Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6578b0ca9e805d9aded2ca5213e962a441bd22a2.roa
File:                     6578b0ca9e805d9aded2ca5213e962a441bd22a2.roa (raw, json)
Hash identifier:          M2fTu9xmGyhmRQJcnUvto+lGfHKaZNAnNwMgK6CDOP0=
Subject key identifier:   2D:38:54:B6:8D:0A:3B:07:CB:81:14:C9:E7:CC:54:10:44:7F:23:57
Certificate issuer:       /CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
Certificate serial:       18573B
Authority key identifier: 56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6578b0ca9e805d9aded2ca5213e962a441bd22a2.roa
Signing time:             Tue 28 Mar 2023 22:29:21 +0000
ROA not before:           Sun 26 Mar 2023 22:27:46 +0000
ROA not after:            Fri 28 Mar 2025 22:27:46 +0000
asID:                     28509
IP address blocks:        200.94.168.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595195 (0x18573b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
        Validity
            Not Before: Mar 26 22:27:46 2023 GMT
            Not After : Mar 28 22:27:46 2025 GMT
        Subject: CN=6578b0ca9e805d9aded2ca5213e962a441bd22a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:ba:c4:21:a3:7d:51:af:f0:bc:56:2d:3f:
                    bd:05:94:2b:d8:db:e9:f3:f0:fa:df:69:70:76:c7:
                    72:8b:9d:89:24:1d:74:e7:1a:ed:f0:44:db:00:6f:
                    5e:29:78:a4:3e:07:2d:e9:5b:97:08:70:c9:30:aa:
                    08:8b:c9:21:4f:fd:62:b5:e3:8c:cd:8e:ec:32:74:
                    f7:30:9b:01:c0:bb:0a:d3:86:42:b7:a1:86:70:c1:
                    36:a0:52:6a:be:59:0f:27:fa:b3:a4:d3:34:36:1d:
                    e9:8d:aa:e8:4d:4a:91:0c:29:b6:e8:f7:a2:a9:94:
                    5f:b2:44:cc:11:bf:5f:a8:d7:58:5c:48:d6:19:be:
                    cd:eb:e0:a1:5c:17:ee:62:4d:a4:67:ff:69:3d:c3:
                    4a:5a:5b:6d:86:7e:a3:ce:31:70:15:df:21:d8:b2:
                    61:27:e2:27:15:4b:d7:dc:0c:0d:1f:35:1e:9c:84:
                    80:72:3d:d0:69:a3:f9:cd:6a:c5:9f:70:eb:9b:72:
                    90:2e:2d:77:d0:a2:df:a9:0d:a4:02:0f:33:e2:a2:
                    8b:78:03:b6:8d:6a:1d:fd:14:cb:f9:3d:3a:03:b5:
                    eb:69:0d:86:31:0f:36:17:ea:35:63:9d:a7:25:63:
                    b3:32:16:90:ad:e9:a1:ea:b7:a9:d5:1c:28:88:11:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:54:B6:8D:0A:3B:07:CB:81:14:C9:E7:CC:54:10:44:7F:23:57
            X509v3 Authority Key Identifier:
                keyid:56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6578b0ca9e805d9aded2ca5213e962a441bd22a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6073bb1fe384abff375ad4e17bea5b9cd8716010.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:58:73:36:93:91:35:a5:be:60:88:60:89:69:65:98:b2:12:
         87:01:2f:db:c6:b6:f8:0f:05:6a:cd:bd:bf:20:ac:b1:b7:7a:
         52:fc:91:3e:e4:fe:62:45:f7:67:a3:c8:93:27:9e:df:bf:bb:
         5c:3f:11:49:60:f3:0f:ce:a1:d5:a4:40:1e:7e:79:d4:51:65:
         b7:1b:8b:33:fe:d7:26:dd:4e:61:0b:a2:fb:49:b2:fd:e5:78:
         ca:58:90:b2:44:4a:2a:27:32:f2:f1:42:c5:d9:95:6a:04:e7:
         f9:e8:10:0b:c0:f0:77:f9:9e:54:73:d3:d1:cd:dc:53:b3:c0:
         24:71:a6:33:99:be:de:18:c1:29:64:09:06:b2:f4:28:42:44:
         35:44:0a:fe:2c:5d:bd:7f:d1:a4:74:a0:56:f2:f4:76:28:a6:
         a6:61:9c:b5:32:54:63:6b:4a:f2:7a:f1:16:2d:33:15:a1:52:
         ad:ec:f6:7f:a7:4e:81:ff:81:64:6e:5b:83:cd:8a:02:cc:c4:
         a2:2b:2e:bd:e2:77:0e:5b:ad:94:f0:c3:03:4e:f6:65:a4:62:
         17:fe:23:be:ba:46:c1:a6:e3:a6:96:e4:64:ab:91:73:f7:10:
         d8:74:1d:b6:02:d8:b1:b1:7d:c0:75:e1:21:36:e6:89:47:fa:
         11:c0:c6:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGFc7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
NzNiYjFmZTM4NGFiZmYzNzVhZDRlMTdiZWE1YjljZDg3MTYwMTAwHhcNMjMwMzI2
MjIyNzQ2WhcNMjUwMzI4MjIyNzQ2WjAzMTEwLwYDVQQDEyg2NTc4YjBjYTllODA1
ZDlhZGVkMmNhNTIxM2U5NjJhNDQxYmQyMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvQm6xCGjfVGv8LxWLT+9BZQr2Nvp8/D632lwdsdyi52JJB10
5xrt8ETbAG9eKXikPgct6VuXCHDJMKoIi8khT/1iteOMzY7sMnT3MJsBwLsK04ZC
t6GGcME2oFJqvlkPJ/qzpNM0Nh3pjaroTUqRDCm26PeiqZRfskTMEb9fqNdYXEjW
Gb7N6+ChXBfuYk2kZ/9pPcNKWltthn6jzjFwFd8h2LJhJ+InFUvX3AwNHzUenISA
cj3QaaP5zWrFn3Drm3KQLi130KLfqQ2kAg8z4qKLeAO2jWod/RTL+T06A7XraQ2G
MQ82F+o1Y52nJWOzMhaQremh6rep1RwoiBE7VwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC04VLaNCjsHy4EUyefMVBBEfyNXMB8GA1UdIwQYMBaAFFZxOckPEVFsF1aw
kEzuT1BFaqm2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjA3M2Ji
MWZlMzg0YWJmZjM3NWFkNGUxN2JlYTViOWNkODcxNjAxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjE4YmJhMzQtMThmOS00ZWVkLTkyMmItNWZjNWY2
ZWJjZjdlLzY1NzhiMGNhOWU4MDVkOWFkZWQyY2E1MjEzZTk2MmE0NDFiZDIyYTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMThiYmEzNC0xOGY5LTRlZWQtOTIyYi01ZmM1
ZjZlYmNmN2UvNjA3M2JiMWZlMzg0YWJmZjM3NWFkNGUxN2JlYTViOWNkODcxNjAx
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8heqDANBgkqhkiG9w0BAQsFAAOCAQEAy1hzNpORNaW+YIhg
iWllmLIShwEv28a2+A8Fas29vyCssbd6UvyRPuT+YkX3Z6PIkyee37+7XD8RSWDz
D86h1aRAHn551FFltxuLM/7XJt1OYQui+0my/eV4yliQskRKKicy8vFCxdmVagTn
+egQC8Dwd/meVHPT0c3cU7PAJHGmM5m+3hjBKWQJBrL0KEJENUQK/ixdvX/RpHSg
VvL0diimpmGctTJUY2tK8nrxFi0zFaFSrez2f6dOgf+BZG5bg82KAszEoisuveJ3
DlutlPDDA072ZaRiF/4jvrpGwabjppbkZKuRc/cQ2HQdtgLYsbF9wHXhITbmiUf6
EcDGTA==
-----END CERTIFICATE-----