Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/4e824bde6b0904e29ec21f5b0151d739dec67f29.roa
File:                     4e824bde6b0904e29ec21f5b0151d739dec67f29.roa (raw, json)
Hash identifier:          n9NwmeZ0uIg+x7XFJAqnzIQ/1mqHyw8Ad9djW9FsvSQ=
Subject key identifier:   08:9C:75:8D:A7:8C:98:77:78:D5:CE:9D:47:3A:59:49:05:1C:39:B2
Certificate issuer:       /CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
Certificate serial:       203D75
Authority key identifier: 7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/4e824bde6b0904e29ec21f5b0151d739dec67f29.roa
Signing time:             Tue 09 May 2023 19:20:22 +0000
ROA not before:           Mon 08 May 2023 19:20:22 +0000
ROA not after:            Fri 09 May 2025 19:20:22 +0000
asID:                     264815
IP address blocks:        170.239.168.0/22 maxlen: 24
                          2801:13:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112885 (0x203d75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
        Validity
            Not Before: May  8 19:20:22 2023 GMT
            Not After : May  9 19:20:22 2025 GMT
        Subject: CN=4e824bde6b0904e29ec21f5b0151d739dec67f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:40:1f:3e:81:9c:d7:18:12:72:c9:0c:22:
                    5e:91:7d:2f:4c:29:86:2c:f1:aa:c4:a4:96:84:db:
                    92:4a:f7:6a:0e:1c:63:9b:9a:08:6e:cd:a8:cf:c4:
                    61:b1:e7:54:54:7b:c8:76:e6:46:37:3b:2f:04:d6:
                    68:47:0b:9f:49:5a:4b:66:3e:05:a1:1f:52:5b:21:
                    99:91:86:99:ed:31:ac:f1:c2:82:bb:21:31:9b:a9:
                    79:b2:aa:d8:fd:95:50:e5:b1:85:48:5b:89:cb:1e:
                    18:88:e1:80:95:ca:5d:f8:d4:7b:25:29:a8:4e:56:
                    1b:fe:57:c0:d9:83:ff:2c:9c:34:04:15:93:2c:be:
                    08:dd:c7:b3:48:96:4a:f9:16:b3:f9:6f:d3:da:22:
                    25:49:d0:b6:29:6a:44:ec:89:0f:b2:26:69:ff:3c:
                    a0:77:4b:0f:b4:48:fd:12:55:2e:d1:24:88:2c:a2:
                    cd:fe:a8:07:bc:92:d9:c5:90:fa:36:49:e3:a4:fd:
                    32:eb:47:0b:4a:2b:e2:b0:94:6f:4f:1a:84:c3:8f:
                    7c:8c:5b:58:72:28:3f:06:29:a2:d9:1f:48:90:5b:
                    77:2d:ff:48:40:e2:30:c8:5a:11:0b:77:44:4a:47:
                    cf:b5:eb:e6:cf:e8:04:af:25:17:a2:37:80:d3:a6:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9C:75:8D:A7:8C:98:77:78:D5:CE:9D:47:3A:59:49:05:1C:39:B2
            X509v3 Authority Key Identifier:
                keyid:7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/4e824bde6b0904e29ec21f5b0151d739dec67f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.168.0/22
                IPv6:
                  2801:13:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:73:3e:c7:35:e7:c6:34:64:1b:28:5d:1a:e8:21:cd:c0:2d:
         e0:0c:5e:cf:02:6a:fa:e7:0f:47:6d:7e:41:5b:72:a0:92:bb:
         20:9d:2d:f0:32:7e:a5:8f:7c:b9:05:a0:21:c9:70:a3:46:b5:
         c4:6d:3b:e9:81:5c:34:37:54:0d:34:a1:6a:aa:29:0c:ca:68:
         93:9f:dc:47:a1:d5:ff:f7:95:50:1c:ef:3f:81:52:fa:22:fd:
         ec:3b:25:3e:e5:c3:88:ae:03:9a:14:67:5e:a9:87:7c:f0:f3:
         b1:fe:b2:cf:94:80:32:f8:4b:52:6b:49:ef:d4:5c:18:fc:a2:
         38:ca:63:0f:fe:63:b6:31:54:38:f0:7b:ad:65:b5:8b:93:f8:
         32:bd:2e:3e:05:0b:5d:af:b8:f8:95:62:19:00:96:eb:bc:e6:
         74:09:6e:2f:50:9c:12:18:64:1c:d3:20:47:71:87:9e:47:24:
         ee:d0:39:07:38:01:77:e1:13:14:6d:a0:3e:ed:13:ea:fb:5a:
         ac:64:32:57:44:fb:c2:74:e8:16:57:60:3b:91:38:d4:85:ac:
         5b:60:34:39:4d:43:9e:df:de:2c:3f:2d:11:56:ea:54:2a:67:
         96:1c:78:4c:54:24:60:76:83:39:a6:a3:5c:2d:1e:ae:39:f2:
         25:cb:2e:b3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDID11MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
NzdjMThjYTBkNWUzY2QwYmNiOThmNmYxNjU0ZTE5M2U2YzkwNjcwHhcNMjMwNTA4
MTkyMDIyWhcNMjUwNTA5MTkyMDIyWjAzMTEwLwYDVQQDEyg0ZTgyNGJkZTZiMDkw
NGUyOWVjMjFmNWIwMTUxZDczOWRlYzY3ZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1eVAHz6BnNcYEnLJDCJekX0vTCmGLPGqxKSWhNuSSvdqDhxj
m5oIbs2oz8RhsedUVHvIduZGNzsvBNZoRwufSVpLZj4FoR9SWyGZkYaZ7TGs8cKC
uyExm6l5sqrY/ZVQ5bGFSFuJyx4YiOGAlcpd+NR7JSmoTlYb/lfA2YP/LJw0BBWT
LL4I3cezSJZK+Raz+W/T2iIlSdC2KWpE7IkPsiZp/zygd0sPtEj9ElUu0SSILKLN
/qgHvJLZxZD6NknjpP0y60cLSivisJRvTxqEw498jFtYcig/Bimi2R9IkFt3Lf9I
QOIwyFoRC3dESkfPtevmz+gEryUXojeA06adiQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFAicdY2njJh3eNXOnUc6WUkFHDmyMB8GA1UdIwQYMBaAFH0UMn7Q4zkljmjn
irUXq9bF9GkuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGY3N2Mx
OGNhMGQ1ZTNjZDBiY2I5OGY2ZjE2NTRlMTkzZTZjOTA2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDk5YjlhNzctMzRjZC00Y2I5LWIyOGMtZjFkYjA2
MjllYmM3LzRlODI0YmRlNmIwOTA0ZTI5ZWMyMWY1YjAxNTFkNzM5ZGVjNjdmMjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOTliOWE3Ny0zNGNkLTRjYjktYjI4Yy1mMWRi
MDYyOWViYzcvMGY3N2MxOGNhMGQ1ZTNjZDBiY2I5OGY2ZjE2NTRlMTkzZTZjOTA2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAqrvqDAPBAIAAjAJAwcAKAEAE1AAMA0GCSqGSIb3DQEBCwUA
A4IBAQAIcz7HNefGNGQbKF0a6CHNwC3gDF7PAmr65w9HbX5BW3KgkrsgnS3wMn6l
j3y5BaAhyXCjRrXEbTvpgVw0N1QNNKFqqikMymiTn9xHodX/95VQHO8/gVL6Iv3s
OyU+5cOIrgOaFGdeqYd88POx/rLPlIAy+EtSa0nv1FwY/KI4ymMP/mO2MVQ48Hut
ZbWLk/gyvS4+BQtdr7j4lWIZAJbrvOZ0CW4vUJwSGGQc0yBHcYeeRyTu0DkHOAF3
4RMUbaA+7RPq+1qsZDJXRPvCdOgWV2A7kTjUhaxbYDQ5TUOe394sPy0RVupUKmeW
HHhMVCRgdoM5pqNcLR6uOfIlyy6z
-----END CERTIFICATE-----