Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/207ad937e160ceaf1d91b2bbe642abee7f136dee.roa
File:                     207ad937e160ceaf1d91b2bbe642abee7f136dee.roa (raw, json)
Hash identifier:          usTyWsDsYYyl5YfcPdUyrqZaL28WChNGTbLrN4dqZik=
Subject key identifier:   F7:A3:43:71:D7:18:5A:CF:96:BE:15:FA:EB:47:60:91:A8:83:6F:F4
Certificate issuer:       /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial:       26E4E2
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/207ad937e160ceaf1d91b2bbe642abee7f136dee.roa
Signing time:             Thu 18 Jan 2024 12:32:02 +0000
ROA not before:           Thu 18 Jan 2024 12:32:02 +0000
ROA not after:            Sun 18 Jan 2026 12:32:02 +0000
asID:                     60022
IP address blocks:        190.121.240.0/23 maxlen: 24
                          190.121.244.0/22 maxlen: 24
                          2803:1100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548962 (0x26e4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
        Validity
            Not Before: Jan 18 12:32:02 2024 GMT
            Not After : Jan 18 12:32:02 2026 GMT
        Subject: CN=207ad937e160ceaf1d91b2bbe642abee7f136dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:99:7d:22:42:d9:ff:b7:1d:22:4c:ee:7a:
                    cd:a8:96:a9:c5:ab:74:6a:16:de:e0:39:6b:2c:be:
                    79:5d:4e:87:da:c9:23:77:db:a5:95:b7:e1:a0:52:
                    70:4c:e8:2f:98:9e:fa:bc:f2:23:25:65:92:16:99:
                    a2:49:c0:70:19:2e:ee:81:8b:5a:8e:6b:aa:d1:ac:
                    b1:df:4a:01:51:63:2b:10:91:6d:ef:21:ce:19:1d:
                    58:12:11:4a:d5:f3:24:b7:c1:f2:2a:72:84:d8:83:
                    e2:da:6f:d5:45:60:d4:bf:53:ab:f0:36:9a:8d:e9:
                    05:4d:ff:2c:4a:6d:75:51:9b:2c:99:eb:01:4b:24:
                    6f:0b:0a:c4:37:f6:50:85:43:2e:41:c8:be:2a:07:
                    9a:b9:2c:f0:2f:c4:05:f0:79:37:a9:0b:35:da:43:
                    97:6c:10:5b:55:95:1f:47:01:65:a7:4d:2d:57:63:
                    f4:d9:56:49:bc:3a:19:9c:f2:38:49:72:8e:b0:6d:
                    86:3a:51:81:54:31:85:c4:99:66:da:28:bf:7c:da:
                    96:0d:44:7d:1f:7c:c6:0d:41:07:d6:ff:93:89:e4:
                    8c:32:99:bc:83:1c:12:2d:86:ee:51:d5:12:e2:30:
                    14:63:ec:0f:24:89:57:23:cc:9d:ea:7a:36:98:39:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:43:71:D7:18:5A:CF:96:BE:15:FA:EB:47:60:91:A8:83:6F:F4
            X509v3 Authority Key Identifier:
                keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/207ad937e160ceaf1d91b2bbe642abee7f136dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.240.0/23
                  190.121.244.0/22
                IPv6:
                  2803:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:cb:4f:d4:0e:da:33:72:cc:2b:1e:7b:d3:f1:b9:42:3f:
         52:d6:c6:74:b0:be:9a:02:d2:ec:a0:2d:3d:35:cd:a8:5a:75:
         dc:81:21:df:8e:75:4f:fb:23:88:51:f1:0b:a3:ee:3b:30:e1:
         ba:ea:26:73:d5:14:fb:91:ff:85:8b:4f:b9:bf:23:fd:19:bf:
         8a:dd:d1:97:cd:98:5b:1b:5f:49:1b:5b:a0:ac:66:a6:4c:60:
         71:fa:c8:a4:ce:9b:10:e6:30:18:b1:af:5c:ec:ee:97:60:31:
         6c:3f:32:4e:02:b9:6f:1d:eb:ef:c8:f5:a2:00:53:95:99:75:
         ff:00:22:7b:97:0b:9a:4d:2d:68:e1:1c:9a:2c:0c:d7:13:6a:
         31:c1:b4:de:63:e4:3b:4d:c5:ba:74:12:e5:91:ce:ae:28:0e:
         78:20:ce:e8:71:77:12:63:33:4a:29:ee:61:5f:f8:44:b7:ce:
         dc:eb:99:e4:b3:be:ca:56:e3:73:b8:cc:60:01:3e:17:5e:42:
         61:42:f4:9e:0a:43:86:95:a6:b1:28:df:39:d9:56:95:20:b6:
         b0:c2:fa:c3:7d:9d:a8:4d:13:98:5f:08:5e:49:5b:f0:e2:0a:
         03:34:51:a0:ea:88:e9:73:90:f5:79:7c:9c:5e:42:2d:e6:fc:
         48:f6:55:95
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDJuTiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
YzI1MTcxYzc5MjFmZGNkMTE3Y2E3MDk2ZWNlYTViYTYzNTg4NzMwHhcNMjQwMTE4
MTIzMjAyWhcNMjYwMTE4MTIzMjAyWjAzMTEwLwYDVQQDEygyMDdhZDkzN2UxNjBj
ZWFmMWQ5MWIyYmJlNjQyYWJlZTdmMTM2ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm5qZfSJC2f+3HSJM7nrNqJapxat0ahbe4DlrLL55XU6H2skj
d9ullbfhoFJwTOgvmJ76vPIjJWWSFpmiScBwGS7ugYtajmuq0ayx30oBUWMrEJFt
7yHOGR1YEhFK1fMkt8HyKnKE2IPi2m/VRWDUv1Or8DaajekFTf8sSm11UZssmesB
SyRvCwrEN/ZQhUMuQci+KgeauSzwL8QF8Hk3qQs12kOXbBBbVZUfRwFlp00tV2P0
2VZJvDoZnPI4SXKOsG2GOlGBVDGFxJlm2ii/fNqWDUR9H3zGDUEH1v+TieSMMpm8
gxwSLYbuUdUS4jAUY+wPJIlXI8yd6no2mDniMQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFPejQ3HXGFrPlr4V+utHYJGog2/0MB8GA1UdIwQYMBaAFETzWVHEUBw/qaBW
Bp6iPdE45ZBTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmNjMjUx
NzFjNzkyMWZkY2QxMTdjYTcwOTZlY2VhNWJhNjM1ODg3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmZhZDRkMzgtMTViNC00NTc2LTkwMmUtNjU1NWMw
OTY3MjhlLzIwN2FkOTM3ZTE2MGNlYWYxZDkxYjJiYmU2NDJhYmVlN2YxMzZkZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZmFkNGQzOC0xNWI0LTQ1NzYtOTAyZS02NTU1
YzA5NjcyOGUvZmNjMjUxNzFjNzkyMWZkY2QxMTdjYTcwOTZlY2VhNWJhNjM1ODg3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAb558AMEAr559DANBAIAAjAHAwUAKAMRADANBgkqhkiG9w0B
AQsFAAOCAQEAjrTLT9QO2jNyzCsee9PxuUI/UtbGdLC+mgLS7KAtPTXNqFp13IEh
3451T/sjiFHxC6PuOzDhuuomc9UU+5H/hYtPub8j/Rm/it3Rl82YWxtfSRtboKxm
pkxgcfrIpM6bEOYwGLGvXOzul2AxbD8yTgK5bx3r78j1ogBTlZl1/wAie5cLmk0t
aOEcmiwM1xNqMcG03mPkO03FunQS5ZHOrigOeCDO6HF3EmMzSinuYV/4RLfO3OuZ
5LO+ylbjc7jMYAE+F15CYUL0ngpDhpWmsSjfOdlWlSC2sML6w32dqE0TmF8IXklb
8OIKAzRRoOqI6XOQ9Xl8nF5CLeb8SPZVlQ==
-----END CERTIFICATE-----