Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/90d481ea61ec3a25242938a8433ec971649decdd.roa
File:                     90d481ea61ec3a25242938a8433ec971649decdd.roa (raw, json)
Hash identifier:          M8qFY3ZZV0puQ8+ABGeRWhgRadFvdcHFcdm8JmgmEs8=
Subject key identifier:   F0:70:8B:73:F6:BA:73:4B:90:85:9D:2D:6F:E7:9B:BA:09:3F:67:D8
Certificate issuer:       /CN=28f10c441369c1387ed2084a1a987d9f4016969d
Certificate serial:       0D76D1
Authority key identifier: 05:3A:DA:DC:9E:42:28:2A:68:70:16:C8:C0:84:EA:94:6A:A6:0E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f10c441369c1387ed2084a1a987d9f4016969d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/90d481ea61ec3a25242938a8433ec971649decdd.roa
Signing time:             Wed 24 Mar 2021 14:34:25 +0000
ROA not before:           Wed 24 Mar 2021 14:34:25 +0000
ROA not after:            Tue 24 Mar 2026 14:34:25 +0000
asID:                     64114
IP address blocks:        179.61.12.0/22 maxlen: 24
                          2803:5c80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882385 (0xd76d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f10c441369c1387ed2084a1a987d9f4016969d
        Validity
            Not Before: Mar 24 14:34:25 2021 GMT
            Not After : Mar 24 14:34:25 2026 GMT
        Subject: CN=90d481ea61ec3a25242938a8433ec971649decdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:be:c6:fb:84:1c:34:fd:9b:5d:6c:6f:2c:
                    69:f6:cb:bc:f8:47:0f:4e:05:d7:3a:8c:2b:41:e2:
                    da:11:1e:e6:06:d8:63:b1:5e:ad:1e:ac:da:37:51:
                    fd:25:6c:b5:90:3d:bd:24:51:fe:1b:e6:e2:41:4d:
                    bb:0e:3c:47:8c:d8:79:5c:9d:6b:5c:ed:86:f1:f4:
                    ff:4c:4e:d4:58:66:8a:73:37:0d:ad:04:92:30:ac:
                    c7:6b:3e:0f:ab:8b:f1:14:35:24:d2:a7:1c:29:c4:
                    3d:b0:16:52:3d:2c:37:0b:87:00:75:dd:75:3b:d6:
                    1a:e9:54:f8:97:76:1c:f4:eb:bf:63:37:ae:e8:67:
                    32:e4:7d:d6:52:97:ae:67:eb:58:33:15:24:d7:a7:
                    c7:55:71:d3:69:f1:c7:4a:83:69:2c:fe:90:55:7d:
                    13:5a:3d:47:29:de:04:ce:fb:51:03:4c:00:e2:f2:
                    a5:b2:74:4a:75:68:71:d7:45:87:da:33:7c:ca:40:
                    c8:d1:d0:a6:3b:06:bd:e6:32:9f:e2:e8:fa:8d:62:
                    fe:f8:71:96:8c:9e:da:41:62:ab:bd:2b:6d:69:cd:
                    1b:0e:15:93:e1:e7:06:27:34:c6:8f:63:50:1e:80:
                    34:e9:0c:34:d1:9d:e9:80:48:b7:14:d6:b4:d7:78:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:70:8B:73:F6:BA:73:4B:90:85:9D:2D:6F:E7:9B:BA:09:3F:67:D8
            X509v3 Authority Key Identifier:
                keyid:05:3A:DA:DC:9E:42:28:2A:68:70:16:C8:C0:84:EA:94:6A:A6:0E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f10c441369c1387ed2084a1a987d9f4016969d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/90d481ea61ec3a25242938a8433ec971649decdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/28f10c441369c1387ed2084a1a987d9f4016969d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.12.0/22
                IPv6:
                  2803:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:9c:12:b3:32:b9:2f:80:90:f7:75:5d:0e:79:26:6b:02:
         40:91:85:89:fa:f8:e2:04:ad:88:5e:aa:5b:c5:1c:94:02:c3:
         be:99:96:7d:5c:da:cd:e6:8b:62:58:cd:84:e3:82:09:de:e7:
         5b:b8:80:17:58:60:ca:df:b7:85:ae:c2:5c:57:7a:37:74:fa:
         14:5d:53:9c:2e:65:e8:96:73:db:de:0c:0d:e9:ce:c6:4c:5f:
         fa:76:40:ed:f3:f3:51:81:bc:71:5d:f3:e5:08:ea:f5:ec:b8:
         bc:e9:ac:10:e9:eb:eb:d8:3e:aa:62:d9:c2:99:f9:5e:74:71:
         44:26:16:04:f5:bc:fb:b4:de:c5:db:f6:12:51:d5:c3:a6:df:
         23:05:11:e0:16:bc:a3:73:16:ef:e6:6a:93:eb:5e:82:6f:97:
         92:45:fc:00:44:79:a8:8f:6c:97:36:71:01:0a:ea:09:ad:c1:
         af:b9:34:df:f1:59:57:30:f8:a5:5a:b2:6e:4c:6a:1b:35:74:
         fb:25:e0:03:e2:18:28:16:1e:8e:c3:cd:e2:f9:e0:4a:2d:11:
         95:e0:5b:1d:09:68:c9:4d:f0:bd:f7:bc:14:43:bc:3d:df:d7:
         b6:ec:d8:a8:25:67:b5:21:6b:ee:fb:5a:55:08:9b:e1:69:54:
         68:78:0f:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDXbRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
ZjEwYzQ0MTM2OWMxMzg3ZWQyMDg0YTFhOTg3ZDlmNDAxNjk2OWQwHhcNMjEwMzI0
MTQzNDI1WhcNMjYwMzI0MTQzNDI1WjAzMTEwLwYDVQQDEyg5MGQ0ODFlYTYxZWMz
YTI1MjQyOTM4YTg0MzNlYzk3MTY0OWRlY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApTi+xvuEHDT9m11sbyxp9su8+EcPTgXXOowrQeLaER7mBthj
sV6tHqzaN1H9JWy1kD29JFH+G+biQU27DjxHjNh5XJ1rXO2G8fT/TE7UWGaKczcN
rQSSMKzHaz4Pq4vxFDUk0qccKcQ9sBZSPSw3C4cAdd11O9Ya6VT4l3Yc9Ou/Yzeu
6Gcy5H3WUpeuZ+tYMxUk16fHVXHTafHHSoNpLP6QVX0TWj1HKd4EzvtRA0wA4vKl
snRKdWhx10WH2jN8ykDI0dCmOwa95jKf4uj6jWL++HGWjJ7aQWKrvSttac0bDhWT
4ecGJzTGj2NQHoA06Qw00Z3pgEi3FNa013jl/wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPBwi3P2unNLkIWdLW/nm7oJP2fYMB8GA1UdIwQYMBaAFAU62tyeQigqaHAW
yMCE6pRqpg5QMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhmMTBj
NDQxMzY5YzEzODdlZDIwODRhMWE5ODdkOWY0MDE2OTY5ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTQ1MjVlMjAtMzlhYS00ZWZlLWFlMTUtZDAwZTY4
MGVhMjI0LzkwZDQ4MWVhNjFlYzNhMjUyNDI5MzhhODQzM2VjOTcxNjQ5ZGVjZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNDUyNWUyMC0zOWFhLTRlZmUtYWUxNS1kMDBl
NjgwZWEyMjQvMjhmMTBjNDQxMzY5YzEzODdlZDIwODRhMWE5ODdkOWY0MDE2OTY5
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArM9DDANBAIAAjAHAwUAKANcgDANBgkqhkiG9w0BAQsFAAOC
AQEANLicErMyuS+AkPd1XQ55JmsCQJGFifr44gStiF6qW8UclALDvpmWfVzazeaL
YljNhOOCCd7nW7iAF1hgyt+3ha7CXFd6N3T6FF1TnC5l6JZz294MDenOxkxf+nZA
7fPzUYG8cV3z5Qjq9ey4vOmsEOnr69g+qmLZwpn5XnRxRCYWBPW8+7Texdv2ElHV
w6bfIwUR4Ba8o3MW7+Zqk+tegm+XkkX8AER5qI9slzZxAQrqCa3Br7k03/FZVzD4
pVqybkxqGzV0+yXgA+IYKBYejsPN4vngSi0RleBbHQloyU3wvfe8FEO8Pd/XtuzY
qCVntSFr7vtaVQib4WlUaHgPXg==
-----END CERTIFICATE-----