Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/360b2218b88c494c8f5aa54f72abe81d83f1b4d3.roa
File:                     360b2218b88c494c8f5aa54f72abe81d83f1b4d3.roa (raw, json)
Hash identifier:          kB3wiG/+/Pl2EOjTtWhRbqQzt2d37dZb569JMGigQ4k=
Subject key identifier:   0B:99:ED:87:0E:F5:61:5D:2B:5C:E3:0F:C9:83:48:25:00:14:54:AB
Certificate issuer:       /CN=a7526df002a574a7e96f1fd69133114135b1b5ee
Certificate serial:       103D33
Authority key identifier: A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/360b2218b88c494c8f5aa54f72abe81d83f1b4d3.roa
Signing time:             Wed 21 Jun 2023 18:14:38 +0000
ROA not before:           Tue 20 Jun 2023 18:14:38 +0000
ROA not after:            Sat 21 Jun 2025 18:14:38 +0000
asID:                     271973
IP address blocks:        201.222.43.0/24 maxlen: 24
                          2803:b810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064243 (0x103d33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7526df002a574a7e96f1fd69133114135b1b5ee
        Validity
            Not Before: Jun 20 18:14:38 2023 GMT
            Not After : Jun 21 18:14:38 2025 GMT
        Subject: CN=360b2218b88c494c8f5aa54f72abe81d83f1b4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:32:0d:c8:28:26:79:2b:3f:67:76:8c:2c:86:
                    8e:31:98:7c:6a:b3:73:5b:cd:dc:bc:45:dd:63:c7:
                    de:09:b4:ba:59:67:93:28:e4:34:5c:8e:cf:b8:57:
                    1f:10:5b:5b:a0:51:d3:45:66:6d:7d:16:6d:75:82:
                    a2:ff:7f:e9:6a:8b:ba:35:dd:ae:04:54:7e:be:d2:
                    15:5b:9a:06:38:9b:f8:35:3e:6a:0b:d4:49:da:59:
                    15:19:af:bd:f6:e7:4e:53:bf:42:3c:5f:74:b8:8c:
                    98:22:58:c9:d4:a5:86:e8:e2:a3:8c:bc:2f:94:1f:
                    c4:83:37:96:d8:64:d5:53:d0:2c:25:4d:72:db:88:
                    71:2e:02:96:ed:62:87:35:9b:00:5f:d3:0a:20:5d:
                    69:32:c6:11:31:54:1c:6c:af:77:d9:24:58:7b:63:
                    10:d9:d7:ad:b6:93:80:69:60:24:f8:cb:70:0f:82:
                    4e:bc:a3:98:98:1a:f0:b7:d5:0d:ac:33:28:bd:e8:
                    b5:f6:40:4c:49:8c:62:73:fa:28:c9:de:14:cb:99:
                    79:f0:c1:62:8d:52:48:d1:7c:35:89:e8:39:c9:0c:
                    aa:9d:c7:09:a0:64:f2:86:0c:5a:97:6c:cf:e0:87:
                    b6:23:1c:f3:e3:d4:65:3f:22:2e:0c:4d:93:ab:ba:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:ED:87:0E:F5:61:5D:2B:5C:E3:0F:C9:83:48:25:00:14:54:AB
            X509v3 Authority Key Identifier:
                keyid:A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/360b2218b88c494c8f5aa54f72abe81d83f1b4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a7526df002a574a7e96f1fd69133114135b1b5ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.43.0/24
                IPv6:
                  2803:b810::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:a9:99:f9:c7:c9:fc:fd:d3:e1:74:0e:60:22:b6:97:11:
         95:fb:48:73:d1:f8:52:b6:da:4d:d2:ee:9c:4c:44:ed:a4:06:
         a1:94:e8:02:2b:a9:5c:38:8c:d1:1f:3c:5e:a3:40:cd:b2:3c:
         e7:8f:04:1e:71:9f:64:b5:3d:b9:bd:43:d4:78:a4:ca:5e:75:
         9c:20:31:d8:1b:48:c0:ad:05:87:75:48:00:33:09:39:15:4b:
         3e:4f:73:44:a1:db:24:ff:fb:5f:49:b1:8c:33:7e:70:69:b1:
         03:08:b9:8e:4a:d6:a8:f1:fe:53:4c:f7:35:2a:99:4d:30:80:
         90:b1:40:e0:30:ca:56:c2:91:27:92:cf:38:4c:b7:4e:1c:af:
         e7:8a:dd:4d:2c:b3:f8:76:47:3d:f9:39:2e:6f:6b:a6:ac:45:
         5f:50:3a:e2:7e:0e:9e:09:4f:8f:62:c8:80:dc:6b:8c:6d:68:
         9b:e9:56:00:57:a7:c9:5a:66:51:9d:d9:42:ac:b6:b7:03:a1:
         73:54:ca:dc:dc:ec:92:21:72:7c:15:86:1c:9e:91:e7:a8:16:
         97:22:f2:39:df:35:b0:9a:c7:7f:11:d9:ab:44:47:c9:a1:e1:
         08:b3:4e:20:f4:c6:7b:a6:13:7e:6b:8e:67:38:f7:6f:df:c6:
         2d:5a:ed:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDED0zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
NTI2ZGYwMDJhNTc0YTdlOTZmMWZkNjkxMzMxMTQxMzViMWI1ZWUwHhcNMjMwNjIw
MTgxNDM4WhcNMjUwNjIxMTgxNDM4WjAzMTEwLwYDVQQDEygzNjBiMjIxOGI4OGM0
OTRjOGY1YWE1NGY3MmFiZTgxZDgzZjFiNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgzINyCgmeSs/Z3aMLIaOMZh8arNzW83cvEXdY8feCbS6WWeT
KOQ0XI7PuFcfEFtboFHTRWZtfRZtdYKi/3/paou6Nd2uBFR+vtIVW5oGOJv4NT5q
C9RJ2lkVGa+99udOU79CPF90uIyYIljJ1KWG6OKjjLwvlB/EgzeW2GTVU9AsJU1y
24hxLgKW7WKHNZsAX9MKIF1pMsYRMVQcbK932SRYe2MQ2dettpOAaWAk+MtwD4JO
vKOYmBrwt9UNrDMovei19kBMSYxic/ooyd4Uy5l58MFijVJI0Xw1ieg5yQyqnccJ
oGTyhgxal2zP4Ie2Ixzz49RlPyIuDE2Tq7qofwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAuZ7YcO9WFdK1zjD8mDSCUAFFSrMB8GA1UdIwQYMBaAFKZWtMOTISMUpcS4
lRtzSrxwojcmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc1MjZk
ZjAwMmE1NzRhN2U5NmYxZmQ2OTEzMzExNDEzNWIxYjVlZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2M0OTk2YTgtNzY3Ny00YzFjLWIzMTMtMDExZjI1
NzY0ZmE1LzM2MGIyMjE4Yjg4YzQ5NGM4ZjVhYTU0ZjcyYWJlODFkODNmMWI0ZDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzQ5OTZhOC03Njc3LTRjMWMtYjMxMy0wMTFm
MjU3NjRmYTUvYTc1MjZkZjAwMmE1NzRhN2U5NmYxZmQ2OTEzMzExNDEzNWIxYjVl
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAMneKzANBAIAAjAHAwUAKAO4EDANBgkqhkiG9w0BAQsFAAOC
AQEAK/OpmfnHyfz90+F0DmAitpcRlftIc9H4UrbaTdLunExE7aQGoZToAiupXDiM
0R88XqNAzbI8548EHnGfZLU9ub1D1Hikyl51nCAx2BtIwK0Fh3VIADMJORVLPk9z
RKHbJP/7X0mxjDN+cGmxAwi5jkrWqPH+U0z3NSqZTTCAkLFA4DDKVsKRJ5LPOEy3
Thyv54rdTSyz+HZHPfk5Lm9rpqxFX1A64n4OnglPj2LIgNxrjG1om+lWAFenyVpm
UZ3ZQqy2twOhc1TK3NzskiFyfBWGHJ6R56gWlyLyOd81sJrHfxHZq0RHyaHhCLNO
IPTGe6YTfmuOZzj3b9/GLVrtWA==
-----END CERTIFICATE-----