Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/8ae8a931bdb97c64181bcd3e089c6c846dce9732.roa
File:                     8ae8a931bdb97c64181bcd3e089c6c846dce9732.roa (raw, json)
Hash identifier:          hlqpP3sFW+sS0+ExaET5wcb5CJasEZQfcovDLUNYStI=
Subject key identifier:   81:BE:B3:96:98:1F:22:12:CE:4E:8D:C6:80:07:3D:58:54:5C:A3:BB
Certificate issuer:       /CN=589783623233141f65642bbbfa85d766ca194755
Certificate serial:       1A47
Authority key identifier: 56:77:80:F7:92:9F:45:C4:11:A1:A0:E1:B0:B2:91:72:A5:70:3B:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/589783623233141f65642bbbfa85d766ca194755.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/8ae8a931bdb97c64181bcd3e089c6c846dce9732.roa
Signing time:             Tue 24 Jan 2023 13:51:20 +0000
ROA not before:           Fri 20 Jan 2023 13:00:10 +0000
ROA not after:            Fri 24 Jan 2025 13:00:10 +0000
asID:                     264738
IP address blocks:        138.118.212.0/22 maxlen: 24
                          170.233.116.0/22 maxlen: 24
                          2803:5440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6727 (0x1a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589783623233141f65642bbbfa85d766ca194755
        Validity
            Not Before: Jan 20 13:00:10 2023 GMT
            Not After : Jan 24 13:00:10 2025 GMT
        Subject: CN=8ae8a931bdb97c64181bcd3e089c6c846dce9732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:cf:fc:05:18:9e:11:a0:1a:ff:1f:51:b7:
                    f2:d2:91:d4:eb:c7:c0:13:b3:ee:dc:b5:ba:0c:dd:
                    de:54:5f:17:cb:d6:89:f0:a2:c1:55:94:e1:f3:f1:
                    c7:ee:29:12:af:23:93:02:d9:a0:6e:5e:5e:e6:46:
                    1c:e5:a8:15:c6:70:5b:d9:3a:e8:a7:53:a4:ef:a7:
                    4b:d7:9a:e4:38:d6:04:dd:4e:52:e6:e8:2b:d3:b0:
                    d6:80:f6:ce:4c:da:09:63:0f:b8:bf:11:45:3e:09:
                    80:f0:24:c0:d9:d9:a5:99:d8:0f:7f:b9:1a:2f:92:
                    e3:8f:ce:90:df:1c:ec:03:ff:64:9c:a4:90:7a:a7:
                    8f:39:a1:d0:d5:9f:3e:bc:8f:9a:83:d5:b9:54:66:
                    4b:22:23:2c:6f:34:ab:12:13:7e:7a:47:a3:0e:19:
                    df:2e:be:63:88:39:3c:8a:40:e8:de:ff:94:28:42:
                    4a:2d:38:bb:45:50:ec:15:52:2e:24:61:eb:a8:7f:
                    e2:4c:79:eb:9b:20:c1:ca:b3:91:ac:f2:53:e6:0c:
                    24:12:c7:b7:4f:d3:2f:75:85:34:bb:04:cd:6b:46:
                    0b:2b:95:16:b7:ad:f4:1f:3f:a2:54:bf:38:b6:55:
                    aa:a9:90:4f:ac:af:ac:30:89:48:d4:d8:31:68:79:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BE:B3:96:98:1F:22:12:CE:4E:8D:C6:80:07:3D:58:54:5C:A3:BB
            X509v3 Authority Key Identifier:
                keyid:56:77:80:F7:92:9F:45:C4:11:A1:A0:E1:B0:B2:91:72:A5:70:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/589783623233141f65642bbbfa85d766ca194755.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/8ae8a931bdb97c64181bcd3e089c6c846dce9732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11129496-a36f-4b12-9e42-50ecb8edc461/589783623233141f65642bbbfa85d766ca194755.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.212.0/22
                  170.233.116.0/22
                IPv6:
                  2803:5440::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:3e:03:3f:b2:5e:ec:7e:ed:06:7b:82:55:34:60:85:c8:
         3a:0c:31:44:f0:49:a2:41:5b:48:ae:3c:54:c1:1e:0a:5c:0a:
         a2:23:56:5e:95:82:22:98:29:ac:84:ad:0d:f5:04:1f:2f:ee:
         d5:6b:61:d8:80:f9:9b:a9:51:f9:a7:47:64:7b:f6:1f:84:9e:
         f7:21:59:11:a6:a8:7e:9f:d7:9b:e8:a9:39:56:56:3e:8c:5f:
         7e:a7:4b:35:e5:dd:5c:c6:09:fb:76:ce:f0:ad:f3:00:83:aa:
         98:5d:d5:3e:43:25:04:27:0d:93:87:76:bc:4e:53:7f:ca:d1:
         77:30:3c:6d:0d:01:09:07:76:f9:d1:ee:3b:b6:81:98:11:27:
         24:29:2d:1d:17:b3:20:89:e1:06:71:4b:cd:6b:91:41:f0:7d:
         76:de:e4:71:9f:9a:69:87:2f:33:cd:1c:bb:a3:f5:2d:b6:b3:
         1b:be:08:79:a2:02:1e:03:1f:73:e4:b7:8d:1a:0e:23:3d:68:
         b3:04:48:9c:01:7e:2a:a3:c2:9e:c9:06:80:35:80:ec:5f:78:
         62:2a:49:ef:7c:c0:5d:c1:8d:8b:eb:5a:66:29:d3:52:02:b2:
         8b:35:0f:cc:1c:6e:40:58:c1:ee:12:3e:e0:12:1b:69:a6:a1:
         b6:c6:8f:a3
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICGkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg5
NzgzNjIzMjMzMTQxZjY1NjQyYmJiZmE4NWQ3NjZjYTE5NDc1NTAeFw0yMzAxMjAx
MzAwMTBaFw0yNTAxMjQxMzAwMTBaMDMxMTAvBgNVBAMTKDhhZThhOTMxYmRiOTdj
NjQxODFiY2QzZTA4OWM2Yzg0NmRjZTk3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkCc/8BRieEaAa/x9Rt/LSkdTrx8ATs+7ctboM3d5UXxfL1onw
osFVlOHz8cfuKRKvI5MC2aBuXl7mRhzlqBXGcFvZOuinU6Tvp0vXmuQ41gTdTlLm
6CvTsNaA9s5M2gljD7i/EUU+CYDwJMDZ2aWZ2A9/uRovkuOPzpDfHOwD/2ScpJB6
p485odDVnz68j5qD1blUZksiIyxvNKsSE356R6MOGd8uvmOIOTyKQOje/5QoQkot
OLtFUOwVUi4kYeuof+JMeeubIMHKs5Gs8lPmDCQSx7dP0y91hTS7BM1rRgsrlRa3
rfQfP6JUvzi2VaqpkE+sr6wwiUjU2DFoeYwLAgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQUgb6zlpgfIhLOTo3GgAc9WFRco7swHwYDVR0jBBgwFoAUVneA95KfRcQRoaDh
sLKRcqVwO5wwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81ODk3ODM2
MjMyMzMxNDFmNjU2NDJiYmJmYTg1ZDc2NmNhMTk0NzU1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xMTEyOTQ5Ni1hMzZmLTRiMTItOWU0Mi01MGVjYjhl
ZGM0NjEvOGFlOGE5MzFiZGI5N2M2NDE4MWJjZDNlMDg5YzZjODQ2ZGNlOTczMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzExMTI5NDk2LWEzNmYtNGIxMi05ZTQyLTUwZWNi
OGVkYzQ2MS81ODk3ODM2MjMyMzMxNDFmNjU2NDJiYmJmYTg1ZDc2NmNhMTk0NzU1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQCinbUAwQCqul0MA0EAgACMAcDBQAoA1RAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYij4DP7Je7H7tBnuCVTRghcg6DDFE8EmiQVtIrjxUwR4KXAqiI1Ze
lYIimCmshK0N9QQfL+7Va2HYgPmbqVH5p0dke/YfhJ73IVkRpqh+n9eb6Kk5VlY+
jF9+p0s15d1cxgn7ds7wrfMAg6qYXdU+QyUEJw2Th3a8TlN/ytF3MDxtDQEJB3b5
0e47toGYESckKS0dF7MgieEGcUvNa5FB8H123uRxn5pphy8zzRy7o/UttrMbvgh5
ogIeAx9z5LeNGg4jPWizBEicAX4qo8KeyQaANYDsX3hiKknvfMBdwY2L61pmKdNS
ArKLNQ/MHG5AWMHuEj7gEhtppqG2xo+j
-----END CERTIFICATE-----