Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/4015dbcccddbac5d75425c97d40e3ffebbd774ba.roa
File:                     4015dbcccddbac5d75425c97d40e3ffebbd774ba.roa (raw, json)
Hash identifier:          IkNIpDu2wqO6s32Gfvw86awB+pgUSnLYC1kcLaH8qPw=
Subject key identifier:   C2:59:8B:39:9D:4D:04:05:68:AD:DD:71:0E:B7:6E:1D:86:62:92:52
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       088861
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/4015dbcccddbac5d75425c97d40e3ffebbd774ba.roa
Signing time:             Wed 05 Jan 2022 02:36:36 +0000
ROA not before:           Tue 29 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
                          190.98.0.0/19 maxlen: 19
                          190.98.32.0/19 maxlen: 24
                          190.98.64.0/19 maxlen: 19
                          190.98.96.0/19 maxlen: 24
                          200.1.156.0/22 maxlen: 24
                          200.2.160.0/20 maxlen: 24
                          200.2.176.0/20 maxlen: 24
                          2803:a200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559201 (0x88861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jun 29 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=4015dbcccddbac5d75425c97d40e3ffebbd774ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:96:e9:2b:8a:47:60:c2:db:6f:82:cf:3f:
                    ec:cd:b8:51:71:97:32:55:01:ac:74:7d:b0:f9:c4:
                    ac:e6:75:0d:a6:c3:17:c1:0a:6d:ff:d7:fd:80:43:
                    5b:e8:21:52:f8:50:11:f3:6e:57:f8:2a:0c:4c:5a:
                    c5:a0:8c:bf:ec:8c:4a:51:8d:c9:64:6d:cf:14:79:
                    74:39:89:ca:eb:67:72:3b:0c:c1:82:9a:69:c6:c7:
                    46:6a:b4:aa:d8:42:e3:00:95:2d:3c:c3:f6:84:73:
                    56:e9:cf:e8:fa:26:bf:84:91:1c:02:d2:02:72:ce:
                    bd:c5:d5:61:3b:33:5a:c4:27:c8:ef:c8:b9:38:3f:
                    d7:cc:29:3f:bb:1a:08:39:af:19:e1:bd:1c:c4:bb:
                    14:bf:18:ed:5b:fc:bd:18:b6:cf:22:c0:e5:d9:cd:
                    1c:79:58:50:b7:41:c8:44:38:df:d0:ea:e9:fb:13:
                    a2:de:ef:20:fb:34:54:f4:c5:3b:0d:2a:2c:86:de:
                    d7:de:2d:fa:db:93:20:2a:71:81:db:e0:cf:84:36:
                    b8:6a:79:1b:42:f2:d0:69:95:f6:c4:20:a3:1d:4f:
                    8a:80:14:dc:3b:cb:05:ec:dd:07:9c:13:39:33:2a:
                    b4:e5:72:ea:b1:b9:aa:79:1d:d7:c8:79:99:65:1e:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:59:8B:39:9D:4D:04:05:68:AD:DD:71:0E:B7:6E:1D:86:62:92:52
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/4015dbcccddbac5d75425c97d40e3ffebbd774ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17
                  190.98.0.0/17
                  200.1.156.0/22
                  200.2.160.0/19
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:27:b7:e1:f6:16:d2:63:9f:05:0b:d8:dc:bc:a1:55:2d:
         43:cf:83:0c:0f:34:93:ff:af:d1:c0:e4:9a:e0:ab:c3:43:9a:
         77:99:1b:97:7d:30:cf:e0:cc:97:5a:4b:fe:97:58:7e:da:19:
         e9:71:10:b1:3b:ef:f9:1c:68:8b:95:8e:b2:bd:21:8b:0f:87:
         f7:73:b7:9f:f7:56:3b:4c:d4:8e:ea:72:2c:99:e7:e5:35:be:
         77:0e:0f:56:b6:73:56:db:1f:78:44:87:e1:bc:62:2a:11:34:
         51:c0:a2:ee:50:08:89:cf:0b:18:17:8e:8c:3d:09:d8:b2:21:
         54:79:37:1e:7c:39:86:e3:f9:71:9b:db:b2:b8:a4:0a:8e:36:
         c3:22:19:d1:32:76:d2:0b:fb:87:0e:59:a2:5c:36:e8:b4:e1:
         be:3c:88:c8:aa:56:7c:79:b0:eb:6b:ad:2c:e8:1e:d2:3c:c7:
         ac:aa:4e:c9:4d:cd:2a:02:b2:f8:34:72:7f:f9:58:be:ae:50:
         ed:1f:06:25:e6:a6:8d:ff:89:c6:14:e8:4e:16:f9:67:d9:85:
         2a:24:73:75:15:38:95:d6:01:8f:9b:3c:33:90:42:ec:3c:84:
         1b:8c:fd:c8:18:07:97:4e:59:46:2b:17:4e:0a:57:7e:54:d3:
         50:34:8c:43
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDCIhhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
MDczZGM1MGQzODhmNWU0Yjg0MTYxNzMzMjllNWM5ZmI1NWJhY2MwHhcNMjEwNjI5
MDMwMDAwWhcNMjMwNjI5MDMwMDAwWjAzMTEwLwYDVQQDEyg0MDE1ZGJjY2NkZGJh
YzVkNzU0MjVjOTdkNDBlM2ZmZWJiZDc3NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4EyW6SuKR2DC22+Czz/szbhRcZcyVQGsdH2w+cSs5nUNpsMX
wQpt/9f9gENb6CFS+FAR825X+CoMTFrFoIy/7IxKUY3JZG3PFHl0OYnK62dyOwzB
gpppxsdGarSq2ELjAJUtPMP2hHNW6c/o+ia/hJEcAtICcs69xdVhOzNaxCfI78i5
OD/XzCk/uxoIOa8Z4b0cxLsUvxjtW/y9GLbPIsDl2c0ceVhQt0HIRDjf0Orp+xOi
3u8g+zRU9MU7DSosht7X3i3625MgKnGB2+DPhDa4ankbQvLQaZX2xCCjHU+KgBTc
O8sF7N0HnBM5Myq05XLqsbmqeR3XyHmZZR5EzwIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFMJZizmdTQQFaK3dcQ63bh2GYpJSMB8GA1UdIwQYMBaAFO+rATNTEJZGrayk
rcWY3KdEQ0XJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWYwNzNk
YzUwZDM4OGY1ZTRiODQxNjE3MzMyOWU1YzlmYjU1YmFjYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWJiNzFkYTktMzgwOC00ZDAwLWE5NDMtNTg5MjQw
ZDc4Mzg1LzQwMTVkYmNjY2RkYmFjNWQ3NTQyNWM5N2Q0MGUzZmZlYmJkNzc0YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYmI3MWRhOS0zODA4LTRkMDAtYTk0My01ODky
NDBkNzgzODUvNWYwNzNkYzUwZDM4OGY1ZTRiODQxNjE3MzMyOWU1YzlmYjU1YmFj
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEB7qzgAMEB75iAAMEAsgBnAMEBcgCoDANBAIAAjAHAwUAKAOi
ADANBgkqhkiG9w0BAQsFAAOCAQEAkOQnt+H2FtJjnwUL2Ny8oVUtQ8+DDA80k/+v
0cDkmuCrw0Oad5kbl30wz+DMl1pL/pdYftoZ6XEQsTvv+Rxoi5WOsr0hiw+H93O3
n/dWO0zUjupyLJnn5TW+dw4PVrZzVtsfeESH4bxiKhE0UcCi7lAIic8LGBeOjD0J
2LIhVHk3Hnw5huP5cZvbsrikCo42wyIZ0TJ20gv7hw5Zolw26LThvjyIyKpWfHmw
62utLOge0jzHrKpOyU3NKgKy+DRyf/lYvq5Q7R8GJeamjf+JxhToThb5Z9mFKiRz
dRU4ldYBj5s8M5BC7DyEG4z9yBgHl05ZRisXTgpXflTTUDSMQw==
-----END CERTIFICATE-----