Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/30d199378338a7d302cf6e6a3ebe0ec5f7de3e5b.roa
File:                     30d199378338a7d302cf6e6a3ebe0ec5f7de3e5b.roa (raw, json)
Hash identifier:          J7rwBczRjq6nGr3YwHEYGep1iUya2GeilKBE6uvDCTM=
Subject key identifier:   E7:10:2A:EF:80:64:06:CC:DC:54:BB:21:F9:3A:3E:CB:FE:E3:E6:7F
Certificate issuer:       /CN=697f7b62a9effacb2f280acd01e6e06384827e4d
Certificate serial:       0D26DA
Authority key identifier: B4:2B:DF:40:82:FA:C1:81:C2:46:57:25:EE:17:B7:E7:E0:7A:06:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/697f7b62a9effacb2f280acd01e6e06384827e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/30d199378338a7d302cf6e6a3ebe0ec5f7de3e5b.roa
Signing time:             Wed 24 Mar 2021 14:39:25 +0000
ROA not before:           Wed 24 Mar 2021 14:39:25 +0000
ROA not after:            Tue 24 Mar 2026 14:39:25 +0000
asID:                     262212
IP address blocks:        190.96.104.0/21 maxlen: 21
                          2801:0:270::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861914 (0xd26da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697f7b62a9effacb2f280acd01e6e06384827e4d
        Validity
            Not Before: Mar 24 14:39:25 2021 GMT
            Not After : Mar 24 14:39:25 2026 GMT
        Subject: CN=30d199378338a7d302cf6e6a3ebe0ec5f7de3e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:f6:d3:35:30:03:32:fd:98:dd:9c:d4:28:
                    2a:9d:7e:ce:1e:af:90:36:2d:41:cc:98:69:9e:6d:
                    34:bd:a1:c7:ed:5d:07:86:d8:fc:ad:9f:9c:6f:7f:
                    fd:2b:1c:fb:08:51:d6:a9:5e:4f:ef:01:c6:fd:bf:
                    1b:bf:22:c7:3c:8f:90:15:f4:46:f5:da:72:51:61:
                    1d:74:4f:0d:d8:df:f5:06:65:8e:77:f8:bc:ad:10:
                    03:f4:c1:4c:ee:84:28:4b:dd:13:84:b9:4f:a1:f4:
                    ae:20:53:31:0c:1f:cb:40:2c:26:f5:f9:d1:31:9e:
                    c5:94:68:94:9f:04:45:9f:05:0f:45:00:0b:f2:ff:
                    29:85:9c:04:34:a3:2b:5b:6e:8c:4e:2f:4a:b0:7a:
                    62:31:86:8b:1c:45:10:a4:49:bc:da:f7:4b:a7:60:
                    6e:04:35:34:d2:dd:2a:65:a3:a1:68:65:d7:21:1b:
                    8f:cd:13:a3:d2:d4:7f:a1:98:d5:dd:8b:f9:30:d7:
                    24:1e:b7:01:c6:1c:71:39:cf:dc:1f:dc:29:89:3f:
                    62:e3:a3:69:51:f5:ac:58:a6:5e:ef:5b:ed:df:33:
                    7e:ec:c6:2d:cf:72:c0:12:1c:f1:a3:24:94:8c:ec:
                    75:7d:51:a4:79:95:4e:c4:18:a4:1f:62:88:13:bd:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:10:2A:EF:80:64:06:CC:DC:54:BB:21:F9:3A:3E:CB:FE:E3:E6:7F
            X509v3 Authority Key Identifier:
                keyid:B4:2B:DF:40:82:FA:C1:81:C2:46:57:25:EE:17:B7:E7:E0:7A:06:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/697f7b62a9effacb2f280acd01e6e06384827e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/30d199378338a7d302cf6e6a3ebe0ec5f7de3e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0befb15-8008-4f60-9a26-19fcfe1a5c34/697f7b62a9effacb2f280acd01e6e06384827e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.104.0/21
                IPv6:
                  2801:0:270::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:25:43:62:f7:d7:14:c2:bb:9b:8f:a3:c2:7f:ec:91:4f:1c:
         bf:35:cc:1d:73:3b:61:54:f1:08:40:fd:28:68:2a:7d:bb:60:
         7b:c1:44:cf:31:53:c9:96:29:2f:5d:7c:a1:5e:6d:1b:8e:a7:
         cc:6a:06:33:55:1c:87:e5:6a:a3:ca:d2:00:14:fd:1d:85:bf:
         1f:75:f0:c3:31:32:54:93:b7:4a:2b:2f:4a:b2:46:c3:96:64:
         ea:0d:be:6a:3b:56:4b:24:b4:c6:e1:34:eb:7c:f0:37:34:c5:
         fe:ea:fd:8a:42:79:b5:c5:55:e2:35:29:b6:ff:cf:0f:4a:c9:
         3c:40:c7:39:70:78:c6:a4:bb:0e:90:cd:44:b1:b2:35:54:ab:
         03:6b:f2:de:51:1f:08:2c:dd:c4:19:2e:dc:df:ab:58:58:1f:
         41:ea:7b:f9:f1:4d:4e:f7:c6:a0:93:ad:38:ce:3a:8b:4e:ee:
         20:11:b5:48:55:2b:d0:28:b9:b4:38:fa:dd:08:df:ca:af:17:
         c0:2d:a6:f1:23:90:c6:88:22:b6:2a:7d:85:d0:35:5a:ea:d3:
         d1:9c:85:6a:3b:63:ac:d8:95:c9:ce:9a:58:42:5e:7a:e4:c8:
         03:7a:c6:11:5b:d7:ef:9d:6f:dc:b0:83:88:97:e8:a3:26:e4:
         d4:89:97:6e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDSbaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
N2Y3YjYyYTllZmZhY2IyZjI4MGFjZDAxZTZlMDYzODQ4MjdlNGQwHhcNMjEwMzI0
MTQzOTI1WhcNMjYwMzI0MTQzOTI1WjAzMTEwLwYDVQQDEygzMGQxOTkzNzgzMzhh
N2QzMDJjZjZlNmEzZWJlMGVjNWY3ZGUzZTViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnc/20zUwAzL9mN2c1CgqnX7OHq+QNi1BzJhpnm00vaHH7V0H
htj8rZ+cb3/9Kxz7CFHWqV5P7wHG/b8bvyLHPI+QFfRG9dpyUWEddE8N2N/1BmWO
d/i8rRAD9MFM7oQoS90ThLlPofSuIFMxDB/LQCwm9fnRMZ7FlGiUnwRFnwUPRQAL
8v8phZwENKMrW26MTi9KsHpiMYaLHEUQpEm82vdLp2BuBDU00t0qZaOhaGXXIRuP
zROj0tR/oZjV3Yv5MNckHrcBxhxxOc/cH9wpiT9i46NpUfWsWKZe71vt3zN+7MYt
z3LAEhzxoySUjOx1fVGkeZVOxBikH2KIE731FQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFOcQKu+AZAbM3FS7Ifk6Psv+4+Z/MB8GA1UdIwQYMBaAFLQr30CC+sGBwkZX
Je4Xt+fgega3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjk3Zjdi
NjJhOWVmZmFjYjJmMjgwYWNkMDFlNmUwNjM4NDgyN2U0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjBiZWZiMTUtODAwOC00ZjYwLTlhMjYtMTlmY2Zl
MWE1YzM0LzMwZDE5OTM3ODMzOGE3ZDMwMmNmNmU2YTNlYmUwZWM1ZjdkZTNlNWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMGJlZmIxNS04MDA4LTRmNjAtOWEyNi0xOWZj
ZmUxYTVjMzQvNjk3ZjdiNjJhOWVmZmFjYjJmMjgwYWNkMDFlNmUwNjM4NDgyN2U0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEA75gaDAPBAIAAjAJAwcAKAEAAAJwMA0GCSqGSIb3DQEBCwUA
A4IBAQAaJUNi99cUwrubj6PCf+yRTxy/NcwdczthVPEIQP0oaCp9u2B7wUTPMVPJ
likvXXyhXm0bjqfMagYzVRyH5WqjytIAFP0dhb8fdfDDMTJUk7dKKy9KskbDlmTq
Db5qO1ZLJLTG4TTrfPA3NMX+6v2KQnm1xVXiNSm2/88PSsk8QMc5cHjGpLsOkM1E
sbI1VKsDa/LeUR8ILN3EGS7c36tYWB9B6nv58U1O98agk604zjqLTu4gEbVIVSvQ
KLm0OPrdCN/KrxfALabxI5DGiCK2Kn2F0DVa6tPRnIVqO2Os2JXJzppYQl565MgD
esYRW9fvnW/csIOIl+ijJuTUiZdu
-----END CERTIFICATE-----