Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7c94927adf0841f5caa2e62347565a75f92e6e74.roa
File:                     7c94927adf0841f5caa2e62347565a75f92e6e74.roa (raw, json)
Hash identifier:          Ex2cCWqCNqt/nTI6qAt0n6qKFjM+Aimm8kLPAOkOxAQ=
Subject key identifier:   5B:B2:76:12:F5:AF:15:BB:4A:51:82:4C:59:46:B9:D0:E9:39:1F:2F
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       240233
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7c94927adf0841f5caa2e62347565a75f92e6e74.roa
Signing time:             Mon 17 Jul 2023 16:08:52 +0000
ROA not before:           Sun 16 Jul 2023 16:08:49 +0000
ROA not after:            Thu 17 Jul 2025 16:08:49 +0000
asID:                     10697
IP address blocks:        200.123.48.0/24 maxlen: 24
                          200.50.160.0/23 maxlen: 24
                          200.50.164.0/24 maxlen: 24
                          200.50.168.0/24 maxlen: 24
                          200.50.173.0/24 maxlen: 24
                          2800:820::/32 maxlen: 48
                          2800:820:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2359859 (0x240233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Jul 16 16:08:49 2023 GMT
            Not After : Jul 17 16:08:49 2025 GMT
        Subject: CN=7c94927adf0841f5caa2e62347565a75f92e6e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:8e:1b:2a:2a:15:22:7e:44:9d:dc:60:36:
                    60:df:02:11:a6:6c:c8:96:56:d0:94:7c:16:e5:e3:
                    80:92:47:ed:dd:da:3b:6d:7e:ab:15:fa:74:b8:3d:
                    76:cc:81:12:8b:7c:82:46:6f:62:a7:8c:09:d4:ec:
                    55:20:8c:0c:f9:fe:95:49:2b:7a:3d:67:2f:39:00:
                    7d:d5:51:d6:1e:48:b9:9c:c9:f8:54:11:fc:09:7a:
                    5d:5f:47:3b:b9:a7:4d:68:40:23:77:22:81:62:d7:
                    60:29:57:85:07:f6:83:45:73:85:88:e5:bb:2c:88:
                    53:1a:c0:ea:ef:49:f4:e6:10:68:f0:d1:0f:c2:ac:
                    e3:bc:e7:92:7b:e4:78:7b:69:38:bb:90:97:a6:53:
                    f1:89:56:4f:53:b9:c6:6d:91:07:f4:99:6b:3d:64:
                    88:76:3c:51:02:5f:a9:78:36:5c:45:4d:8b:f8:2d:
                    17:d8:7c:1c:27:61:1f:bd:f2:a0:61:3c:98:71:83:
                    b3:0e:95:0c:a7:f9:bb:8c:f1:cf:5b:05:bb:31:56:
                    62:6b:ad:1c:08:7b:0f:c2:e3:55:60:35:a5:88:5c:
                    63:a5:00:74:c8:a8:b3:d6:d6:13:f8:a9:92:0b:3f:
                    77:bf:35:bf:7c:e5:25:9e:e0:cc:9b:f2:fe:42:11:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B2:76:12:F5:AF:15:BB:4A:51:82:4C:59:46:B9:D0:E9:39:1F:2F
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7c94927adf0841f5caa2e62347565a75f92e6e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23
                  200.50.164.0/24
                  200.50.168.0/24
                  200.50.173.0/24
                  200.123.48.0/24
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:a5:c1:62:e3:b9:22:3b:2c:7b:ac:e8:92:fa:ad:7d:44:
         ae:8b:a1:4a:f3:16:74:bf:46:e1:91:3b:f5:f2:a8:bb:91:64:
         e6:58:ff:79:6f:8e:9c:62:ae:d5:b9:79:1d:c8:2f:bd:db:5d:
         46:ca:92:c7:0e:18:a5:b5:9f:9a:57:67:b9:a7:4d:b4:6b:82:
         09:da:a7:b3:c3:41:14:4b:f5:c6:60:03:b5:84:80:37:40:9b:
         f1:cb:0f:e1:0b:2f:5f:14:91:63:54:d4:7f:9f:28:c6:c6:1b:
         d3:9d:7b:24:f4:7c:a9:17:4f:5d:5e:dd:a3:26:2c:c2:9e:b9:
         ab:ed:74:23:2d:c1:e9:a3:53:09:70:05:a6:cc:d5:f6:3a:15:
         d0:e9:99:b3:f4:fb:03:e8:b8:11:79:da:7e:96:d2:60:76:8e:
         47:30:3d:a4:fe:62:45:47:03:fd:3e:60:cb:a1:ee:66:cf:22:
         31:29:6f:48:28:ef:ec:4d:f6:2b:a5:26:f3:99:fc:d2:a0:f8:
         70:8e:db:44:4b:29:c8:47:d1:ea:1b:a7:2c:ec:cb:53:45:3b:
         86:97:c5:26:be:0b:ff:ef:b2:5a:f5:6f:b7:0e:c4:c1:75:7c:
         36:63:89:c8:90:7e:4b:2c:bb:10:ab:bd:1a:18:47:22:b0:b6:
         0c:bd:ba:05
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIDJAIzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjMwNzE2
MTYwODQ5WhcNMjUwNzE3MTYwODQ5WjAzMTEwLwYDVQQDEyg3Yzk0OTI3YWRmMDg0
MWY1Y2FhMmU2MjM0NzU2NWE3NWY5MmU2ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjP2OGyoqFSJ+RJ3cYDZg3wIRpmzIllbQlHwW5eOAkkft3do7
bX6rFfp0uD12zIESi3yCRm9ip4wJ1OxVIIwM+f6VSSt6PWcvOQB91VHWHki5nMn4
VBH8CXpdX0c7uadNaEAjdyKBYtdgKVeFB/aDRXOFiOW7LIhTGsDq70n05hBo8NEP
wqzjvOeSe+R4e2k4u5CXplPxiVZPU7nGbZEH9JlrPWSIdjxRAl+peDZcRU2L+C0X
2HwcJ2EfvfKgYTyYcYOzDpUMp/m7jPHPWwW7MVZia60cCHsPwuNVYDWliFxjpQB0
yKiz1tYT+KmSCz93vzW/fOUlnuDMm/L+QhHx+wIDAQABo4ICgjCCAn4wHQYDVR0O
BBYEFFuydhL1rxW7SlGCTFlGudDpOR8vMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzdjOTQ5MjdhZGYwODQxZjVjYWEyZTYyMzQ3NTY1YTc1ZjkyZTZlNzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3
MDUwJAQCAAEwHgMEAcgyoAMEAMgypAMEAMgyqAMEAMgyrQMEAMh7MDANBAIAAjAH
AwUAKAAIIDANBgkqhkiG9w0BAQsFAAOCAQEAKKalwWLjuSI7LHus6JL6rX1Erouh
SvMWdL9G4ZE79fKou5Fk5lj/eW+OnGKu1bl5HcgvvdtdRsqSxw4YpbWfmldnuadN
tGuCCdqns8NBFEv1xmADtYSAN0Cb8csP4QsvXxSRY1TUf58oxsYb0517JPR8qRdP
XV7doyYswp65q+10Iy3B6aNTCXAFpszV9joV0OmZs/T7A+i4EXnafpbSYHaORzA9
pP5iRUcD/T5gy6HuZs8iMSlvSCjv7E32K6Um85n80qD4cI7bREspyEfR6hunLOzL
U0U7hpfFJr4L/++yWvVvtw7EwXV8NmOJyJB+Syy7EKu9GhhHIrC2DL26BQ==
-----END CERTIFICATE-----