Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa
File:                     88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa (raw, json)
Hash identifier:          XUwU5DoZ7af+5voSLO9PBq/odsoPzdJ2bETI+F7LgCY=
Subject key identifier:   D2:B8:43:1B:1D:37:D2:08:29:70:55:39:FB:8C:2D:EB:FB:60:0E:C4
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       2718A6
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa
Signing time:             Thu 01 Feb 2024 15:49:33 +0000
ROA not before:           Thu 01 Feb 2024 15:49:33 +0000
ROA not after:            Sun 01 Feb 2026 15:49:33 +0000
asID:                     27986
IP address blocks:        152.231.110.0/23 maxlen: 24
                          2800:300::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562214 (0x2718a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb  1 15:49:33 2024 GMT
            Not After : Feb  1 15:49:33 2026 GMT
        Subject: CN=88a449bef1576d1fa7aad22dc1b08efc8e571c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:b7:5a:92:66:74:4a:9c:7c:cc:90:fb:5b:
                    f0:f1:7e:50:f7:d2:70:91:91:3e:1a:07:de:3f:e3:
                    fc:c6:82:64:18:c7:02:c5:9e:a7:23:56:00:b7:28:
                    b9:bd:10:3f:53:0e:38:be:ca:6a:66:e1:4f:90:8a:
                    ba:03:82:fd:e2:64:93:6c:c8:1c:8a:b0:43:56:13:
                    22:68:7a:fc:9b:f4:02:0f:02:f9:2e:d9:3c:89:8f:
                    c4:32:42:b8:a1:73:f7:16:a8:a4:57:43:84:fb:90:
                    fd:34:55:19:c7:f2:a8:e1:cd:3a:39:c2:ef:82:4b:
                    47:a2:1e:fd:1d:14:00:aa:e0:c4:b0:6e:3f:06:5f:
                    26:c5:21:db:c1:93:cd:19:06:ef:e0:45:45:e8:97:
                    e7:48:37:8f:bc:91:72:aa:18:cb:c1:0d:fb:cd:f8:
                    f9:ce:69:72:2d:29:6b:7c:6e:e2:8d:07:01:b9:e4:
                    ed:d9:2a:4f:64:5e:3c:1d:e8:2c:90:0f:3d:ba:e1:
                    88:a3:1d:34:eb:89:57:e4:99:ab:53:d6:87:92:b1:
                    be:36:48:1e:e8:56:f9:92:55:03:86:77:60:a4:91:
                    92:f6:ee:59:6d:db:88:29:b8:25:b1:f5:f6:05:2e:
                    27:e4:e1:04:18:f9:a9:19:ad:1b:13:16:c4:b5:c8:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:43:1B:1D:37:D2:08:29:70:55:39:FB:8C:2D:EB:FB:60:0E:C4
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/88a449bef1576d1fa7aad22dc1b08efc8e571c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.110.0/23
                IPv6:
                  2800:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:52:57:e5:7b:d0:08:15:e2:be:d4:a8:50:79:ae:b0:5d:65:
         e0:dc:e2:b7:6c:4e:98:9e:3a:7c:6f:d7:f9:76:e1:18:8c:2b:
         56:4a:62:2a:ba:56:bc:ac:6c:54:63:b3:bc:8c:a1:a4:7f:cc:
         ee:62:8c:f1:f4:61:3c:7f:d4:6c:f4:f4:18:8f:ee:5d:d2:ef:
         f2:5c:e8:e1:00:cd:10:66:4a:78:d5:30:19:cd:03:45:f5:cb:
         90:3b:88:11:8a:c4:54:97:b8:38:80:e4:8e:60:70:fc:44:c7:
         c4:66:e2:b4:87:4b:a6:6e:3e:9b:88:49:8e:ac:47:71:89:44:
         f6:9f:9c:e2:6e:6b:5f:b4:28:6c:12:09:7c:8b:dd:09:43:fd:
         5b:0a:e2:37:11:b0:e7:40:c0:38:84:ee:48:ec:71:00:ba:db:
         78:29:a4:f8:09:e5:07:fe:57:35:32:eb:fd:96:f1:6a:6c:0e:
         1e:ee:a3:49:3b:c1:91:42:8c:1f:25:54:72:3b:f8:05:a2:86:
         0d:a1:df:10:e9:47:ca:5c:2d:93:3a:7c:92:02:8e:6b:ad:13:
         37:0a:49:12:f3:cb:73:24:ce:9e:1d:be:6e:81:f9:b1:7f:4e:
         a0:ee:35:10:2a:70:9c:52:0f:c9:16:de:b5:de:c3:47:81:e3:
         73:61:f4:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJximMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
ZmJiYjE3M2MyMTdhYTgwMzBmYzZkOTM3OTg0MzU3OTIyOWNlMzEwHhcNMjQwMjAx
MTU0OTMzWhcNMjYwMjAxMTU0OTMzWjAzMTEwLwYDVQQDEyg4OGE0NDliZWYxNTc2
ZDFmYTdhYWQyMmRjMWIwOGVmYzhlNTcxYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgA63WpJmdEqcfMyQ+1vw8X5Q99JwkZE+GgfeP+P8xoJkGMcC
xZ6nI1YAtyi5vRA/Uw44vspqZuFPkIq6A4L94mSTbMgcirBDVhMiaHr8m/QCDwL5
Ltk8iY/EMkK4oXP3FqikV0OE+5D9NFUZx/Ko4c06OcLvgktHoh79HRQAquDEsG4/
Bl8mxSHbwZPNGQbv4EVF6JfnSDePvJFyqhjLwQ37zfj5zmlyLSlrfG7ijQcBueTt
2SpPZF48HegskA89uuGIox0064lX5JmrU9aHkrG+Nkge6Fb5klUDhndgpJGS9u5Z
bduIKbglsfX2BS4n5OEEGPmpGa0bExbEtcivNwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNK4QxsdN9IIKXBVOfuMLev7YA7EMB8GA1UdIwQYMBaAFG3Yh857qEWbykhx
HffAqeGP1nKBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVmYmJi
MTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2UzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDRhZmQxNzAtMDc1ZS00M2RmLWI0YTEtYzM0Zjc2
YzE4Y2NlLzg4YTQ0OWJlZjE1NzZkMWZhN2FhZDIyZGMxYjA4ZWZjOGU1NzFjODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NGFmZDE3MC0wNzVlLTQzZGYtYjRhMS1jMzRm
NzZjMThjY2UvMDVmYmJiMTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2Uz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAZjnbjANBAIAAjAHAwUAKAADADANBgkqhkiG9w0BAQsFAAOC
AQEAAVJX5XvQCBXivtSoUHmusF1l4Nzit2xOmJ46fG/X+XbhGIwrVkpiKrpWvKxs
VGOzvIyhpH/M7mKM8fRhPH/UbPT0GI/uXdLv8lzo4QDNEGZKeNUwGc0DRfXLkDuI
EYrEVJe4OIDkjmBw/ETHxGbitIdLpm4+m4hJjqxHcYlE9p+c4m5rX7QobBIJfIvd
CUP9WwriNxGw50DAOITuSOxxALrbeCmk+AnlB/5XNTLr/ZbxamwOHu6jSTvBkUKM
HyVUcjv4BaKGDaHfEOlHylwtkzp8kgKOa60TNwpJEvPLcyTOnh2+boH5sX9OoO41
ECpwnFIPyRbetd7DR4Hjc2H0vg==
-----END CERTIFICATE-----