Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/ede29d62ccc079c55223d836dd76bd9bf73bcbf0.roa
File:                     ede29d62ccc079c55223d836dd76bd9bf73bcbf0.roa (raw, json)
Hash identifier:          UFTXrFb/QgWpZfvohL3NyZAtA3p5u8RHFEytM18EREc=
Subject key identifier:   51:1F:A2:03:AF:53:79:2C:7C:3E:1A:48:98:C0:7C:DE:01:37:7A:B9
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       12D314
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/ede29d62ccc079c55223d836dd76bd9bf73bcbf0.roa
Signing time:             Thu 22 Jun 2023 19:12:32 +0000
ROA not before:           Wed 21 Jun 2023 19:12:29 +0000
ROA not after:            Sun 22 Jun 2025 19:12:29 +0000
asID:                     3356
IP address blocks:        200.1.175.0/24 maxlen: 24
                          201.221.124.0/23 maxlen: 24
                          179.0.27.0/24 maxlen: 24
                          2801:15:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233684 (0x12d314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: Jun 21 19:12:29 2023 GMT
            Not After : Jun 22 19:12:29 2025 GMT
        Subject: CN=ede29d62ccc079c55223d836dd76bd9bf73bcbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:d8:62:a5:63:f2:d8:36:29:e5:68:56:83:
                    c9:2b:0d:20:10:71:8e:af:22:01:dd:c3:bf:75:5e:
                    89:41:94:6b:e0:97:c8:06:5f:25:d5:cb:2c:08:42:
                    f5:66:59:42:e4:44:50:b4:65:06:26:05:22:c9:d8:
                    ff:f3:89:e0:64:27:f5:4f:20:89:db:4a:ea:54:68:
                    bd:61:e7:50:a8:2f:56:47:2d:53:5c:6e:08:44:76:
                    9a:75:03:5e:bc:15:7f:59:aa:dc:02:03:e5:1d:df:
                    d9:29:7e:ac:2a:bd:38:bb:ff:5c:76:ae:53:da:68:
                    a7:6c:25:a4:a9:22:19:fe:89:fc:32:d2:f0:34:35:
                    ae:ca:73:b1:9a:54:10:79:60:6f:67:c2:2e:56:69:
                    8b:81:21:7f:47:16:29:8a:8b:d3:8d:74:07:be:32:
                    a1:ed:23:ac:ca:c8:d1:2a:ed:ae:14:8a:a3:f1:38:
                    e3:de:b9:a5:d8:8c:d2:0b:c8:3b:01:dc:e5:70:f2:
                    06:95:f5:df:cc:7a:33:85:3f:7f:95:f3:ec:f2:84:
                    1f:a8:a3:99:c9:59:24:73:14:fe:df:88:3c:65:1b:
                    88:0d:f3:a8:0d:69:91:31:89:43:12:8b:02:4a:4e:
                    c5:bd:d2:98:22:94:3d:0f:31:cd:c9:12:b7:0f:bc:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:A2:03:AF:53:79:2C:7C:3E:1A:48:98:C0:7C:DE:01:37:7A:B9
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/ede29d62ccc079c55223d836dd76bd9bf73bcbf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24
                  200.1.175.0/24
                  201.221.124.0/23
                IPv6:
                  2801:15:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:d3:3d:e9:fd:b0:58:9f:46:67:bd:39:a5:5a:4e:96:94:
         dc:e2:eb:3e:c2:ef:db:73:20:f8:f6:39:09:6d:b4:5f:7b:9f:
         0f:c3:7b:e4:b7:b6:cb:9a:7a:e1:86:09:90:71:09:d6:d9:b6:
         1e:d1:8d:32:2e:09:11:d3:3c:b8:35:ce:59:dc:f1:a9:64:dd:
         61:f4:54:1a:38:23:2d:f8:0f:44:49:d1:92:5e:b3:45:f7:3a:
         28:16:32:7b:d4:5f:3a:aa:14:f6:65:64:fd:d6:ec:7d:8b:b6:
         d5:60:c1:ae:4d:f9:e4:e8:5f:ce:1d:02:36:2f:01:b3:4e:ea:
         9e:cb:e7:65:b9:46:4c:28:c4:73:fe:48:88:13:20:cc:93:2c:
         2b:2a:db:57:a6:14:b7:65:34:2e:58:6c:ab:75:ac:5e:f6:41:
         d5:ab:75:07:1e:42:76:91:61:a4:ca:69:9f:fa:02:df:92:70:
         15:f0:b4:cd:d4:8f:67:85:e1:38:9b:47:52:67:0a:fa:a5:56:
         57:3d:74:68:42:3e:ea:1a:ca:6e:13:db:4d:19:49:5e:44:4d:
         95:91:6a:14:a3:8d:ad:aa:21:3a:76:c4:fb:74:65:db:6d:4c:
         ab:5f:4d:70:de:2f:93:96:ab:5c:37:e8:57:af:b0:59:a0:82:
         84:21:f8:62
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDEtMUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi
OTNjY2ZhYzgyNDE5Njg0MzcwMWZkZDkyNjU1MDQ0YWM3MDE4OWYwHhcNMjMwNjIx
MTkxMjI5WhcNMjUwNjIyMTkxMjI5WjAzMTEwLwYDVQQDEyhlZGUyOWQ2MmNjYzA3
OWM1NTIyM2Q4MzZkZDc2YmQ5YmY3M2JjYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuTHYYqVj8tg2KeVoVoPJKw0gEHGOryIB3cO/dV6JQZRr4JfI
Bl8l1cssCEL1ZllC5ERQtGUGJgUiydj/84ngZCf1TyCJ20rqVGi9YedQqC9WRy1T
XG4IRHaadQNevBV/WarcAgPlHd/ZKX6sKr04u/9cdq5T2minbCWkqSIZ/on8MtLw
NDWuynOxmlQQeWBvZ8IuVmmLgSF/RxYpiovTjXQHvjKh7SOsysjRKu2uFIqj8Tjj
3rml2IzSC8g7AdzlcPIGlfXfzHozhT9/lfPs8oQfqKOZyVkkcxT+34g8ZRuIDfOo
DWmRMYlDEosCSk7FvdKYIpQ9DzHNyRK3D7zZFQIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFFEfogOvU3ksfD4aSJjAfN4BN3q5MB8GA1UdIwQYMBaAFJp1Yqy05L51dkGD
kTPYsItBcF6+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGI5M2Nj
ZmFjODI0MTk2ODQzNzAxZmRkOTI2NTUwNDRhYzcwMTg5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmExZWVjMjEtZjlhMC00NmRjLTliMjctMGM2MmY4
ZGEyZDE3L2VkZTI5ZDYyY2NjMDc5YzU1MjIzZDgzNmRkNzZiZDliZjczYmNiZjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYTFlZWMyMS1mOWEwLTQ2ZGMtOWIyNy0wYzYy
ZjhkYTJkMTcvOGI5M2NjZmFjODI0MTk2ODQzNzAxZmRkOTI2NTUwNDRhYzcwMTg5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGAQCAAEwEgMEALMAGwMEAMgBrwMEAcndfDAPBAIAAjAJAwcAKAEAFUAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCsw9M96f2wWJ9GZ705pVpOlpTc4us+wu/bcyD49jkJ
bbRfe58Pw3vkt7bLmnrhhgmQcQnW2bYe0Y0yLgkR0zy4Nc5Z3PGpZN1h9FQaOCMt
+A9ESdGSXrNF9zooFjJ71F86qhT2ZWT91ux9i7bVYMGuTfnk6F/OHQI2LwGzTuqe
y+dluUZMKMRz/kiIEyDMkywrKttXphS3ZTQuWGyrdaxe9kHVq3UHHkJ2kWGkymmf
+gLfknAV8LTN1I9nheE4m0dSZwr6pVZXPXRoQj7qGspuE9tNGUleRE2VkWoUo42t
qiE6dsT7dGXbbUyrX01w3i+TlqtcN+hXr7BZoIKEIfhi
-----END CERTIFICATE-----