Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/0f140a669eb58bf9ffd565641b59fec09cd5cdbc.roa
File:                     0f140a669eb58bf9ffd565641b59fec09cd5cdbc.roa (raw, json)
Hash identifier:          QUMLlMsnv7inPAv8GWwPDNUrhPHfK1LgvsmSyWvvJs4=
Subject key identifier:   CA:BB:40:B2:F0:45:7D:4E:C2:6A:44:A7:24:83:E8:EF:F2:8D:AB:84
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0DFAF8
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/0f140a669eb58bf9ffd565641b59fec09cd5cdbc.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27995
IP address blocks:        179.2.0.0/15 maxlen: 15
                          179.4.0.0/16 maxlen: 16
                          186.20.0.0/16 maxlen: 16
                          186.21.0.0/16 maxlen: 16
                          186.172.0.0/14 maxlen: 14
                          190.110.128.0/19 maxlen: 19
                          191.116.0.0/14 maxlen: 14
                          2800:540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916216 (0xdfaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=0f140a669eb58bf9ffd565641b59fec09cd5cdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:55:7b:e5:35:ac:81:ff:d3:a8:d0:8c:75:
                    e9:49:b5:0c:55:0f:3c:f0:ce:24:0d:5b:d3:1c:ec:
                    45:c7:56:8a:21:16:83:1c:d9:52:f6:2b:a2:ab:3a:
                    40:5f:32:f2:b5:e5:c7:19:10:c2:9d:93:63:05:a0:
                    24:f1:e0:bd:fc:52:21:40:17:e2:a7:16:e9:bf:36:
                    cd:d7:e0:5e:cd:23:d2:4b:fd:6b:ee:b4:d3:a7:8e:
                    c5:44:f9:53:d0:60:c1:d4:b5:1f:d0:1c:81:2d:bc:
                    26:d7:2b:da:f8:38:26:12:bf:9a:15:93:4d:83:79:
                    19:6f:bd:2e:b1:c0:61:cf:62:d5:25:8d:6d:d3:62:
                    29:0b:8e:d0:86:30:2e:99:3d:16:c5:a5:2e:6b:4e:
                    72:c1:a2:c5:b9:3a:f4:2f:15:20:9c:d1:8e:d5:4e:
                    16:77:34:03:c6:21:84:e1:e8:a3:b5:0f:7d:47:a9:
                    03:11:1c:df:9c:a0:86:79:cd:5f:62:b7:cb:d3:4b:
                    4d:4f:c9:54:b0:65:86:2d:c1:ec:34:ba:d1:20:a4:
                    36:6a:92:0e:3b:bd:e6:c2:c7:5e:8d:78:af:4f:03:
                    12:bd:d1:4e:df:e2:08:c3:78:b3:e5:48:d2:2c:6d:
                    36:fb:13:d8:84:15:4b:bb:6b:72:41:3a:ba:3a:63:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:40:B2:F0:45:7D:4E:C2:6A:44:A7:24:83:E8:EF:F2:8D:AB:84
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/0f140a669eb58bf9ffd565641b59fec09cd5cdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0-179.4.255.255
                  186.20.0.0/15
                  186.172.0.0/14
                  190.110.128.0/19
                  191.116.0.0/14
                IPv6:
                  2800:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:51:fb:8b:bc:db:e9:f8:76:55:c5:37:f5:4e:be:b3:9f:
         2c:74:f0:dd:f4:a9:3c:ca:74:d2:cc:ed:f9:dc:43:3e:9a:71:
         ba:51:bd:c8:f1:08:78:1e:1f:6e:4d:12:65:2c:7b:3d:4f:cb:
         f7:62:32:e2:93:fb:84:c1:b0:fb:e4:2e:54:b6:41:3e:80:52:
         61:67:df:7d:75:55:44:04:27:52:c7:f3:90:dd:e2:c5:46:8d:
         df:39:4d:e8:a7:7c:db:fa:fb:5c:d4:0c:7f:38:07:5c:ce:78:
         cf:e0:36:b1:9d:a5:cf:ab:3f:91:cc:ce:0e:86:0d:23:dc:86:
         1c:b8:44:ca:f6:a4:95:05:33:f2:ef:6b:24:c1:ca:07:1a:6c:
         a7:f1:f1:d8:d4:ad:ac:f7:5d:d5:d9:5f:38:ea:a7:0f:26:67:
         1c:6b:a2:77:86:5f:0f:67:22:36:b6:1c:69:f7:25:a6:e4:92:
         ef:70:5d:6a:21:94:a3:98:13:db:86:b8:92:25:6c:cf:e3:10:
         49:a7:5c:d3:00:0d:79:d9:d6:9f:9a:d0:7a:20:c3:1c:fc:3d:
         e1:7b:ec:95:59:03:bf:32:ec:d4:2b:59:f6:02:3e:7b:4e:c9:
         f8:44:07:c3:47:aa:49:4b:37:d8:ff:01:d2:94:58:cb:84:38:
         8f:05:28:d4
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIDDfr4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
MmJhZjFkNDM3MTJlZjVmMzg2MGIyMWQwNGU4NTM0NTM2ZmExNjQwHhcNMjEwMzI0
MTQzMzE2WhcNMjYwMzI0MTQzMzE2WjAzMTEwLwYDVQQDEygwZjE0MGE2NjllYjU4
YmY5ZmZkNTY1NjQxYjU5ZmVjMDljZDVjZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjAZVe+U1rIH/06jQjHXpSbUMVQ888M4kDVvTHOxFx1aKIRaD
HNlS9iuiqzpAXzLyteXHGRDCnZNjBaAk8eC9/FIhQBfipxbpvzbN1+BezSPSS/1r
7rTTp47FRPlT0GDB1LUf0ByBLbwm1yva+DgmEr+aFZNNg3kZb70uscBhz2LVJY1t
02IpC47QhjAumT0WxaUua05ywaLFuTr0LxUgnNGO1U4WdzQDxiGE4eijtQ99R6kD
ERzfnKCGec1fYrfL00tNT8lUsGWGLcHsNLrRIKQ2apIOO73mwsdejXivTwMSvdFO
3+IIw3iz5UjSLG02+xPYhBVLu2tyQTq6OmOChQIDAQABo4IChTCCAoEwHQYDVR0O
BBYEFMq7QLLwRX1OwmpEpySD6O/yjauEMB8GA1UdIwQYMBaAFIfjVjLD26sNS5jd
XBIONKlIODBJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDYyYmFm
MWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmQyZDI4MGItNmJhYy00Y2NlLWIwZTEtYzk1YjRj
ZGQwNTBjLzBmMTQwYTY2OWViNThiZjlmZmQ1NjU2NDFiNTlmZWMwOWNkNWNkYmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZDJkMjgwYi02YmFjLTRjY2UtYjBlMS1jOTVi
NGNkZDA1MGMvZDYyYmFmMWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6
MDgwJwQCAAEwITAKAwMBswIDAwCzBAMDAboUAwMCuqwDBAW+boADAwK/dDANBAIA
AjAHAwUAKAAFQDANBgkqhkiG9w0BAQsFAAOCAQEAX01R+4u82+n4dlXFN/VOvrOf
LHTw3fSpPMp00szt+dxDPppxulG9yPEIeB4fbk0SZSx7PU/L92Iy4pP7hMGw++Qu
VLZBPoBSYWfffXVVRAQnUsfzkN3ixUaN3zlN6Kd82/r7XNQMfzgHXM54z+A2sZ2l
z6s/kczODoYNI9yGHLhEyvaklQUz8u9rJMHKBxpsp/Hx2NStrPdd1dlfOOqnDyZn
HGuid4ZfD2ciNrYcafclpuSS73BdaiGUo5gT24a4kiVsz+MQSadc0wANednWn5rQ
eiDDHPw94XvslVkDvzLs1CtZ9gI+e07J+EQHw0eqSUs32P8B0pRYy4Q4jwUo1A==
-----END CERTIFICATE-----