Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/c7443ae971f1ea4bcb08e75adb378841dd4fe427.roa
File:                     c7443ae971f1ea4bcb08e75adb378841dd4fe427.roa (raw, json)
Hash identifier:          wEvBBYto5gvKluHAWQdyUQKFO/V7xS/P8fxraYnvmGw=
Subject key identifier:   13:2F:E1:71:85:D9:54:2D:A8:2A:62:AC:BF:F5:03:54:FA:4A:2B:19
Certificate issuer:       /CN=c02996cfafbf597cdf1662fcee796dc71c21e621
Certificate serial:       157531
Authority key identifier: 74:4E:42:36:4C:23:AC:73:B4:91:B0:BE:E5:6B:FC:77:4F:42:4D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02996cfafbf597cdf1662fcee796dc71c21e621.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/c7443ae971f1ea4bcb08e75adb378841dd4fe427.roa
Signing time:             Tue 09 May 2023 14:10:56 +0000
ROA not before:           Mon 08 May 2023 14:10:56 +0000
ROA not after:            Fri 09 May 2025 14:10:56 +0000
asID:                     263689
IP address blocks:        190.103.180.0/22 maxlen: 24
                          2800:c90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406257 (0x157531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02996cfafbf597cdf1662fcee796dc71c21e621
        Validity
            Not Before: May  8 14:10:56 2023 GMT
            Not After : May  9 14:10:56 2025 GMT
        Subject: CN=c7443ae971f1ea4bcb08e75adb378841dd4fe427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:c4:21:47:02:27:0c:1d:94:bc:af:5e:5c:
                    a9:18:97:35:c2:b2:c3:04:e0:1f:65:4c:ba:a9:c8:
                    43:18:55:fa:15:ee:70:56:a3:0a:5e:b0:78:76:c6:
                    66:89:e1:8d:79:66:e9:f6:3e:ff:37:5a:68:4a:82:
                    c6:d3:41:be:8a:55:46:c9:0e:f5:d9:dc:6a:df:be:
                    e6:9b:62:fa:51:2b:00:04:9c:de:7d:6b:0c:d9:9c:
                    ea:01:d0:3d:4c:e4:c5:42:3b:56:59:b5:5d:b1:37:
                    85:a3:d6:62:42:d2:3b:1c:88:35:a2:c1:cb:c9:b0:
                    a3:90:32:b2:42:f2:3c:f5:8e:9b:23:f9:61:bc:6b:
                    83:23:57:92:ea:4b:fd:30:81:c0:57:5d:4b:59:18:
                    83:ca:fc:ca:52:ec:30:20:60:1f:e2:6f:57:0b:7f:
                    f3:26:d7:56:60:46:6a:da:b1:5f:12:ff:d4:c4:9a:
                    94:f8:6e:98:01:05:18:ea:a9:05:1b:60:75:7b:0f:
                    06:c7:63:a6:28:8e:aa:24:5f:17:15:bd:c8:56:70:
                    b7:8d:9b:d8:7b:ec:aa:18:43:5e:da:60:39:48:30:
                    2c:8c:c6:9a:e9:71:cf:11:c8:fb:7d:d2:cd:2e:f0:
                    e1:fb:ec:1e:a0:3d:8e:2f:16:4d:6b:56:17:16:45:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:E1:71:85:D9:54:2D:A8:2A:62:AC:BF:F5:03:54:FA:4A:2B:19
            X509v3 Authority Key Identifier:
                keyid:74:4E:42:36:4C:23:AC:73:B4:91:B0:BE:E5:6B:FC:77:4F:42:4D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02996cfafbf597cdf1662fcee796dc71c21e621.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/c7443ae971f1ea4bcb08e75adb378841dd4fe427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/c02996cfafbf597cdf1662fcee796dc71c21e621.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.180.0/22
                IPv6:
                  2800:c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:25:4c:b1:13:63:e8:83:2c:25:41:0c:b3:70:1e:f1:b5:f3:
         26:09:fe:94:37:09:58:6e:f1:52:c7:24:09:a0:69:49:ef:18:
         48:f3:60:87:da:86:ee:69:e7:35:44:97:08:a7:cd:fc:68:2c:
         d6:0b:2b:33:f4:7e:80:48:e2:ac:67:fb:3e:67:74:85:5e:06:
         ba:bb:36:6f:2f:ae:cb:0a:88:09:bf:56:c2:e1:e2:b1:e0:c0:
         5f:ef:63:ce:e0:b2:21:93:f6:1e:2c:cd:df:71:1f:22:82:36:
         fc:6e:e9:e2:fa:b4:47:87:4d:a4:09:91:13:23:fb:45:2f:4b:
         5b:e4:c4:bc:64:1c:17:2f:d2:f2:1a:6f:53:31:17:94:80:1b:
         90:93:34:2c:0f:7c:51:f8:88:32:ea:ea:be:45:24:0d:86:11:
         ae:e9:0e:b1:52:7d:0a:e0:a1:29:a2:74:43:0a:83:e3:30:ca:
         b1:a1:ae:a3:c4:90:29:0a:9c:79:58:cf:fc:cd:9c:71:7e:4e:
         8c:28:51:4b:82:67:75:3a:7b:ef:e0:58:c1:d1:57:a8:0b:fc:
         f3:f8:26:c8:ca:c6:54:09:ae:89:e7:1d:4d:89:ea:5f:06:0f:
         f2:bf:5c:ad:48:4c:f5:86:1b:4d:9b:7a:45:db:95:59:af:01:
         5f:d9:c7:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFXUxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
Mjk5NmNmYWZiZjU5N2NkZjE2NjJmY2VlNzk2ZGM3MWMyMWU2MjEwHhcNMjMwNTA4
MTQxMDU2WhcNMjUwNTA5MTQxMDU2WjAzMTEwLwYDVQQDEyhjNzQ0M2FlOTcxZjFl
YTRiY2IwOGU3NWFkYjM3ODg0MWRkNGZlNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkdzEIUcCJwwdlLyvXlypGJc1wrLDBOAfZUy6qchDGFX6Fe5w
VqMKXrB4dsZmieGNeWbp9j7/N1poSoLG00G+ilVGyQ712dxq377mm2L6USsABJze
fWsM2ZzqAdA9TOTFQjtWWbVdsTeFo9ZiQtI7HIg1osHLybCjkDKyQvI89Y6bI/lh
vGuDI1eS6kv9MIHAV11LWRiDyvzKUuwwIGAf4m9XC3/zJtdWYEZq2rFfEv/UxJqU
+G6YAQUY6qkFG2B1ew8Gx2OmKI6qJF8XFb3IVnC3jZvYe+yqGENe2mA5SDAsjMaa
6XHPEcj7fdLNLvDh++weoD2OLxZNa1YXFkXOdQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBMv4XGF2VQtqCpirL/1A1T6SisZMB8GA1UdIwQYMBaAFHROQjZMI6xztJGw
vuVr/HdPQk2FMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzAyOTk2
Y2ZhZmJmNTk3Y2RmMTY2MmZjZWU3OTZkYzcxYzIxZTYyMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjRhMzU5MjYtZDFkNy00NDE5LTk2OTAtMmU0MzA4
NjViOTE1L2M3NDQzYWU5NzFmMWVhNGJjYjA4ZTc1YWRiMzc4ODQxZGQ0ZmU0Mjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNGEzNTkyNi1kMWQ3LTQ0MTktOTY5MC0yZTQz
MDg2NWI5MTUvYzAyOTk2Y2ZhZmJmNTk3Y2RmMTY2MmZjZWU3OTZkYzcxYzIxZTYy
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr5ntDANBAIAAjAHAwUAKAAMkDANBgkqhkiG9w0BAQsFAAOC
AQEAMSVMsRNj6IMsJUEMs3Ae8bXzJgn+lDcJWG7xUsckCaBpSe8YSPNgh9qG7mnn
NUSXCKfN/Ggs1gsrM/R+gEjirGf7Pmd0hV4Gurs2by+uywqICb9WwuHiseDAX+9j
zuCyIZP2HizN33EfIoI2/G7p4vq0R4dNpAmREyP7RS9LW+TEvGQcFy/S8hpvUzEX
lIAbkJM0LA98UfiIMurqvkUkDYYRrukOsVJ9CuChKaJ0QwqD4zDKsaGuo8SQKQqc
eVjP/M2ccX5OjChRS4JndTp77+BYwdFXqAv88/gmyMrGVAmuiecdTYnqXwYP8r9c
rUhM9YYbTZt6RduVWa8BX9nHRA==
-----END CERTIFICATE-----