Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/de16f80a3d0839277b7b99013d90f33bf24fc65d.roa
File:                     de16f80a3d0839277b7b99013d90f33bf24fc65d.roa (raw, json)
Hash identifier:          8skWiMTVEU/BRaq5Cqtt0Yl+BL4Nmd2bkoib9FEJAfs=
Subject key identifier:   79:43:2D:15:1C:06:92:7B:CB:6D:82:D7:44:8A:8F:79:91:68:48:1C
Certificate issuer:       /CN=6af5832d0aca6d2bfb240d2006f0cb7be7893abb
Certificate serial:       01261C
Authority key identifier: 88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/de16f80a3d0839277b7b99013d90f33bf24fc65d.roa
Signing time:             Wed 24 May 2023 17:57:49 +0000
ROA not before:           Tue 23 May 2023 17:57:48 +0000
ROA not after:            Sat 24 May 2025 17:57:48 +0000
asID:                     6503
IP address blocks:        200.23.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75292 (0x1261c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af5832d0aca6d2bfb240d2006f0cb7be7893abb
        Validity
            Not Before: May 23 17:57:48 2023 GMT
            Not After : May 24 17:57:48 2025 GMT
        Subject: CN=de16f80a3d0839277b7b99013d90f33bf24fc65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:67:06:1c:6d:57:82:0a:b9:73:71:24:f0:
                    27:47:fe:71:77:67:e1:c2:11:c3:5f:bf:74:8d:04:
                    45:8b:4e:8c:09:46:9d:84:ae:bb:7d:a9:15:a6:86:
                    5d:21:20:59:a2:0d:71:84:0e:ce:02:8b:16:a6:c1:
                    56:26:17:f9:56:f9:66:3e:64:58:b1:a4:da:e0:01:
                    64:4e:94:39:a3:b3:58:cb:6e:46:c3:c7:1c:cf:6e:
                    17:fa:1e:8b:a6:c2:4d:74:bf:79:ae:f0:56:86:f1:
                    b6:1a:5f:72:4e:ef:42:9f:cc:e9:0c:56:a9:66:b7:
                    99:d9:8e:ab:e9:05:39:73:68:99:d0:10:38:4c:80:
                    e3:20:b1:89:11:16:a7:0d:86:06:88:1c:8b:b0:7a:
                    f2:0f:6f:2b:c0:0d:92:16:a5:91:65:82:9a:56:e9:
                    19:97:b9:b9:69:a9:f6:b3:a7:49:dd:94:13:fb:7c:
                    23:97:27:27:62:8d:48:7d:9e:fe:69:61:b3:83:e9:
                    d8:80:56:de:de:e7:37:8f:4e:af:ee:d8:ce:5e:e6:
                    60:33:32:43:71:06:55:11:e0:de:e5:82:bc:b2:ec:
                    e2:6a:dc:88:ef:69:97:21:b3:59:5f:32:06:3e:8e:
                    5f:26:b6:be:12:37:85:4c:e2:f9:9e:c3:4d:b7:22:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:2D:15:1C:06:92:7B:CB:6D:82:D7:44:8A:8F:79:91:68:48:1C
            X509v3 Authority Key Identifier:
                keyid:88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/de16f80a3d0839277b7b99013d90f33bf24fc65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:3d:47:3f:6f:b5:8c:70:0b:07:82:73:6c:eb:fb:2e:44:
         9f:d3:86:ba:b9:0e:94:5f:15:78:a2:a4:78:82:c1:2c:47:09:
         68:c0:0b:ff:27:b5:93:c9:77:10:16:42:8c:6f:22:75:2d:47:
         3e:54:b4:2e:96:9c:e9:72:cd:d4:6d:32:55:ec:60:f0:92:73:
         b7:a9:ee:a5:34:1a:16:97:86:23:05:62:09:05:2d:f3:ed:5e:
         e6:60:e8:9f:71:88:28:3f:a9:77:8f:b7:1b:cc:cd:36:bc:09:
         e6:d7:2f:eb:29:ad:2e:81:20:fc:35:34:5e:7a:51:cf:28:79:
         32:36:33:00:2e:5e:a7:df:db:0a:b0:36:8a:ff:a1:4d:5f:e6:
         ff:d0:e2:24:e4:50:5f:66:1e:91:6f:a1:eb:f6:06:89:01:9c:
         4e:df:4b:da:10:f7:56:31:be:61:be:cf:b8:18:ea:f5:e1:11:
         d2:99:ca:98:b6:bf:09:a7:61:eb:08:1d:92:3d:1d:c6:8a:3d:
         d2:8d:7f:07:96:3e:0b:a1:54:83:25:3e:c6:57:c1:bf:93:b1:
         4e:05:24:93:6c:77:35:b3:f2:21:6c:98:d2:c3:e4:34:db:62:
         3c:6a:3c:d3:ef:37:98:11:38:4d:d3:b8:1f:34:1c:8e:1a:78:
         86:53:19:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDASYcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ZjU4MzJkMGFjYTZkMmJmYjI0MGQyMDA2ZjBjYjdiZTc4OTNhYmIwHhcNMjMwNTIz
MTc1NzQ4WhcNMjUwNTI0MTc1NzQ4WjAzMTEwLwYDVQQDEyhkZTE2ZjgwYTNkMDgz
OTI3N2I3Yjk5MDEzZDkwZjMzYmYyNGZjNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA15RnBhxtV4IKuXNxJPAnR/5xd2fhwhHDX790jQRFi06MCUad
hK67fakVpoZdISBZog1xhA7OAosWpsFWJhf5VvlmPmRYsaTa4AFkTpQ5o7NYy25G
w8ccz24X+h6LpsJNdL95rvBWhvG2Gl9yTu9Cn8zpDFapZreZ2Y6r6QU5c2iZ0BA4
TIDjILGJERanDYYGiByLsHryD28rwA2SFqWRZYKaVukZl7m5aan2s6dJ3ZQT+3wj
lycnYo1IfZ7+aWGzg+nYgFbe3uc3j06v7tjOXuZgMzJDcQZVEeDe5YK8suziatyI
72mXIbNZXzIGPo5fJra+EjeFTOL5nsNNtyLAmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHlDLRUcBpJ7y22C10SKj3mRaEgcMB8GA1UdIwQYMBaAFIjDX3UCXjM10ik7
en2r6hMdCuTVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmFmNTgz
MmQwYWNhNmQyYmZiMjQwZDIwMDZmMGNiN2JlNzg5M2FiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZlOWJjNjEtMTg2YS00NWRiLTlhN2EtMTFlMTAy
YTkwYmY0L2RlMTZmODBhM2QwODM5Mjc3YjdiOTkwMTNkOTBmMzNiZjI0ZmM2NWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmU5YmM2MS0xODZhLTQ1ZGItOWE3YS0xMWUx
MDJhOTBiZjQvNmFmNTgzMmQwYWNhNmQyYmZiMjQwZDIwMDZmMGNiN2JlNzg5M2Fi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcgXSDANBgkqhkiG9w0BAQsFAAOCAQEAIuw9Rz9vtYxwCweC
c2zr+y5En9OGurkOlF8VeKKkeILBLEcJaMAL/ye1k8l3EBZCjG8idS1HPlS0Lpac
6XLN1G0yVexg8JJzt6nupTQaFpeGIwViCQUt8+1e5mDon3GIKD+pd4+3G8zNNrwJ
5tcv6ymtLoEg/DU0XnpRzyh5MjYzAC5ep9/bCrA2iv+hTV/m/9DiJORQX2YekW+h
6/YGiQGcTt9L2hD3VjG+Yb7PuBjq9eER0pnKmLa/Cadh6wgdkj0dxoo90o1/B5Y+
C6FUgyU+xlfBv5OxTgUkk2x3NbPyIWyY0sPkNNtiPGo80+83mBE4TdO4HzQcjhp4
hlMZsA==
-----END CERTIFICATE-----