Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/a8aba4ff349e8536bef9f71d26b4b8f27290075b.roa
File:                     a8aba4ff349e8536bef9f71d26b4b8f27290075b.roa (raw, json)
Hash identifier:          D5jeCn5Gv3IZpFndsBbN3F1tYBGopRw4el7OW3dj3tg=
Subject key identifier:   81:3D:4D:4C:5C:DD:CF:39:2C:1B:9E:37:59:A2:1F:5C:F4:1A:84:56
Certificate issuer:       /CN=c72bbcdcc728b5d6248dc78bf634a7196ddb8cc8
Certificate serial:       274FC3
Authority key identifier: 8D:E9:41:B8:42:17:51:AD:B3:D6:51:93:BA:40:A3:3F:6B:79:C0:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c72bbcdcc728b5d6248dc78bf634a7196ddb8cc8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/a8aba4ff349e8536bef9f71d26b4b8f27290075b.roa
Signing time:             Wed 13 Mar 2024 08:30:00 +0000
ROA not before:           Wed 13 Mar 2024 08:30:00 +0000
ROA not after:            Fri 13 Mar 2026 08:30:00 +0000
asID:                     28021
IP address blocks:        200.90.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576323 (0x274fc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c72bbcdcc728b5d6248dc78bf634a7196ddb8cc8
        Validity
            Not Before: Mar 13 08:30:00 2024 GMT
            Not After : Mar 13 08:30:00 2026 GMT
        Subject: CN=a8aba4ff349e8536bef9f71d26b4b8f27290075b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:29:c0:16:f6:d1:c2:0c:23:5a:e5:20:23:
                    3f:a9:8d:93:31:2a:36:ea:5e:a7:50:e5:df:69:1c:
                    26:93:9a:62:57:cc:7f:ef:56:8f:fb:59:20:f8:73:
                    e9:45:4c:ba:91:26:37:3f:de:ab:e9:33:80:f3:2d:
                    cc:3d:75:df:b4:1b:14:59:70:91:26:e2:7a:3f:36:
                    ef:49:ab:3f:54:01:79:fe:0d:e3:08:27:c1:fb:a4:
                    c1:8d:3f:a6:f0:0d:ab:24:30:c4:f1:29:aa:9f:16:
                    d2:c5:b6:55:a1:54:81:15:5d:27:b9:e3:e6:9e:3c:
                    48:89:09:06:23:b7:f3:fd:a0:d5:6f:13:3f:1a:48:
                    ae:ac:7a:2c:de:9f:38:01:da:7f:bf:27:7a:8d:1f:
                    14:b3:7b:96:5d:49:c3:8e:05:98:66:66:9d:cc:ea:
                    a5:10:6e:b7:51:9e:6e:f0:4b:79:b5:b9:ae:e0:38:
                    3f:89:6f:91:aa:d6:98:48:9d:41:5e:c4:bf:3f:bc:
                    ed:14:fb:22:9c:8e:63:13:7a:a8:df:e4:09:ed:65:
                    e8:fc:30:62:c2:5b:eb:df:94:2b:d1:ab:67:c5:65:
                    83:dc:67:70:66:5d:c6:9f:cc:e5:ac:74:f8:d2:e5:
                    e9:d7:d9:cf:28:ff:24:7a:65:be:a0:56:51:87:53:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3D:4D:4C:5C:DD:CF:39:2C:1B:9E:37:59:A2:1F:5C:F4:1A:84:56
            X509v3 Authority Key Identifier:
                keyid:8D:E9:41:B8:42:17:51:AD:B3:D6:51:93:BA:40:A3:3F:6B:79:C0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c72bbcdcc728b5d6248dc78bf634a7196ddb8cc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/a8aba4ff349e8536bef9f71d26b4b8f27290075b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/375f7fcf-6aa6-446c-b911-61e9100d6a11/c72bbcdcc728b5d6248dc78bf634a7196ddb8cc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:d3:85:75:ad:2c:60:44:33:e2:03:aa:4f:14:97:2b:52:
         53:15:d0:d8:eb:c2:3c:15:19:6d:e7:e5:16:fd:63:d2:f4:fb:
         a4:ce:9c:5a:be:27:b1:fb:01:77:b9:f8:4e:ea:3a:5c:51:96:
         b0:d9:dd:e9:23:2c:7a:83:b6:b1:2e:dd:7b:de:16:de:2f:53:
         6a:96:1b:24:33:cd:9e:ea:8c:07:3a:01:ba:6f:92:35:29:27:
         05:35:d2:b1:bc:c9:bf:1f:dd:37:9e:d3:5f:2b:b0:15:88:f2:
         1a:c9:3d:4d:9e:c2:cc:af:2a:ec:56:36:6d:a2:70:8f:d3:5a:
         4f:57:8c:ff:3f:08:56:18:c6:ff:66:dc:c1:70:e9:82:71:e0:
         f2:f9:92:52:55:c0:15:54:ba:3f:43:93:3d:d4:b4:64:f2:74:
         ce:87:a0:35:b4:75:65:67:b1:a0:13:82:94:a6:f8:3c:76:9a:
         49:15:1d:15:74:cf:64:00:b2:67:09:ac:48:f6:1e:79:7a:a7:
         39:4f:d3:ed:11:97:ff:df:14:1c:88:86:0f:05:f2:8b:d5:b7:
         4c:e4:59:59:39:08:52:ad:2a:75:bc:ff:7c:01:09:78:c3:8a:
         72:b2:d0:2b:df:2c:f8:4c:ae:c7:b4:f4:e3:22:66:d8:f4:e0:
         8c:48:7c:be
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ0/DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
MmJiY2RjYzcyOGI1ZDYyNDhkYzc4YmY2MzRhNzE5NmRkYjhjYzgwHhcNMjQwMzEz
MDgzMDAwWhcNMjYwMzEzMDgzMDAwWjAzMTEwLwYDVQQDEyhhOGFiYTRmZjM0OWU4
NTM2YmVmOWY3MWQyNmI0YjhmMjcyOTAwNzViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3IQpwBb20cIMI1rlICM/qY2TMSo26l6nUOXfaRwmk5piV8x/
71aP+1kg+HPpRUy6kSY3P96r6TOA8y3MPXXftBsUWXCRJuJ6PzbvSas/VAF5/g3j
CCfB+6TBjT+m8A2rJDDE8SmqnxbSxbZVoVSBFV0nuePmnjxIiQkGI7fz/aDVbxM/
GkiurHos3p84Adp/vyd6jR8Us3uWXUnDjgWYZmadzOqlEG63UZ5u8Et5tbmu4Dg/
iW+RqtaYSJ1BXsS/P7ztFPsinI5jE3qo3+QJ7WXo/DBiwlvr35Qr0atnxWWD3Gdw
Zl3Gn8zlrHT40uXp19nPKP8kemW+oFZRh1OTYQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIE9TUxc3c85LBueN1miH1z0GoRWMB8GA1UdIwQYMBaAFI3pQbhCF1Gts9ZR
k7pAoz9recA3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzcyYmJj
ZGNjNzI4YjVkNjI0OGRjNzhiZjYzNGE3MTk2ZGRiOGNjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzc1ZjdmY2YtNmFhNi00NDZjLWI5MTEtNjFlOTEw
MGQ2YTExL2E4YWJhNGZmMzQ5ZTg1MzZiZWY5ZjcxZDI2YjRiOGYyNzI5MDA3NWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNzVmN2ZjZi02YWE2LTQ0NmMtYjkxMS02MWU5
MTAwZDZhMTEvYzcyYmJjZGNjNzI4YjVkNjI0OGRjNzhiZjYzNGE3MTk2ZGRiOGNj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8hamDANBgkqhkiG9w0BAQsFAAOCAQEAe9DThXWtLGBEM+ID
qk8UlytSUxXQ2OvCPBUZbeflFv1j0vT7pM6cWr4nsfsBd7n4Tuo6XFGWsNnd6SMs
eoO2sS7de94W3i9TapYbJDPNnuqMBzoBum+SNSknBTXSsbzJvx/dN57TXyuwFYjy
Gsk9TZ7CzK8q7FY2baJwj9NaT1eM/z8IVhjG/2bcwXDpgnHg8vmSUlXAFVS6P0OT
PdS0ZPJ0zoegNbR1ZWexoBOClKb4PHaaSRUdFXTPZACyZwmsSPYeeXqnOU/T7RGX
/98UHIiGDwXyi9W3TORZWTkIUq0qdbz/fAEJeMOKcrLQK98s+Eyux7T04yJm2PTg
jEh8vg==
-----END CERTIFICATE-----