Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/670ffa3d290bb6353a8d540801bc1c9e1c1a12ea.roa
File:                     670ffa3d290bb6353a8d540801bc1c9e1c1a12ea.roa (raw, json)
Hash identifier:          cV2uadqE3q5S1PpqUJiSudFvRsvikRmTjArLV2X+JAI=
Subject key identifier:   C5:EA:1B:BD:10:C1:77:08:30:14:11:9E:59:DF:03:B2:74:D7:C6:C2
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       06AC8D
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/670ffa3d290bb6353a8d540801bc1c9e1c1a12ea.roa
Signing time:             Fri 05 Aug 2022 23:03:16 +0000
ROA not before:           Fri 05 Aug 2022 22:56:17 +0000
ROA not after:            Mon 05 Aug 2024 22:56:17 +0000
asID:                     7087
IP address blocks:        200.52.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437389 (0x6ac8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Aug  5 22:56:17 2022 GMT
            Not After : Aug  5 22:56:17 2024 GMT
        Subject: CN=670ffa3d290bb6353a8d540801bc1c9e1c1a12ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:9d:ff:21:6d:42:aa:20:2e:30:f4:0d:91:
                    2a:af:b5:25:df:2a:7a:58:94:fd:01:46:c4:4b:cb:
                    86:37:44:8a:3c:24:fb:f4:e0:fe:87:24:83:ff:14:
                    65:69:90:3a:c0:10:21:43:21:f3:f3:2f:5d:57:d3:
                    11:a3:f9:cf:85:5f:95:e8:6c:1a:18:6d:ce:5d:11:
                    62:a0:a0:a5:75:d4:8e:28:6e:2e:d1:8d:0e:ca:12:
                    9f:2e:21:3d:33:4f:b2:e6:89:3b:07:6e:76:9c:83:
                    e7:ca:82:95:1a:9b:fa:25:dc:c7:fb:d1:83:35:48:
                    25:aa:e0:7f:c1:9b:98:a5:c4:2e:a8:9f:b8:db:71:
                    bf:ba:de:8b:e8:40:e3:8f:f4:1d:87:4c:da:2a:d1:
                    6b:d9:81:e2:84:d2:46:d7:f3:8c:63:d2:74:f1:e1:
                    a6:44:09:c6:2d:1b:cd:c9:fa:e0:a6:9f:da:a6:52:
                    3d:23:c4:fc:41:1f:29:e3:1f:02:db:32:71:76:d1:
                    67:1c:6c:cb:52:8c:0e:a9:55:cb:5e:50:fa:21:a7:
                    16:a2:d0:37:4b:23:0c:50:e8:67:aa:d2:59:f0:52:
                    72:37:56:b3:ec:a8:f1:87:77:75:dc:25:39:ba:b0:
                    a6:89:c1:2a:d2:1c:31:c7:0a:b2:3c:69:b2:d0:cf:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:1B:BD:10:C1:77:08:30:14:11:9E:59:DF:03:B2:74:D7:C6:C2
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/670ffa3d290bb6353a8d540801bc1c9e1c1a12ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:99:dd:84:54:77:8f:48:6d:bd:2e:b8:11:67:d8:e7:78:d6:
         a4:c9:68:ef:b9:26:1e:be:07:e7:70:38:19:52:20:c9:c4:f3:
         c8:4e:56:3f:a2:b4:57:b1:2a:87:91:45:c9:6e:b7:22:46:b7:
         cc:25:59:b1:ba:dc:76:77:b7:76:b2:21:2e:7c:47:4a:ba:b0:
         2d:9d:87:13:cd:f0:52:8a:48:a4:5d:16:3a:1f:b0:9b:d1:29:
         b6:a7:27:50:c4:23:9d:a1:75:ca:dc:a9:fc:f8:e0:42:5e:75:
         08:5d:6a:30:5d:ab:a3:67:f2:b8:e3:2b:47:97:9d:73:01:10:
         77:2e:8c:6c:90:17:96:35:22:dc:b7:49:59:54:e1:73:95:6a:
         ec:e3:f0:0e:9c:3d:b2:0e:f2:81:77:04:fb:ba:86:b7:42:2c:
         3d:7a:f2:70:1a:2e:4d:45:37:86:58:29:3c:51:1f:64:fb:b5:
         78:9a:99:2c:42:2e:7f:bf:7f:49:d6:50:9d:8f:62:71:4d:24:
         9a:82:95:35:f1:c3:9d:26:03:0c:0b:d9:95:45:34:ab:62:d5:
         ad:28:b6:ec:7a:0c:3c:9c:74:3a:72:98:50:57:a7:2c:66:e2:
         ee:ba:a9:ce:be:70:ba:9e:ec:eb:ba:44:db:a3:d0:28:bd:69:
         f7:55:cb:58
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBqyNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
ZDIwYmVmNjcwODhmODM2MjY2MTVhOGFjY2ZiYWZmZmFkMDYzMzQwHhcNMjIwODA1
MjI1NjE3WhcNMjQwODA1MjI1NjE3WjAzMTEwLwYDVQQDEyg2NzBmZmEzZDI5MGJi
NjM1M2E4ZDU0MDgwMWJjMWM5ZTFjMWExMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAouKd/yFtQqogLjD0DZEqr7Ul3yp6WJT9AUbES8uGN0SKPCT7
9OD+hySD/xRlaZA6wBAhQyHz8y9dV9MRo/nPhV+V6GwaGG3OXRFioKClddSOKG4u
0Y0OyhKfLiE9M0+y5ok7B252nIPnyoKVGpv6JdzH+9GDNUglquB/wZuYpcQuqJ+4
23G/ut6L6EDjj/Qdh0zaKtFr2YHihNJG1/OMY9J08eGmRAnGLRvNyfrgpp/aplI9
I8T8QR8p4x8C2zJxdtFnHGzLUowOqVXLXlD6IacWotA3SyMMUOhnqtJZ8FJyN1az
7Kjxh3d13CU5urCmicEq0hwxxwqyPGmy0M+3vQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMXqG70QwXcIMBQRnlnfA7J018bCMB8GA1UdIwQYMBaAFJM04C3iAFoaQ7z/
TS7giA4jseFmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzBkMjBi
ZWY2NzA4OGY4MzYyNjYxNWE4YWNjZmJhZmZmYWQwNjMzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTYzZmNmODAtOTFiNS00ZGE2LWEzZWEtN2JiODRh
MGU4M2VkLzY3MGZmYTNkMjkwYmI2MzUzYThkNTQwODAxYmMxYzllMWMxYTEyZWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NjNmY2Y4MC05MWI1LTRkYTYtYTNlYS03YmI4
NGEwZTgzZWQvMzBkMjBiZWY2NzA4OGY4MzYyNjYxNWE4YWNjZmJhZmZmYWQwNjMz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMg0kDANBgkqhkiG9w0BAQsFAAOCAQEAU5ndhFR3j0htvS64
EWfY53jWpMlo77kmHr4H53A4GVIgycTzyE5WP6K0V7Eqh5FFyW63Ika3zCVZsbrc
dne3drIhLnxHSrqwLZ2HE83wUopIpF0WOh+wm9EptqcnUMQjnaF1ytyp/PjgQl51
CF1qMF2ro2fyuOMrR5edcwEQdy6MbJAXljUi3LdJWVThc5Vq7OPwDpw9sg7ygXcE
+7qGt0IsPXrycBouTUU3hlgpPFEfZPu1eJqZLEIuf79/SdZQnY9icU0kmoKVNfHD
nSYDDAvZlUU0q2LVrSi27HoMPJx0OnKYUFenLGbi7rqpzr5wup7s67pE26PQKL1p
91XLWA==
-----END CERTIFICATE-----