Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/20e10cb77b320b1782d29c10c3cbecbe75a4eef2.roa
File:                     20e10cb77b320b1782d29c10c3cbecbe75a4eef2.roa (raw, json)
Hash identifier:          kPvlEjzrphsaxEP7gz9dIebS7f8m3Nb7YgQRy7YnkNg=
Subject key identifier:   2A:6C:84:3F:3E:5D:D5:ED:CA:BF:47:70:D4:29:DE:8A:61:65:DC:BB
Certificate issuer:       /CN=cfd77889f712db89177f6478b03af00c3bad37fa
Certificate serial:       14565C
Authority key identifier: 3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/20e10cb77b320b1782d29c10c3cbecbe75a4eef2.roa
Signing time:             Tue 20 Sep 2022 15:53:28 +0000
ROA not before:           Tue 20 Sep 2022 15:53:19 +0000
ROA not after:            Fri 20 Sep 2024 15:53:19 +0000
asID:                     269965
IP address blocks:        24.152.48.0/22 maxlen: 24
                          2803:56e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332828 (0x14565c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Validity
            Not Before: Sep 20 15:53:19 2022 GMT
            Not After : Sep 20 15:53:19 2024 GMT
        Subject: CN=20e10cb77b320b1782d29c10c3cbecbe75a4eef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:f5:20:fd:75:b8:57:2b:6c:86:d0:b1:99:
                    28:1f:1c:21:5c:a6:01:24:62:f7:6e:9a:f2:75:c0:
                    75:cc:9e:e9:27:4d:f9:98:2b:4d:c6:9b:23:cd:a3:
                    09:aa:ab:2c:71:f2:51:63:81:3d:87:ce:3e:4e:62:
                    43:a3:00:4e:16:d5:bb:d2:2c:b0:0c:b8:66:b3:c4:
                    c8:34:e7:16:d5:29:54:b2:12:f6:e5:f1:df:c3:48:
                    65:5f:cc:aa:85:44:60:18:a1:9a:13:f0:7b:17:4d:
                    37:40:e4:27:f3:9c:7f:c1:69:c9:49:57:97:d1:d5:
                    19:9a:6c:3d:c7:0f:2a:b1:d8:d7:f8:ef:c7:86:f5:
                    d4:aa:0e:d6:b4:6f:0e:05:dd:2f:6c:65:bc:b9:d8:
                    ed:4c:8e:8d:3d:17:f8:8f:dd:f4:41:41:e2:db:a6:
                    0a:b3:74:cc:6c:9f:6a:47:48:d7:19:09:4b:2c:f9:
                    2f:ba:1b:00:61:0d:af:84:a0:da:46:e1:29:15:f7:
                    d4:7c:f2:6b:5e:31:c0:5e:10:63:02:93:91:10:20:
                    37:64:74:75:0d:03:2d:0c:5c:c9:79:ba:20:ff:05:
                    53:3a:78:fc:65:d1:fb:e9:03:f0:fe:11:a2:fd:3e:
                    0c:d3:7e:28:13:72:9e:27:58:02:af:2b:45:f0:f3:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6C:84:3F:3E:5D:D5:ED:CA:BF:47:70:D4:29:DE:8A:61:65:DC:BB
            X509v3 Authority Key Identifier:
                keyid:3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/20e10cb77b320b1782d29c10c3cbecbe75a4eef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.48.0/22
                IPv6:
                  2803:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:0b:64:2f:dd:fd:bb:57:91:94:32:fa:79:97:a5:c5:13:
         c8:fc:85:f0:27:87:65:41:7a:cc:cc:0f:63:50:e1:8a:04:1d:
         3a:fc:e2:91:1e:85:0c:a6:f3:ad:55:38:74:f3:31:a2:b0:93:
         76:f0:9e:43:b6:9a:b7:99:82:af:ac:ba:45:d4:11:a6:57:4c:
         eb:e7:0a:3d:5e:39:4a:45:9b:5e:2a:37:46:e2:e3:41:c3:55:
         9b:1d:64:83:c9:74:c7:9c:7d:6c:3c:6a:c0:30:58:2a:52:fd:
         70:3b:5a:55:09:cd:e0:0e:b2:cf:61:81:8e:b7:b9:9c:1d:2d:
         b1:6c:40:6b:bd:c9:04:64:93:bd:36:b6:9d:6c:23:8b:65:5c:
         80:5f:14:9a:ac:3e:04:36:00:24:e3:3e:d0:65:da:e9:87:b4:
         35:aa:c1:8f:a2:97:9e:57:c1:cc:22:2a:08:8a:d0:08:86:80:
         4b:ee:23:39:2b:10:fe:dd:05:b0:6c:02:a9:7c:a4:e7:5a:5c:
         a0:d6:4c:08:30:9a:fc:2a:02:39:7c:af:4c:cf:ea:ad:a1:62:
         0d:bb:bf:e1:5d:65:fa:30:46:2f:e5:b5:aa:48:07:4e:b6:6f:
         13:a2:29:18:8c:16:34:34:fb:83:f6:e4:49:6d:ab:c5:72:bc:
         e7:46:da:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFFZcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
ZDc3ODg5ZjcxMmRiODkxNzdmNjQ3OGIwM2FmMDBjM2JhZDM3ZmEwHhcNMjIwOTIw
MTU1MzE5WhcNMjQwOTIwMTU1MzE5WjAzMTEwLwYDVQQDEygyMGUxMGNiNzdiMzIw
YjE3ODJkMjljMTBjM2NiZWNiZTc1YTRlZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkKz1IP11uFcrbIbQsZkoHxwhXKYBJGL3bprydcB1zJ7pJ035
mCtNxpsjzaMJqqsscfJRY4E9h84+TmJDowBOFtW70iywDLhms8TINOcW1SlUshL2
5fHfw0hlX8yqhURgGKGaE/B7F003QOQn85x/wWnJSVeX0dUZmmw9xw8qsdjX+O/H
hvXUqg7WtG8OBd0vbGW8udjtTI6NPRf4j930QUHi26YKs3TMbJ9qR0jXGQlLLPkv
uhsAYQ2vhKDaRuEpFffUfPJrXjHAXhBjApORECA3ZHR1DQMtDFzJebog/wVTOnj8
ZdH76QPw/hGi/T4M034oE3KeJ1gCrytF8PO32wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCpshD8+XdXtyr9HcNQp3ophZdy7MB8GA1UdIwQYMBaAFD3B5zlFMknrRk77
BuEF60/Z/euCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZkNzc4
ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMzYmFkMzdmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVkNmVjNDctNDY3Zi00YTU2LTk4MDMtZmFhOTU5
ZTRlOGY5LzIwZTEwY2I3N2IzMjBiMTc4MmQyOWMxMGMzY2JlY2JlNzVhNGVlZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWQ2ZWM0Ny00NjdmLTRhNTYtOTgwMy1mYWE5
NTllNGU4ZjkvY2ZkNzc4ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMzYmFkMzdm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAhiYMDANBAIAAjAHAwUAKANW4DANBgkqhkiG9w0BAQsFAAOC
AQEAmpYLZC/d/btXkZQy+nmXpcUTyPyF8CeHZUF6zMwPY1DhigQdOvzikR6FDKbz
rVU4dPMxorCTdvCeQ7aat5mCr6y6RdQRpldM6+cKPV45SkWbXio3RuLjQcNVmx1k
g8l0x5x9bDxqwDBYKlL9cDtaVQnN4A6yz2GBjre5nB0tsWxAa73JBGSTvTa2nWwj
i2VcgF8Umqw+BDYAJOM+0GXa6Ye0NarBj6KXnlfBzCIqCIrQCIaAS+4jOSsQ/t0F
sGwCqXyk51pcoNZMCDCa/CoCOXyvTM/qraFiDbu/4V1l+jBGL+W1qkgHTrZvE6Ip
GIwWNDT7g/bkSW2rxXK850ba+A==
-----END CERTIFICATE-----