Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/e6c7133413156a7b49cbe2d457d18fefd22e2202.roa
File:                     e6c7133413156a7b49cbe2d457d18fefd22e2202.roa (raw, json)
Hash identifier:          i90L8V+Ltf7nv6dHqn6NT5+0k4rihsd8KqMO+WCuXQY=
Subject key identifier:   39:5C:71:BF:A8:BF:14:11:0E:13:FE:FC:27:DB:3D:65:1E:F1:50:9C
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       270EC9
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/e6c7133413156a7b49cbe2d457d18fefd22e2202.roa
Signing time:             Fri 26 Jan 2024 00:35:16 +0000
ROA not before:           Fri 26 Jan 2024 00:35:16 +0000
ROA not after:            Mon 26 Jan 2026 00:35:16 +0000
asID:                     262202
IP address blocks:        186.176.204.96/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559689 (0x270ec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Jan 26 00:35:16 2024 GMT
            Not After : Jan 26 00:35:16 2026 GMT
        Subject: CN=e6c7133413156a7b49cbe2d457d18fefd22e2202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:9f:6c:b1:50:57:af:1e:00:58:f4:4d:e4:
                    bb:1d:17:88:b5:01:dd:91:19:33:61:47:86:bb:18:
                    14:b6:5d:dd:4e:80:ee:4c:77:65:9d:f1:8a:7f:21:
                    fc:9c:db:2e:1e:0e:08:41:8a:3a:74:89:c9:8a:de:
                    0b:50:6c:80:48:3e:57:f2:d5:39:6d:02:a0:bc:be:
                    23:4b:3c:c2:73:e2:8d:99:5a:b1:1f:2a:26:f5:7b:
                    bd:fd:80:61:4c:c9:d5:80:0e:0c:81:ac:24:5c:94:
                    90:17:aa:f6:10:c3:10:ea:d7:bf:8a:ef:f2:86:9c:
                    db:96:20:28:b3:95:d4:91:f6:dc:98:45:6a:db:f7:
                    65:3e:f8:9f:77:ac:e5:3d:de:e8:39:53:9a:02:27:
                    12:29:7b:74:f4:29:a4:39:d3:a3:19:69:d0:98:49:
                    32:5e:c2:06:d5:64:2f:a4:da:0c:9e:05:18:4b:c1:
                    36:f0:dc:05:c2:c5:cb:7a:89:cb:13:59:eb:c2:16:
                    c3:03:4f:f1:9c:01:20:f1:29:0b:83:7b:19:c5:fa:
                    ff:47:09:ca:57:e6:ee:83:c7:8c:5a:be:32:fa:76:
                    39:f4:9e:b1:7e:09:15:11:e5:03:0c:6b:fd:2d:4f:
                    75:3a:65:4f:a0:44:94:7e:c0:7d:7b:e2:3c:ee:89:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:71:BF:A8:BF:14:11:0E:13:FE:FC:27:DB:3D:65:1E:F1:50:9C
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/e6c7133413156a7b49cbe2d457d18fefd22e2202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.204.96/28

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:e1:a5:d9:07:35:61:66:54:72:80:11:ec:f2:46:58:64:
         a2:15:78:20:9c:0f:da:dd:28:d9:41:c9:57:68:0b:68:18:9b:
         3c:52:bc:e2:02:2f:4e:b9:bf:b1:03:9f:07:c2:54:0a:b9:64:
         3e:49:ee:a5:57:8c:84:e5:c0:39:a4:5a:3a:94:79:4f:72:1e:
         9c:11:b4:2c:bf:05:78:0d:aa:f0:40:23:cf:a9:e9:5b:53:59:
         2a:11:65:5b:6e:08:b7:4e:76:c6:69:35:a0:2b:5f:9e:2e:c8:
         82:10:f6:f7:f4:16:8c:c4:d3:36:a9:d9:f4:79:7a:e8:b1:2e:
         7d:cc:be:f1:bd:cd:fb:0c:9a:17:b5:d7:17:00:f3:7e:9d:50:
         61:27:56:a6:16:dd:bf:3e:d6:04:ca:32:ac:39:cf:99:5d:96:
         aa:f3:ce:e2:5b:89:b3:57:23:42:8d:cd:48:68:7f:f9:35:b5:
         86:74:a5:71:e3:a1:27:0b:9d:28:e2:3f:ba:18:07:93:16:c9:
         51:54:4c:d3:e1:23:fd:5e:84:07:7f:3b:cc:ba:a2:f8:0b:61:
         87:71:63:e7:a9:93:a0:80:09:7c:e6:4f:f7:69:91:25:78:ff:
         ea:81:c0:47:f2:de:92:49:e1:99:2f:a5:ef:69:70:56:42:5b:
         cb:ed:79:39
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJw7JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
NTcwMzMwMjNlNzNjNWIxYTUyNGFhNDNmMDU4YmQxZWQ3MmQ0N2YwHhcNMjQwMTI2
MDAzNTE2WhcNMjYwMTI2MDAzNTE2WjAzMTEwLwYDVQQDEyhlNmM3MTMzNDEzMTU2
YTdiNDljYmUyZDQ1N2QxOGZlZmQyMmUyMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiE2fbLFQV68eAFj0TeS7HReItQHdkRkzYUeGuxgUtl3dToDu
THdlnfGKfyH8nNsuHg4IQYo6dInJit4LUGyASD5X8tU5bQKgvL4jSzzCc+KNmVqx
Hyom9Xu9/YBhTMnVgA4MgawkXJSQF6r2EMMQ6te/iu/yhpzbliAos5XUkfbcmEVq
2/dlPvifd6zlPd7oOVOaAicSKXt09CmkOdOjGWnQmEkyXsIG1WQvpNoMngUYS8E2
8NwFwsXLeonLE1nrwhbDA0/xnAEg8SkLg3sZxfr/RwnKV+bug8eMWr4y+nY59J6x
fgkVEeUDDGv9LU91OmVPoESUfsB9e+I87okinQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDlccb+ovxQRDhP+/CfbPWUe8VCcMB8GA1UdIwQYMBaAFJZbxfXCJa1jqwN4
3yKvlBlD27nmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2E1NzAz
MzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzUwYjA2YzctNDQ4Zi00MTI1LTgwY2ItZmMwZDg2
OTU0MmQwL2U2YzcxMzM0MTMxNTZhN2I0OWNiZTJkNDU3ZDE4ZmVmZDIyZTIyMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNTBiMDZjNy00NDhmLTQxMjUtODBjYi1mYzBk
ODY5NTQyZDAvY2E1NzAzMzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFBLqwzGAwDQYJKoZIhvcNAQELBQADggEBAHjZ4aXZBzVhZlRy
gBHs8kZYZKIVeCCcD9rdKNlByVdoC2gYmzxSvOICL065v7EDnwfCVAq5ZD5J7qVX
jITlwDmkWjqUeU9yHpwRtCy/BXgNqvBAI8+p6VtTWSoRZVtuCLdOdsZpNaArX54u
yIIQ9vf0FozE0zap2fR5euixLn3MvvG9zfsMmhe11xcA836dUGEnVqYW3b8+1gTK
Mqw5z5ldlqrzzuJbibNXI0KNzUhof/k1tYZ0pXHjoScLnSjiP7oYB5MWyVFUTNPh
I/1ehAd/O8y6ovgLYYdxY+epk6CACXzmT/dpkSV4/+qBwEfy3pJJ4Zkvpe9pcFZC
W8vteTk=
-----END CERTIFICATE-----