yP5Qhweq0etVOhRMc2iVGqUw2e1PmsDayI44ToaWGtNllqZe0ONzpzgEARgxOXb
nKzzJjSkttJnRwVOrrYgdcEm+aptuDKNU3FPSwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFM0VeEYyoKHZIzv2fTkHCrVQKEOWMB8GA1UdIwQYMBaAFLSJX21KraCdnXUZ
8OTzFaFyBgKnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjMzNTk2
YzViZGE4MTliYTQ4MTVlODg3ODliNmQ0M2M4OTczZjUwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTFiNzc0MGQtNjRkOS00NDMxLWI4MTEtNjlhM2M1
OGY0OWVhLzk5OTEwODEyZmYzYzg5NzM2ZTY1OTRlYTFkYzU0ZDIwODE4NWY1NGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMWI3NzQwZC02NGQ5LTQ0MzEtYjgxMS02OWEz
YzU4ZjQ5ZWEvYjMzNTk2YzViZGE4MTliYTQ4MTVlODg3ODliNmQ0M2M4OTczZjUw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr9mJDANBAIAAjAHAwUAKAOqgDANBgkqhkiG9w0BAQsFAAOC
AQEAKHHpQo3rFTl1xpfAycEewle11SdGb6FdigjbBdFvzlcTANeUTipMS7yPzgqG
cyVdT3xYrXjaJG9thw5YOggcFT5WgtefPAnOtrpqcDUTJpVIBJAMNMw1SXQlxlHk
hp1JiyujVo2rx/G3k3GR5xLHpoEAGTCjtFJBhLe51Pa3QrLlp7Zbl9yfM30JH4Up
gu3VH40b4heMM9AN8h1kNxqw3JrhQd/Klkr5OGP+G0jjB7Q+DyVZ0WZCa3THhw+A
kSSe2fCF9K+EN35GL06qLLAMUw0Xv4KrK6ZKl2kSwEkQJh4OP6WzeMUpTeq5z2ll
24IJFFqDYJJosMS9WxKfeDbUZw==
-----END CERTIFICATE-----