Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/298c9e2ae65f3699500ec915f0d03bde4d425867.roa
File:                     298c9e2ae65f3699500ec915f0d03bde4d425867.roa (raw, json)
Hash identifier:          cdInC1olcIL1jfstWqNsxaUSeOS5dQCIv79c5H1b0E8=
Subject key identifier:   C2:DC:FE:8D:DB:EC:87:04:70:0E:23:07:95:AC:09:00:29:13:06:61
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       0D778C
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/298c9e2ae65f3699500ec915f0d03bde4d425867.roa
Signing time:             Thu 21 Jul 2022 19:26:29 +0000
ROA not before:           Tue 29 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
                          190.98.0.0/19 maxlen: 19
                          190.98.32.0/19 maxlen: 24
                          190.98.64.0/19 maxlen: 19
                          190.98.96.0/19 maxlen: 24
                          200.1.156.0/22 maxlen: 24
                          200.2.160.0/20 maxlen: 24
                          200.2.176.0/20 maxlen: 24
                          2803:a200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882572 (0xd778c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jun 29 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=298c9e2ae65f3699500ec915f0d03bde4d425867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:1e:c3:a1:f9:49:b5:b0:ee:06:e6:b6:5c:
                    3f:27:72:20:78:6f:e2:75:cd:d6:e8:c6:07:02:6d:
                    72:b1:c6:cd:1a:31:2c:6a:43:1c:53:c6:19:6a:2a:
                    61:b8:ef:35:e2:2f:f4:0f:be:66:ee:ca:09:eb:9b:
                    b2:25:f7:f7:d2:75:9a:81:dd:04:6b:3d:2e:7b:cc:
                    a7:10:d3:93:e3:36:4e:1e:c1:27:15:a6:0c:46:ce:
                    7a:1e:41:8a:98:20:bc:fd:b8:6f:94:d6:11:20:16:
                    ba:93:7e:4e:d2:8d:f2:fb:8a:6e:04:92:4f:72:69:
                    91:d4:f5:5a:4f:92:b3:aa:31:a6:3a:ea:5c:18:68:
                    1f:4c:23:a8:ce:bb:0e:3e:c9:c1:7c:09:b2:41:e1:
                    30:6f:43:20:5b:c5:ad:af:fb:b7:34:96:91:06:cc:
                    11:bc:3c:9a:b2:f0:94:92:85:70:c5:1a:bc:2b:42:
                    a4:55:ee:20:32:83:5c:e2:17:a8:22:c8:e0:f1:66:
                    f5:5e:1e:fa:ac:d1:d9:1d:ea:dd:31:ae:09:9a:88:
                    5e:30:18:dc:66:27:3d:54:ba:20:61:d9:dd:b3:66:
                    f7:65:7f:3a:b6:25:70:45:61:01:bb:40:1f:76:6b:
                    35:64:88:05:fc:72:77:b8:e2:2d:24:a5:fd:6b:7f:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DC:FE:8D:DB:EC:87:04:70:0E:23:07:95:AC:09:00:29:13:06:61
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/298c9e2ae65f3699500ec915f0d03bde4d425867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17
                  190.98.0.0/17
                  200.1.156.0/22
                  200.2.160.0/19
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:db:60:f1:b7:c9:d1:68:af:fe:e6:5f:0c:d8:6f:50:be:09:
         1a:d2:51:2c:49:46:ce:d1:bd:45:65:ff:58:85:f1:81:ce:22:
         57:bc:b7:42:68:e2:74:4b:90:f3:1b:91:bd:c8:54:2f:aa:29:
         ce:43:78:d3:62:f4:8d:af:7f:85:b9:93:9c:57:53:19:70:5e:
         7b:12:ff:c3:40:40:81:c0:d6:d3:94:d9:f0:3d:41:e7:c6:c8:
         9f:a5:e6:6e:a2:54:28:0c:81:5d:04:7a:e4:05:02:fd:b6:31:
         21:9b:d9:1b:02:23:50:87:48:2b:bf:e2:26:3e:e5:e7:ac:5e:
         e9:53:5c:85:ed:a1:0d:15:24:b0:16:d0:9f:52:19:bc:76:06:
         49:e0:d9:45:0c:4c:93:0a:05:82:63:1a:b9:53:23:37:d2:bf:
         f9:03:cc:5e:45:80:78:52:db:8c:da:c6:b7:3f:6d:63:db:34:
         ab:85:d3:a5:fc:65:30:65:7b:bf:b7:cc:aa:8d:45:cc:98:b3:
         1a:14:3e:d0:2f:a9:ed:1d:2d:4b:8c:51:c1:48:bf:05:fa:13:
         74:31:b3:2e:dc:70:b4:fa:ff:e5:ac:36:6b:aa:30:40:e1:c2:
         05:2d:e0:9b:2d:76:5d:db:37:4f:96:85:a8:87:cb:d8:a7:11:
         8e:30:c9:a7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDDXeMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
MDczZGM1MGQzODhmNWU0Yjg0MTYxNzMzMjllNWM5ZmI1NWJhY2MwHhcNMjEwNjI5
MDMwMDAwWhcNMjMwNjI5MDMwMDAwWjAzMTEwLwYDVQQDEygyOThjOWUyYWU2NWYz
Njk5NTAwZWM5MTVmMGQwM2JkZTRkNDI1ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvi4ew6H5SbWw7gbmtlw/J3IgeG/idc3W6MYHAm1yscbNGjEs
akMcU8YZaiphuO814i/0D75m7soJ65uyJff30nWagd0Eaz0ue8ynENOT4zZOHsEn
FaYMRs56HkGKmCC8/bhvlNYRIBa6k35O0o3y+4puBJJPcmmR1PVaT5KzqjGmOupc
GGgfTCOozrsOPsnBfAmyQeEwb0MgW8Wtr/u3NJaRBswRvDyasvCUkoVwxRq8K0Kk
Ve4gMoNc4heoIsjg8Wb1Xh76rNHZHerdMa4JmoheMBjcZic9VLogYdnds2b3ZX86
tiVwRWEBu0Afdms1ZIgF/HJ3uOItJKX9a3/o1wIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFMLc/o3b7IcEcA4jB5WsCQApEwZhMB8GA1UdIwQYMBaAFO+rATNTEJZGrayk
rcWY3KdEQ0XJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWYwNzNk
YzUwZDM4OGY1ZTRiODQxNjE3MzMyOWU1YzlmYjU1YmFjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWJiNzFkYTktMzgwOC00ZDAwLWE5NDMtNTg5MjQw
ZDc4Mzg1LzI5OGM5ZTJhZTY1ZjM2OTk1MDBlYzkxNWYwZDAzYmRlNGQ0MjU4Njcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYmI3MWRhOS0zODA4LTRkMDAtYTk0My01ODky
NDBkNzgzODUvNWYwNzNkYzUwZDM4OGY1ZTRiODQxNjE3MzMyOWU1YzlmYjU1YmFj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEB7qzgAMEB75iAAMEAsgBnAMEBcgCoDANBAIAAjAHAwUAKAOi
ADANBgkqhkiG9w0BAQsFAAOCAQEAMdtg8bfJ0Wiv/uZfDNhvUL4JGtJRLElGztG9
RWX/WIXxgc4iV7y3QmjidEuQ8xuRvchUL6opzkN402L0ja9/hbmTnFdTGXBeexL/
w0BAgcDW05TZ8D1B58bIn6XmbqJUKAyBXQR65AUC/bYxIZvZGwIjUIdIK7/iJj7l
56xe6VNche2hDRUksBbQn1IZvHYGSeDZRQxMkwoFgmMauVMjN9K/+QPMXkWAeFLb
jNrGtz9tY9s0q4XTpfxlMGV7v7fMqo1FzJizGhQ+0C+p7R0tS4xRwUi/BfoTdDGz
LtxwtPr/5aw2a6owQOHCBS3gmy12Xds3T5aFqIfL2KcRjjDJpw==
-----END CERTIFICATE-----