Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/8a149a8f8a6d77751b4b65ba55178782e8245b3a.roa
File:                     8a149a8f8a6d77751b4b65ba55178782e8245b3a.roa (raw, json)
Hash identifier:          Qjzm6FM0qo0qSYCIANfDNV7TICTQoaCE5+nu1rTJmh8=
Subject key identifier:   5F:E9:9D:09:A4:C7:5A:0C:02:C8:DD:35:48:F3:B2:EB:05:60:9F:CF
Certificate issuer:       /CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
Certificate serial:       15074A
Authority key identifier: 0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/8a149a8f8a6d77751b4b65ba55178782e8245b3a.roa
Signing time:             Fri 02 Jun 2023 08:30:11 +0000
ROA not before:           Thu 01 Jun 2023 08:30:11 +0000
ROA not after:            Sat 31 May 2025 08:30:11 +0000
asID:                     270065
IP address blocks:        200.114.64.0/20 maxlen: 24
                          2803:9e80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378122 (0x15074a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
        Validity
            Not Before: Jun  1 08:30:11 2023 GMT
            Not After : May 31 08:30:11 2025 GMT
        Subject: CN=8a149a8f8a6d77751b4b65ba55178782e8245b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:ee:ed:3e:3a:78:13:21:5e:77:9f:cf:0d:
                    35:f1:c4:a2:4f:fa:86:6b:12:f2:96:49:aa:29:db:
                    e8:78:c2:2f:23:1c:92:8c:6d:00:15:fd:ac:61:34:
                    64:7f:32:2c:95:9e:7a:25:58:6b:2c:05:85:1b:62:
                    7c:d6:22:4f:d5:7f:aa:9f:ab:1e:a3:ad:41:93:d8:
                    e5:29:88:4e:65:46:0f:a4:a4:2b:70:6a:85:7b:6c:
                    9e:38:76:16:99:48:f0:fe:65:55:7f:a3:ff:b9:61:
                    eb:71:0e:3a:fd:40:de:df:d3:d8:48:42:4d:90:1b:
                    ae:58:d0:3f:12:e5:c9:dd:c9:23:06:f6:5d:09:9d:
                    53:a3:e3:44:47:1b:92:8b:6b:e3:94:da:82:a2:c3:
                    87:98:ed:f0:57:fd:5f:a9:7b:9e:e1:36:67:5a:3f:
                    05:23:60:6a:4e:93:a8:25:b6:63:09:9b:65:12:1a:
                    62:72:1f:1c:20:2f:07:d8:c4:51:ee:fa:f7:8b:57:
                    04:32:90:27:d7:6f:c5:5c:8f:92:13:ec:8e:03:49:
                    7d:45:63:d4:bc:f6:e8:01:91:db:b2:27:dc:b1:17:
                    d6:bf:69:a2:52:62:61:6e:71:b8:d0:9a:ef:cb:fd:
                    da:0b:f6:03:24:19:6c:59:96:8d:91:8b:91:e2:71:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:9D:09:A4:C7:5A:0C:02:C8:DD:35:48:F3:B2:EB:05:60:9F:CF
            X509v3 Authority Key Identifier:
                keyid:0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/8a149a8f8a6d77751b4b65ba55178782e8245b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.64.0/20
                IPv6:
                  2803:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:e3:a9:00:7d:a9:c0:7d:81:83:bc:9a:f6:47:f8:70:63:
         8f:ce:ed:21:c4:6e:f8:a5:bc:fa:9a:78:a2:55:32:bc:bb:53:
         95:0a:37:0c:78:2e:73:04:63:3b:bb:2e:e6:fe:77:29:f7:d5:
         e2:a5:70:69:f5:bd:0c:3b:88:63:79:dc:7e:00:6b:3d:7d:31:
         04:0b:8b:56:6f:e7:0b:45:de:15:11:ab:b3:c4:8b:3f:7b:4c:
         31:85:cb:33:26:ae:fe:f0:31:b7:3d:5f:6e:f5:22:98:7b:03:
         1c:a9:2d:31:51:c8:0c:44:f0:91:cc:17:13:8a:80:e2:68:d8:
         2d:5d:6f:a1:0c:44:a2:b3:00:d8:34:06:1c:f8:ad:7c:12:5e:
         fa:c7:99:ca:37:6c:31:b5:b3:f8:15:f2:b3:b8:63:60:33:79:
         0b:bb:d9:c2:01:07:79:3c:5a:fb:1b:be:ab:41:21:a9:07:4e:
         ee:7c:38:ab:14:f3:bf:25:21:66:47:8f:ca:c6:84:2e:bd:d6:
         51:e1:f9:5a:6e:e4:48:eb:16:79:e5:01:dc:a4:6e:ba:4a:fc:
         cd:3b:6c:06:3b:a3:1b:82:56:8c:9f:4a:5e:2f:61:b4:68:f9:
         2d:ff:20:03:bc:a3:a6:ee:37:70:a2:eb:67:86:0f:5b:eb:c7:
         7e:0a:7f:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFQdKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZl
N2I1NTJiZmJiODY5M2YwYTdiYWM2OTM2NGQyZDRlN2ViN2U4NWMwHhcNMjMwNjAx
MDgzMDExWhcNMjUwNTMxMDgzMDExWjAzMTEwLwYDVQQDEyg4YTE0OWE4ZjhhNmQ3
Nzc1MWI0YjY1YmE1NTE3ODc4MmU4MjQ1YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnATu7T46eBMhXnefzw018cSiT/qGaxLylkmqKdvoeMIvIxyS
jG0AFf2sYTRkfzIslZ56JVhrLAWFG2J81iJP1X+qn6seo61Bk9jlKYhOZUYPpKQr
cGqFe2yeOHYWmUjw/mVVf6P/uWHrcQ46/UDe39PYSEJNkBuuWNA/EuXJ3ckjBvZd
CZ1To+NERxuSi2vjlNqCosOHmO3wV/1fqXue4TZnWj8FI2BqTpOoJbZjCZtlEhpi
ch8cIC8H2MRR7vr3i1cEMpAn12/FXI+SE+yOA0l9RWPUvPboAZHbsifcsRfWv2mi
UmJhbnG40Jrvy/3aC/YDJBlsWZaNkYuR4nF1LQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFF/pnQmkx1oMAsjdNUjzsusFYJ/PMB8GA1UdIwQYMBaAFA7IjvzQoeo6vjx0
jMe031HaBxfiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmU3YjU1
MmJmYmI4NjkzZjBhN2JhYzY5MzY0ZDJkNGU3ZWI3ZTg1Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjJmNDkyZmQtNTJmMy00NDc4LWExMTAtYWY0MGVi
NTFmNjJhLzhhMTQ5YThmOGE2ZDc3NzUxYjRiNjViYTU1MTc4NzgyZTgyNDViM2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMmY0OTJmZC01MmYzLTQ0NzgtYTExMC1hZjQw
ZWI1MWY2MmEvNmU3YjU1MmJmYmI4NjkzZjBhN2JhYzY5MzY0ZDJkNGU3ZWI3ZTg1
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEBMhyQDANBAIAAjAHAwUAKAOegDANBgkqhkiG9w0BAQsFAAOC
AQEAHknjqQB9qcB9gYO8mvZH+HBjj87tIcRu+KW8+pp4olUyvLtTlQo3DHgucwRj
O7su5v53KffV4qVwafW9DDuIY3ncfgBrPX0xBAuLVm/nC0XeFRGrs8SLP3tMMYXL
Myau/vAxtz1fbvUimHsDHKktMVHIDETwkcwXE4qA4mjYLV1voQxEorMA2DQGHPit
fBJe+seZyjdsMbWz+BXys7hjYDN5C7vZwgEHeTxa+xu+q0EhqQdO7nw4qxTzvyUh
ZkePysaELr3WUeH5Wm7kSOsWeeUB3KRuukr8zTtsBjujG4JWjJ9KXi9htGj5Lf8g
A7yjpu43cKLrZ4YPW+vHfgp/jw==
-----END CERTIFICATE-----