Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/40983c85d6ef2c9543725e0dc00d8797f99fd202.roa
File:                     40983c85d6ef2c9543725e0dc00d8797f99fd202.roa (raw, json)
Hash identifier:          /Gb9qPMaMWlefLeMV7S7TgsqxPb+2Nc20reZHuEWLlg=
Subject key identifier:   58:30:A7:8B:E6:7C:92:5D:3C:37:C9:48:BA:47:2C:E7:A1:FD:44:4B
Certificate issuer:       /CN=e6245b6703466ee65faded994e4250d58dcd651f
Certificate serial:       0E5FBE
Authority key identifier: 7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/40983c85d6ef2c9543725e0dc00d8797f99fd202.roa
Signing time:             Wed 17 May 2023 13:11:15 +0000
ROA not before:           Tue 16 May 2023 13:11:15 +0000
ROA not after:            Sat 17 May 2025 13:11:15 +0000
asID:                     16921
IP address blocks:        200.108.120.0/21 maxlen: 24
                          179.61.64.0/20 maxlen: 24
                          200.81.112.0/21 maxlen: 24
                          2803:1c80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942014 (0xe5fbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6245b6703466ee65faded994e4250d58dcd651f
        Validity
            Not Before: May 16 13:11:15 2023 GMT
            Not After : May 17 13:11:15 2025 GMT
        Subject: CN=40983c85d6ef2c9543725e0dc00d8797f99fd202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:07:22:c2:d2:f3:9b:53:97:6d:b2:44:b6:
                    56:a9:8b:65:b9:61:5e:96:99:cf:54:48:6e:f8:9f:
                    ac:ad:c6:95:c0:7a:76:f8:47:d7:01:91:96:bc:7d:
                    e0:33:88:6f:55:38:bd:74:a7:71:be:6a:0f:5b:13:
                    f1:bc:a1:b8:33:62:64:68:ec:78:1f:b5:5a:98:7c:
                    98:81:43:2d:61:46:12:ba:ef:6a:b3:a0:77:6e:6e:
                    a7:8a:e8:bb:82:c6:96:e0:40:02:33:21:df:67:2a:
                    1b:86:f1:0b:c1:8a:68:87:ec:ce:f0:f4:15:26:bc:
                    5a:9e:6b:0e:3d:d1:d0:f5:a1:ac:8a:34:f1:de:92:
                    d7:bf:41:44:96:46:99:e8:4e:a7:18:73:1c:c6:13:
                    bb:3a:63:9e:4e:ee:a4:e4:80:c8:43:76:3a:d8:79:
                    75:74:23:5d:b8:5a:7e:d5:f5:a7:60:93:d6:6d:e7:
                    80:36:60:1c:72:60:c8:e1:3e:c7:2d:f5:e6:ea:86:
                    68:eb:fb:ca:32:75:22:40:64:65:11:f9:8d:33:c1:
                    51:8c:78:64:09:07:9e:da:fe:ff:08:f1:74:1f:15:
                    7c:f7:ca:26:19:46:2d:fa:39:19:91:80:51:fc:9d:
                    d9:66:b3:fb:13:ce:00:82:e4:31:8f:33:78:86:14:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:30:A7:8B:E6:7C:92:5D:3C:37:C9:48:BA:47:2C:E7:A1:FD:44:4B
            X509v3 Authority Key Identifier:
                keyid:7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/40983c85d6ef2c9543725e0dc00d8797f99fd202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/e6245b6703466ee65faded994e4250d58dcd651f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.64.0/20
                  200.81.112.0/21
                  200.108.120.0/21
                IPv6:
                  2803:1c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:e2:c2:05:0f:41:c5:a4:b6:dd:07:41:2f:97:68:ac:b6:
         a9:f3:73:97:db:fc:50:2f:cb:66:15:ed:e1:4a:b7:e0:fa:57:
         5e:1f:71:47:59:4a:25:de:24:bf:d8:a8:71:a3:70:07:76:c1:
         53:5d:d3:ff:80:c7:c8:2d:96:f9:05:e6:b1:62:07:28:38:fc:
         6a:9d:2b:20:6b:ef:a4:fe:42:c4:94:8b:8c:65:25:7a:2b:67:
         16:6d:e8:3e:1b:64:0c:5a:64:0f:b7:eb:d4:95:92:11:80:3c:
         3b:6e:8a:22:af:f5:ec:bd:ab:2c:97:8f:5a:bf:14:70:45:b5:
         f0:df:04:1a:4b:17:90:9d:e5:9e:11:8d:3f:21:41:9c:14:2c:
         5d:e1:d9:66:4e:9f:fa:ef:cb:1e:62:c1:15:cf:dd:ca:58:38:
         a3:1d:d5:96:71:72:1c:ca:7d:ae:dc:50:e3:6a:66:b8:6f:bf:
         d7:f7:b6:d0:9b:05:ff:c0:73:6a:26:ac:5b:e8:1b:f0:be:55:
         6b:3c:14:e2:c8:c7:b5:51:9a:a2:b3:ff:4d:1b:8b:d2:60:8d:
         4e:48:be:ea:5d:dc:8e:11:57:c9:78:bf:56:f4:51:f9:8d:18:
         bc:4e:2b:64:1e:5b:23:b0:f3:e5:73:45:61:3d:e3:a4:97:1a:
         6f:a0:a7:28
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDDl++MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
MjQ1YjY3MDM0NjZlZTY1ZmFkZWQ5OTRlNDI1MGQ1OGRjZDY1MWYwHhcNMjMwNTE2
MTMxMTE1WhcNMjUwNTE3MTMxMTE1WjAzMTEwLwYDVQQDEyg0MDk4M2M4NWQ2ZWYy
Yzk1NDM3MjVlMGRjMDBkODc5N2Y5OWZkMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApLQHIsLS85tTl22yRLZWqYtluWFelpnPVEhu+J+srcaVwHp2
+EfXAZGWvH3gM4hvVTi9dKdxvmoPWxPxvKG4M2JkaOx4H7VamHyYgUMtYUYSuu9q
s6B3bm6niui7gsaW4EACMyHfZyobhvELwYpoh+zO8PQVJrxanmsOPdHQ9aGsijTx
3pLXv0FElkaZ6E6nGHMcxhO7OmOeTu6k5IDIQ3Y62Hl1dCNduFp+1fWnYJPWbeeA
NmAccmDI4T7HLfXm6oZo6/vKMnUiQGRlEfmNM8FRjHhkCQee2v7/CPF0HxV898om
GUYt+jkZkYBR/J3ZZrP7E84AguQxjzN4hhRdgQIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFFgwp4vmfJJdPDfJSLpHLOeh/URLMB8GA1UdIwQYMBaAFHv169/0CdWe0Dmm
M5uxRMFUPr/5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTYyNDVi
NjcwMzQ2NmVlNjVmYWRlZDk5NGU0MjUwZDU4ZGNkNjUxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGQxNzAxODgtZGIxMC00ZDk4LWEzMzEtMzdhNDNj
ZDNmZmNmLzQwOTgzYzg1ZDZlZjJjOTU0MzcyNWUwZGMwMGQ4Nzk3Zjk5ZmQyMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZDE3MDE4OC1kYjEwLTRkOTgtYTMzMS0zN2E0
M2NkM2ZmY2YvZTYyNDViNjcwMzQ2NmVlNjVmYWRlZDk5NGU0MjUwZDU4ZGNkNjUx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEBLM9QAMEA8hRcAMEA8hseDANBAIAAjAHAwUAKAMcgDANBgkq
hkiG9w0BAQsFAAOCAQEABcHiwgUPQcWktt0HQS+XaKy2qfNzl9v8UC/LZhXt4Uq3
4PpXXh9xR1lKJd4kv9iocaNwB3bBU13T/4DHyC2W+QXmsWIHKDj8ap0rIGvvpP5C
xJSLjGUleitnFm3oPhtkDFpkD7fr1JWSEYA8O26KIq/17L2rLJePWr8UcEW18N8E
GksXkJ3lnhGNPyFBnBQsXeHZZk6f+u/LHmLBFc/dylg4ox3VlnFyHMp9rtxQ42pm
uG+/1/e20JsF/8BzaiasW+gb8L5VazwU4sjHtVGaorP/TRuL0mCNTki+6l3cjhFX
yXi/VvRR+Y0YvE4rZB5bI7Dz5XNFYT3jpJcab6CnKA==
-----END CERTIFICATE-----