Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/c04fd18264b9e32a6b005c74d7e900d5cb038176.roa
File:                     c04fd18264b9e32a6b005c74d7e900d5cb038176.roa (raw, json)
Hash identifier:          uSxG/DMzSm0V9bzeVrHbL39+INranDKVmuqxrN0TZXo=
Subject key identifier:   F4:25:54:99:48:A1:44:F2:09:6F:77:F1:35:24:E2:D7:2E:7A:DB:29
Certificate issuer:       /CN=f85e85fffe1bb0f5142940fd2d5236a44837f75e
Certificate serial:       068F5F
Authority key identifier: 41:D9:83:D2:5D:0E:F5:5D:33:BA:D7:D6:87:1A:97:CE:57:3F:7C:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85e85fffe1bb0f5142940fd2d5236a44837f75e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/c04fd18264b9e32a6b005c74d7e900d5cb038176.roa
Signing time:             Wed 24 Mar 2021 14:31:12 +0000
ROA not before:           Wed 24 Mar 2021 14:31:12 +0000
ROA not after:            Tue 24 Mar 2026 14:31:12 +0000
asID:                     269948
IP address blocks:        190.3.164.0/22 maxlen: 24
                          2803:7ae0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429919 (0x68f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85e85fffe1bb0f5142940fd2d5236a44837f75e
        Validity
            Not Before: Mar 24 14:31:12 2021 GMT
            Not After : Mar 24 14:31:12 2026 GMT
        Subject: CN=c04fd18264b9e32a6b005c74d7e900d5cb038176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:f3:20:92:3f:f8:51:6e:2b:a4:46:7c:f0:
                    92:7c:db:d5:fb:20:a7:e1:b6:0f:93:f3:b4:8c:ab:
                    70:b0:7e:c7:37:19:fa:d7:87:e9:c5:8f:d0:c5:9b:
                    ca:84:bb:66:49:77:80:4c:f9:5f:05:fa:a7:e5:80:
                    43:4b:d5:b2:6e:54:99:94:33:0e:73:de:5b:92:55:
                    8e:15:30:06:35:95:12:b6:06:83:42:9b:10:da:c3:
                    46:2a:86:c3:4e:79:be:6a:a9:d0:48:3d:2c:91:e0:
                    95:af:7c:01:e0:95:e1:f9:96:d0:af:96:b8:63:4a:
                    2c:71:5d:63:22:51:51:a7:6f:ad:4d:e5:97:47:8b:
                    44:b9:20:ec:33:b8:9d:6d:6f:eb:0d:b3:d4:12:7b:
                    e9:66:98:cd:72:94:6a:a4:65:ee:89:1e:11:8e:eb:
                    f6:f5:2e:99:d8:57:d8:24:c1:1b:08:f0:3f:95:27:
                    3d:c4:fb:83:26:9f:7a:eb:07:fe:b5:53:ca:80:9c:
                    16:3d:94:f2:68:79:31:8c:c6:21:6a:4d:6e:87:a4:
                    9e:ff:72:e0:ac:46:76:55:f6:a6:5a:a9:6b:03:9d:
                    a1:0d:3e:af:75:70:09:f9:e9:7a:ab:5e:92:1b:03:
                    e7:76:7e:ef:47:be:b1:01:ea:09:9b:cf:e1:b7:a7:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:25:54:99:48:A1:44:F2:09:6F:77:F1:35:24:E2:D7:2E:7A:DB:29
            X509v3 Authority Key Identifier:
                keyid:41:D9:83:D2:5D:0E:F5:5D:33:BA:D7:D6:87:1A:97:CE:57:3F:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85e85fffe1bb0f5142940fd2d5236a44837f75e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/c04fd18264b9e32a6b005c74d7e900d5cb038176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb8513f0-936a-46f7-a3af-c0ffbd61681f/f85e85fffe1bb0f5142940fd2d5236a44837f75e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.164.0/22
                IPv6:
                  2803:7ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:c7:dc:f1:30:5f:84:03:5b:27:09:21:ec:fc:f6:1f:dc:
         8d:b7:39:61:ee:e4:56:89:51:dc:da:37:f0:bf:21:e8:c8:09:
         ee:00:72:a3:57:8e:22:82:01:9b:b3:6f:a4:45:c6:b6:06:39:
         d5:3d:f2:e8:3b:a6:5a:d8:12:88:b8:41:2e:c7:d9:78:e9:ae:
         e3:09:87:0c:59:0c:a3:57:2f:d8:3f:77:01:2c:72:c1:a5:58:
         f4:91:55:d8:41:3f:b0:dd:e6:76:a3:c7:78:52:de:26:3d:f1:
         8c:ff:a7:ee:1f:72:2a:ad:e8:09:06:ba:1c:85:cd:ba:a3:95:
         87:1d:bc:8d:dc:bb:f3:70:36:5c:52:99:7a:33:62:99:d5:1b:
         d3:c0:7e:ef:47:db:3d:f2:ee:8e:c9:62:e9:26:2c:b4:61:96:
         74:a5:db:f8:c7:ed:d0:bf:54:a5:14:78:22:b4:f2:8d:33:67:
         ec:8d:58:53:59:56:4e:c2:c8:e9:08:15:c6:a3:45:b8:89:f6:
         80:ea:8a:ab:29:84:e0:0b:36:4b:ba:57:e6:6f:98:21:26:67:
         06:5b:95:ba:de:b7:a5:1e:61:90:35:dc:95:87:d2:14:9d:9e:
         f7:bf:76:f6:6b:72:5b:ee:83:55:5d:ae:14:b3:73:ac:01:53:
         e0:c8:07:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBo9fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
NWU4NWZmZmUxYmIwZjUxNDI5NDBmZDJkNTIzNmE0NDgzN2Y3NWUwHhcNMjEwMzI0
MTQzMTEyWhcNMjYwMzI0MTQzMTEyWjAzMTEwLwYDVQQDEyhjMDRmZDE4MjY0Yjll
MzJhNmIwMDVjNzRkN2U5MDBkNWNiMDM4MTc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0XPzIJI/+FFuK6RGfPCSfNvV+yCn4bYPk/O0jKtwsH7HNxn6
14fpxY/QxZvKhLtmSXeATPlfBfqn5YBDS9WyblSZlDMOc95bklWOFTAGNZUStgaD
QpsQ2sNGKobDTnm+aqnQSD0skeCVr3wB4JXh+ZbQr5a4Y0oscV1jIlFRp2+tTeWX
R4tEuSDsM7idbW/rDbPUEnvpZpjNcpRqpGXuiR4Rjuv29S6Z2FfYJMEbCPA/lSc9
xPuDJp966wf+tVPKgJwWPZTyaHkxjMYhak1uh6Se/3LgrEZ2VfamWqlrA52hDT6v
dXAJ+el6q16SGwPndn7vR76xAeoJm8/ht6czZwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPQlVJlIoUTyCW938TUk4tcuetspMB8GA1UdIwQYMBaAFEHZg9JdDvVdM7rX
1ocal85XP3zOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjg1ZTg1
ZmZmZTFiYjBmNTE0Mjk0MGZkMmQ1MjM2YTQ0ODM3Zjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWI4NTEzZjAtOTM2YS00NmY3LWEzYWYtYzBmZmJk
NjE2ODFmL2MwNGZkMTgyNjRiOWUzMmE2YjAwNWM3NGQ3ZTkwMGQ1Y2IwMzgxNzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYjg1MTNmMC05MzZhLTQ2ZjctYTNhZi1jMGZm
YmQ2MTY4MWYvZjg1ZTg1ZmZmZTFiYjBmNTE0Mjk0MGZkMmQ1MjM2YTQ0ODM3Zjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr4DpDANBAIAAjAHAwUAKAN64DANBgkqhkiG9w0BAQsFAAOC
AQEAEZzH3PEwX4QDWycJIez89h/cjbc5Ye7kVolR3No38L8h6MgJ7gByo1eOIoIB
m7NvpEXGtgY51T3y6DumWtgSiLhBLsfZeOmu4wmHDFkMo1cv2D93ASxywaVY9JFV
2EE/sN3mdqPHeFLeJj3xjP+n7h9yKq3oCQa6HIXNuqOVhx28jdy783A2XFKZejNi
mdUb08B+70fbPfLujsli6SYstGGWdKXb+Mft0L9UpRR4IrTyjTNn7I1YU1lWTsLI
6QgVxqNFuIn2gOqKqymE4As2S7pX5m+YISZnBluVut63pR5hkDXclYfSFJ2e9792
9mtyW+6DVV2uFLNzrAFT4MgH9A==
-----END CERTIFICATE-----