Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/d723cf12b399860e9cc5fb90e6d8b68c7ca10f47.roa
File:                     d723cf12b399860e9cc5fb90e6d8b68c7ca10f47.roa (raw, json)
Hash identifier:          QZoDDr5o7Gyl+86GFPtK5mmKoz8zlkSFaX4P4dc6DEk=
Subject key identifier:   59:3A:80:3D:C3:83:E8:28:9C:39:8F:BD:DD:0D:6F:4F:57:0D:CA:6D
Certificate issuer:       /CN=dd58e41b009fd9e35e9ce09a6e4942100de89f17
Certificate serial:       0C4950
Authority key identifier: 7A:D7:69:74:D5:E4:A6:7E:04:7D:6B:C1:76:D4:A6:D8:36:B4:F1:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd58e41b009fd9e35e9ce09a6e4942100de89f17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/d723cf12b399860e9cc5fb90e6d8b68c7ca10f47.roa
Signing time:             Wed 24 Mar 2021 14:39:30 +0000
ROA not before:           Wed 24 Mar 2021 14:39:30 +0000
ROA not after:            Tue 24 Mar 2026 14:39:30 +0000
asID:                     23031
IP address blocks:        200.6.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805200 (0xc4950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd58e41b009fd9e35e9ce09a6e4942100de89f17
        Validity
            Not Before: Mar 24 14:39:30 2021 GMT
            Not After : Mar 24 14:39:30 2026 GMT
        Subject: CN=d723cf12b399860e9cc5fb90e6d8b68c7ca10f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:60:16:95:a1:8d:91:08:fa:39:89:fc:4c:
                    b6:d8:f3:d3:ac:17:53:49:6d:6f:a7:b5:c8:b5:58:
                    b5:f4:25:f2:29:81:b5:e0:d4:a8:ec:6f:ed:c0:8b:
                    2b:ed:4f:f1:6a:52:3c:74:9d:68:ba:7e:0a:81:97:
                    fb:20:eb:c2:a5:ad:9b:59:67:88:73:32:8c:22:55:
                    4e:27:cb:a5:99:94:31:1c:77:fc:67:57:a2:c1:2f:
                    28:81:8d:e2:f3:34:ff:32:2a:f8:ce:4d:9a:62:3c:
                    aa:6b:40:70:83:3f:77:cd:3d:b0:39:9e:db:a0:07:
                    01:83:e4:c8:7a:12:70:5c:54:c6:58:d5:b4:4f:aa:
                    e1:b4:ee:fd:85:0c:30:a7:46:dd:b5:cd:40:bb:59:
                    58:66:ef:02:28:c2:1e:7b:c4:07:ff:6d:bb:1c:e0:
                    39:48:c9:f2:3a:23:62:9b:ee:3a:f3:12:0a:7d:03:
                    ff:fe:c9:53:cc:df:c8:c3:fa:ab:51:c1:f6:44:cf:
                    da:91:a8:34:0d:ec:2d:ad:9c:e4:9d:d5:22:c6:4c:
                    f2:b3:ab:42:94:dc:d1:ed:54:30:0b:8a:9b:c6:46:
                    b4:de:4e:4e:46:c7:64:d0:0d:ca:aa:f0:26:79:69:
                    3a:09:51:19:4c:23:46:01:b2:1f:81:3a:ed:08:47:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:80:3D:C3:83:E8:28:9C:39:8F:BD:DD:0D:6F:4F:57:0D:CA:6D
            X509v3 Authority Key Identifier:
                keyid:7A:D7:69:74:D5:E4:A6:7E:04:7D:6B:C1:76:D4:A6:D8:36:B4:F1:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd58e41b009fd9e35e9ce09a6e4942100de89f17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/d723cf12b399860e9cc5fb90e6d8b68c7ca10f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/dd58e41b009fd9e35e9ce09a6e4942100de89f17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:c7:d8:ff:76:09:98:dd:aa:df:7d:3a:a4:76:fc:9c:2a:
         9b:ee:4b:72:a2:b6:8b:04:59:e1:98:e0:23:83:3f:b6:9a:a2:
         ec:d6:16:75:eb:03:32:9a:e3:67:c8:04:e9:fc:02:b6:86:f6:
         8a:81:df:49:c9:77:21:8c:1e:2d:9f:f1:d2:8d:ad:eb:20:69:
         f5:ec:25:3c:20:4f:0c:5a:98:b1:4d:7c:4b:cf:7a:fa:49:8c:
         b3:ac:fe:23:70:97:8f:50:78:26:f6:ac:6b:2a:b2:22:94:4a:
         bf:c8:e0:0a:64:7b:a3:62:cb:0c:d7:63:c5:19:c8:0d:d8:2e:
         7c:7f:3a:60:e7:9d:75:69:c1:f9:93:35:0f:42:50:e6:88:fb:
         35:ff:90:5f:ed:80:e5:ca:5d:01:4d:01:ad:1c:76:b9:23:60:
         66:c7:35:c0:b1:f6:c1:3a:40:7d:bc:b4:6a:57:56:ed:a8:5c:
         c7:12:60:3a:f2:ae:5a:5b:c6:9e:7b:98:d1:1c:29:ec:a3:47:
         76:e6:a7:00:4f:3d:b3:a0:de:e2:7c:6b:84:49:2e:a2:fb:3a:
         5e:b3:60:30:ce:ec:47:48:c9:26:e3:74:1d:6d:dd:af:8c:df:
         a2:ae:0e:5a:9d:77:32:f2:38:df:26:1b:9c:f8:1a:fd:0c:96:
         5b:97:ab:11
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDElQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
NThlNDFiMDA5ZmQ5ZTM1ZTljZTA5YTZlNDk0MjEwMGRlODlmMTcwHhcNMjEwMzI0
MTQzOTMwWhcNMjYwMzI0MTQzOTMwWjAzMTEwLwYDVQQDEyhkNzIzY2YxMmIzOTk4
NjBlOWNjNWZiOTBlNmQ4YjY4YzdjYTEwZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk1VgFpWhjZEI+jmJ/Ey22PPTrBdTSW1vp7XItVi19CXyKYG1
4NSo7G/twIsr7U/xalI8dJ1oun4KgZf7IOvCpa2bWWeIczKMIlVOJ8ulmZQxHHf8
Z1eiwS8ogY3i8zT/Mir4zk2aYjyqa0Bwgz93zT2wOZ7boAcBg+TIehJwXFTGWNW0
T6rhtO79hQwwp0bdtc1Au1lYZu8CKMIee8QH/227HOA5SMnyOiNim+468xIKfQP/
/slTzN/Iw/qrUcH2RM/akag0DewtrZzkndUixkzys6tClNzR7VQwC4qbxka03k5O
Rsdk0A3KqvAmeWk6CVEZTCNGAbIfgTrtCEdo8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFk6gD3Dg+gonDmPvd0Nb09XDcptMB8GA1UdIwQYMBaAFHrXaXTV5KZ+BH1r
wXbUptg2tPHYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ1OGU0
MWIwMDlmZDllMzVlOWNlMDlhNmU0OTQyMTAwZGU4OWYxNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzdhYzdhMjktZjQ4Yi00MGNkLWFhMDItOTk1ZWQ3
ZmEwNWU2L2Q3MjNjZjEyYjM5OTg2MGU5Y2M1ZmI5MGU2ZDhiNjhjN2NhMTBmNDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zN2FjN2EyOS1mNDhiLTQwY2QtYWEwMi05OTVl
ZDdmYTA1ZTYvZGQ1OGU0MWIwMDlmZDllMzVlOWNlMDlhNmU0OTQyMTAwZGU4OWYx
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgGDjANBgkqhkiG9w0BAQsFAAOCAQEAXxPH2P92CZjdqt99
OqR2/Jwqm+5LcqK2iwRZ4ZjgI4M/tpqi7NYWdesDMprjZ8gE6fwCtob2ioHfScl3
IYweLZ/x0o2t6yBp9ewlPCBPDFqYsU18S896+kmMs6z+I3CXj1B4JvasayqyIpRK
v8jgCmR7o2LLDNdjxRnIDdgufH86YOeddWnB+ZM1D0JQ5oj7Nf+QX+2A5cpdAU0B
rRx2uSNgZsc1wLH2wTpAfby0aldW7ahcxxJgOvKuWlvGnnuY0Rwp7KNHduanAE89
s6De4nxrhEkuovs6XrNgMM7sR0jJJuN0HW3dr4zfoq4OWp13MvI43yYbnPga/QyW
W5erEQ==
-----END CERTIFICATE-----