Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/996667bf0c78f401d5dda65d676d62c1a9c30f19.roa
File:                     996667bf0c78f401d5dda65d676d62c1a9c30f19.roa (raw, json)
Hash identifier:          m8RaZGYW+BxUHF8OAa+ktKeNLfYOJaLyA1jCULGe/xo=
Subject key identifier:   D1:59:C5:91:62:85:EB:DD:6D:46:8F:F4:B1:04:B2:FD:9E:1D:7E:FA
Certificate issuer:       /CN=6f01319158b481143f9879918e0466aa4e1e5377
Certificate serial:       084C88
Authority key identifier: C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/996667bf0c78f401d5dda65d676d62c1a9c30f19.roa
Signing time:             Thu 07 Mar 2024 20:12:51 +0000
ROA not before:           Thu 07 Mar 2024 20:12:51 +0000
ROA not after:            Sat 07 Mar 2026 20:12:51 +0000
asID:                     270008
IP address blocks:        200.23.140.0/24 maxlen: 24
                          2803:89e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543880 (0x84c88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f01319158b481143f9879918e0466aa4e1e5377
        Validity
            Not Before: Mar  7 20:12:51 2024 GMT
            Not After : Mar  7 20:12:51 2026 GMT
        Subject: CN=996667bf0c78f401d5dda65d676d62c1a9c30f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:65:5b:21:98:c5:48:5a:a2:6f:5c:6c:f1:
                    02:ce:bf:85:b5:e1:ee:84:36:c9:78:33:37:bd:04:
                    f8:9a:55:42:b7:65:5a:de:70:20:2e:97:21:f0:75:
                    3b:89:19:63:94:d0:3f:53:89:81:bb:87:43:7f:75:
                    36:68:6a:6f:db:b5:e9:c6:a4:6c:00:56:73:c1:8a:
                    2b:04:33:28:ef:9f:fd:59:c8:c4:53:0f:31:4c:16:
                    16:d8:b0:73:3f:e4:d1:49:59:66:2f:d1:0b:66:72:
                    ef:5a:f5:c3:53:f1:18:86:bc:64:ab:d6:76:59:a4:
                    13:21:08:4b:47:72:b2:d1:d3:6f:8a:e1:39:2f:d6:
                    f4:ce:54:df:e1:7a:5b:d3:82:30:e8:a7:fc:9a:3a:
                    14:07:13:22:88:03:7f:4c:a0:d2:94:42:4d:c7:84:
                    28:d3:6b:27:53:51:f9:e4:f3:31:17:2d:90:44:8b:
                    08:7b:9e:78:87:47:19:cf:c3:9c:2d:18:18:fe:72:
                    ea:54:2b:5f:47:c0:4b:9e:d3:07:15:9e:f4:9d:4a:
                    7e:df:77:d0:ed:c4:92:42:0b:78:ff:c5:15:76:0c:
                    b1:37:6d:1a:74:b6:95:4c:da:58:94:e2:a9:f8:c3:
                    44:9b:ee:10:7c:0d:44:02:b3:7b:24:d0:b1:0a:64:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:59:C5:91:62:85:EB:DD:6D:46:8F:F4:B1:04:B2:FD:9E:1D:7E:FA
            X509v3 Authority Key Identifier:
                keyid:C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/996667bf0c78f401d5dda65d676d62c1a9c30f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/6f01319158b481143f9879918e0466aa4e1e5377.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.140.0/24
                IPv6:
                  2803:89e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:8e:0a:6d:f2:96:e7:d8:cf:ab:95:5c:71:c0:d5:d7:9f:
         81:a9:f8:8f:f0:5c:ef:d3:c4:bb:54:af:9b:87:cd:65:11:75:
         bc:c8:b0:a6:1d:92:d1:02:08:c0:9d:90:43:d0:42:61:70:e9:
         46:72:21:f1:f4:15:2b:38:c4:8e:bc:7b:ce:04:89:1a:64:aa:
         91:8a:e9:ef:dd:a9:90:ef:51:f7:a9:7e:f7:23:a2:76:de:df:
         40:2e:2c:2b:ca:e8:0e:2e:8d:55:e8:c6:82:25:67:76:45:64:
         1e:a4:71:57:ee:9a:6a:02:fa:63:55:37:4e:a9:bb:9d:ff:cb:
         18:48:2c:5f:61:f8:76:2c:42:16:da:02:e8:d6:79:ee:b0:fe:
         03:0c:37:4c:2d:8b:73:0f:f8:64:00:a7:54:4d:a7:6e:7b:65:
         df:cb:16:3e:5e:11:db:fe:9b:f2:9b:28:d8:7d:a6:ef:52:82:
         40:d7:78:a5:83:4b:3b:31:08:1f:e9:c7:14:a4:ac:66:c9:59:
         20:26:02:af:f7:ac:45:87:93:bd:18:1c:48:8a:62:28:b3:07:
         c3:5c:ec:4d:cc:55:5c:b8:6d:d8:d6:57:36:8f:d8:ab:a7:53:
         3d:ac:9f:d6:10:5c:e3:d1:07:98:ad:90:b3:ed:f4:c7:e6:aa:
         cf:f0:a1:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCEyIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZm
MDEzMTkxNThiNDgxMTQzZjk4Nzk5MThlMDQ2NmFhNGUxZTUzNzcwHhcNMjQwMzA3
MjAxMjUxWhcNMjYwMzA3MjAxMjUxWjAzMTEwLwYDVQQDEyg5OTY2NjdiZjBjNzhm
NDAxZDVkZGE2NWQ2NzZkNjJjMWE5YzMwZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtuJlWyGYxUhaom9cbPECzr+FteHuhDbJeDM3vQT4mlVCt2Va
3nAgLpch8HU7iRljlNA/U4mBu4dDf3U2aGpv27XpxqRsAFZzwYorBDMo75/9WcjE
Uw8xTBYW2LBzP+TRSVlmL9ELZnLvWvXDU/EYhrxkq9Z2WaQTIQhLR3Ky0dNviuE5
L9b0zlTf4Xpb04Iw6Kf8mjoUBxMiiAN/TKDSlEJNx4Qo02snU1H55PMxFy2QRIsI
e554h0cZz8OcLRgY/nLqVCtfR8BLntMHFZ70nUp+33fQ7cSSQgt4/8UVdgyxN20a
dLaVTNpYlOKp+MNEm+4QfA1EArN7JNCxCmTbJwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNFZxZFihevdbUaP9LEEsv2eHX76MB8GA1UdIwQYMBaAFMnvIHCUAwvexzGC
PPoxRb8X+8K3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmYwMTMx
OTE1OGI0ODExNDNmOTg3OTkxOGUwNDY2YWE0ZTFlNTM3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTc4ZWM1YTQtNjU2Zi00Njc0LWIxNTgtYzY3Njdm
MDkxOTIxLzk5NjY2N2JmMGM3OGY0MDFkNWRkYTY1ZDY3NmQ2MmMxYTljMzBmMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNzhlYzVhNC02NTZmLTQ2NzQtYjE1OC1jNjc2
N2YwOTE5MjEvNmYwMTMxOTE1OGI0ODExNDNmOTg3OTkxOGUwNDY2YWE0ZTFlNTM3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAMgXjDANBAIAAjAHAwUAKAOJ4DANBgkqhkiG9w0BAQsFAAOC
AQEAkrCOCm3ylufYz6uVXHHA1defgan4j/Bc79PEu1Svm4fNZRF1vMiwph2S0QII
wJ2QQ9BCYXDpRnIh8fQVKzjEjrx7zgSJGmSqkYrp792pkO9R96l+9yOidt7fQC4s
K8roDi6NVejGgiVndkVkHqRxV+6aagL6Y1U3Tqm7nf/LGEgsX2H4dixCFtoC6NZ5
7rD+Aww3TC2Lcw/4ZACnVE2nbntl38sWPl4R2/6b8pso2H2m71KCQNd4pYNLOzEI
H+nHFKSsZslZICYCr/esRYeTvRgcSIpiKLMHw1zsTcxVXLht2NZXNo/Yq6dTPayf
1hBc49EHmK2Qs+30x+aqz/ChJQ==
-----END CERTIFICATE-----