Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/7ef8fcc63a2d6702c1e6f4547b1f9575fb72c6b4.roa
File:                     7ef8fcc63a2d6702c1e6f4547b1f9575fb72c6b4.roa (raw, json)
Hash identifier:          6/wa2W0/T3bssJmytAYwKz6iSWvZN3C4U5jjkXEFLOc=
Subject key identifier:   99:7D:DD:89:1D:7F:BD:F8:10:EC:95:71:27:53:0C:06:25:46:4D:04
Certificate issuer:       /CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
Certificate serial:       1109B6
Authority key identifier: 1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/7ef8fcc63a2d6702c1e6f4547b1f9575fb72c6b4.roa
Signing time:             Wed 13 Sep 2023 15:47:05 +0000
ROA not before:           Tue 12 Sep 2023 15:47:05 +0000
ROA not after:            Sat 13 Sep 2025 15:47:05 +0000
asID:                     394684
IP address blocks:        131.108.4.0/22 maxlen: 24
                          2803:bd80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116598 (0x1109b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
        Validity
            Not Before: Sep 12 15:47:05 2023 GMT
            Not After : Sep 13 15:47:05 2025 GMT
        Subject: CN=7ef8fcc63a2d6702c1e6f4547b1f9575fb72c6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:e4:b4:6b:f2:ed:84:a8:43:5b:24:57:13:
                    9b:26:69:76:cd:4a:7a:08:68:9f:f8:8e:f1:b1:96:
                    9e:1e:44:2f:ee:40:a6:0a:27:6d:0c:62:cd:17:89:
                    9d:ac:73:81:3b:33:e2:90:66:02:81:ec:6f:56:e6:
                    61:f6:a0:1f:95:6b:c9:43:4f:43:58:94:b2:80:8a:
                    32:8c:ed:24:b6:b0:fc:76:2a:8b:1a:33:44:16:4c:
                    52:84:0f:10:16:b4:6b:45:39:ab:2c:32:20:3b:78:
                    89:94:48:13:6c:d2:3f:05:5f:37:f7:7f:87:a3:21:
                    94:19:ae:b5:f4:66:46:72:30:8b:a9:58:27:91:34:
                    90:59:d2:d4:18:cc:60:af:c5:60:ce:9e:b3:3f:7e:
                    fe:3a:76:b6:cc:80:cd:79:8a:1e:50:49:b4:04:b7:
                    8c:36:3f:08:04:8f:42:d0:f2:46:38:90:93:c2:1b:
                    e9:3c:58:49:ad:b7:b1:88:f4:ce:ba:04:75:f1:02:
                    e3:34:61:21:91:31:44:d8:de:0b:c4:23:22:d3:26:
                    87:56:a9:72:f4:49:46:a0:48:11:65:08:db:3f:6a:
                    ca:61:b7:20:a6:a0:0b:cd:8c:74:62:24:e2:fd:04:
                    94:88:05:7f:f7:86:10:49:e8:bb:64:be:3d:e2:68:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:DD:89:1D:7F:BD:F8:10:EC:95:71:27:53:0C:06:25:46:4D:04
            X509v3 Authority Key Identifier:
                keyid:1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/7ef8fcc63a2d6702c1e6f4547b1f9575fb72c6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/9d5f7256141d4f6ae5e5a02600389ee713736db9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:83:86:13:b0:81:03:16:74:06:3b:32:62:8e:33:9a:ad:97:
         d1:0b:65:d8:46:58:a8:54:88:5c:c4:75:ea:57:fc:a3:47:9e:
         1d:9b:04:84:92:e3:07:e8:dd:db:ed:10:24:c0:75:17:2a:21:
         e0:30:01:9d:6f:55:db:ee:c3:24:ce:fb:44:e2:40:bb:4f:13:
         fc:70:9b:5d:35:94:cd:93:d8:78:0e:5d:7a:34:54:01:65:a7:
         2f:01:4e:ee:1d:76:d3:5f:bf:3d:8c:a6:6b:13:5a:ca:0a:ad:
         eb:df:bb:65:45:2f:74:37:68:12:f1:d0:d0:4e:9e:36:82:68:
         11:dd:c6:dd:df:ea:66:c0:b6:38:4e:4d:93:b0:7c:0f:8d:46:
         09:63:d5:84:c4:14:c8:e2:61:b5:83:75:e3:2a:84:e1:09:b5:
         1f:8f:29:3a:e7:05:9e:a0:d0:f3:ff:a9:27:73:fc:b0:68:4a:
         99:e6:e0:c5:3b:52:00:4f:0c:bd:c8:cb:f8:30:e7:44:8c:f2:
         ec:e5:e3:8d:9a:f6:37:ff:10:83:53:e9:5a:27:45:27:96:12:
         97:d4:6e:03:95:36:8f:1c:06:8c:3d:fa:4f:20:e8:8f:7f:28:
         d8:ba:49:08:eb:36:bc:09:01:d6:92:3f:d9:88:0c:40:12:f9:
         fe:e4:52:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEQm2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
NWY3MjU2MTQxZDRmNmFlNWU1YTAyNjAwMzg5ZWU3MTM3MzZkYjkwHhcNMjMwOTEy
MTU0NzA1WhcNMjUwOTEzMTU0NzA1WjAzMTEwLwYDVQQDEyg3ZWY4ZmNjNjNhMmQ2
NzAyYzFlNmY0NTQ3YjFmOTU3NWZiNzJjNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn7fktGvy7YSoQ1skVxObJml2zUp6CGif+I7xsZaeHkQv7kCm
CidtDGLNF4mdrHOBOzPikGYCgexvVuZh9qAflWvJQ09DWJSygIoyjO0ktrD8diqL
GjNEFkxShA8QFrRrRTmrLDIgO3iJlEgTbNI/BV8393+HoyGUGa619GZGcjCLqVgn
kTSQWdLUGMxgr8Vgzp6zP37+Ona2zIDNeYoeUEm0BLeMNj8IBI9C0PJGOJCTwhvp
PFhJrbexiPTOugR18QLjNGEhkTFE2N4LxCMi0yaHVqly9ElGoEgRZQjbP2rKYbcg
pqALzYx0YiTi/QSUiAV/94YQSei7ZL494mioTQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJl93Ykdf734EOyVcSdTDAYlRk0EMB8GA1UdIwQYMBaAFB+1glrcH1+EijWy
IYrZ7JRcjragMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQ1Zjcy
NTYxNDFkNGY2YWU1ZTVhMDI2MDAzODllZTcxMzczNmRiOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTM0YWIxMDctMDk4MS00YWE3LWIxZWItYzkzNGY1
ZmNmMTBlLzdlZjhmY2M2M2EyZDY3MDJjMWU2ZjQ1NDdiMWY5NTc1ZmI3MmM2YjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMzRhYjEwNy0wOTgxLTRhYTctYjFlYi1jOTM0
ZjVmY2YxMGUvOWQ1ZjcyNTYxNDFkNGY2YWU1ZTVhMDI2MDAzODllZTcxMzczNmRi
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoNsBDANBAIAAjAHAwUAKAO9gDANBgkqhkiG9w0BAQsFAAOC
AQEAd4OGE7CBAxZ0BjsyYo4zmq2X0Qtl2EZYqFSIXMR16lf8o0eeHZsEhJLjB+jd
2+0QJMB1Fyoh4DABnW9V2+7DJM77ROJAu08T/HCbXTWUzZPYeA5dejRUAWWnLwFO
7h1201+/PYymaxNaygqt69+7ZUUvdDdoEvHQ0E6eNoJoEd3G3d/qZsC2OE5Nk7B8
D41GCWPVhMQUyOJhtYN14yqE4Qm1H48pOucFnqDQ8/+pJ3P8sGhKmebgxTtSAE8M
vcjL+DDnRIzy7OXjjZr2N/8Qg1PpWidFJ5YSl9RuA5U2jxwGjD36TyDoj38o2LpJ
COs2vAkB1pI/2YgMQBL5/uRSAg==
-----END CERTIFICATE-----