Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5686028c-1710-4cec-be24-df1a03ee722d/66eeac00749e64533a6c378a2fcff341dcfc0199.roa
File:                     66eeac00749e64533a6c378a2fcff341dcfc0199.roa (raw, json)
Hash identifier:          uDeziPadtn2PM4G46tMvuFIVpseCAxuepFinu48oAa0=
Subject key identifier:   51:9A:EA:E7:49:93:78:0C:D8:B5:0F:B1:BA:BF:52:E1:99:74:68:9D
Certificate issuer:       /CN=743055e059a56878a00a3e896ce118bf141b68c5
Certificate serial:       081364
Authority key identifier: 17:2E:C7:88:54:89:87:DB:93:63:DE:5A:22:37:1D:CE:FA:64:4B:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/743055e059a56878a00a3e896ce118bf141b68c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5686028c-1710-4cec-be24-df1a03ee722d/66eeac00749e64533a6c378a2fcff341dcfc0199.roa
Signing time:             Tue 25 Apr 2023 18:39:20 +0000
ROA not before:           Mon 24 Apr 2023 18:39:20 +0000
ROA not after:            Fri 25 Apr 2025 18:39:20 +0000
asID:                     271899
IP address blocks:        200.10.235.0/24 maxlen: 24
                          2803:c210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529252 (0x81364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743055e059a56878a00a3e896ce118bf141b68c5
        Validity
            Not Before: Apr 24 18:39:20 2023 GMT
            Not After : Apr 25 18:39:20 2025 GMT
        Subject: CN=66eeac00749e64533a6c378a2fcff341dcfc0199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:a3:6b:a7:1d:fd:13:20:03:ba:5d:c9:32:
                    57:58:bf:f1:83:45:c1:ad:2b:91:02:e0:1d:47:31:
                    c0:f3:ed:b3:4c:ac:31:36:46:f9:21:28:86:c0:40:
                    22:a4:ab:62:22:17:2b:62:8c:2c:72:a4:85:b3:44:
                    92:5d:3f:df:1e:b4:ea:6b:76:df:c2:8f:8b:c1:61:
                    3a:63:34:e3:1d:c2:bd:52:9f:14:3f:ee:66:57:93:
                    1c:0e:fc:19:77:81:e5:2a:fe:f9:db:7f:db:03:9f:
                    54:da:0d:26:fe:5c:82:0f:e4:10:a2:f0:33:e1:ea:
                    1c:11:58:aa:c0:4e:82:7a:81:5c:4a:30:8d:a9:07:
                    0e:c6:24:0f:5a:ae:0c:c5:44:15:62:8e:95:8c:06:
                    ee:9d:d2:a2:d1:b0:ee:5c:cd:11:1f:0a:c0:b3:f1:
                    1c:d6:7c:20:0b:92:f6:63:5c:c6:db:1d:d8:12:c9:
                    9c:37:a8:8c:46:cf:c5:26:89:2b:99:8b:9b:63:30:
                    0d:2f:88:fb:97:4c:a4:3e:44:7e:a4:0d:a4:f2:38:
                    1f:75:91:04:31:11:13:bc:15:b9:d4:9f:03:97:c0:
                    c7:8d:43:06:7b:8c:5d:23:54:b8:43:d9:83:c0:0f:
                    e8:47:68:e5:f7:c9:db:3c:58:1d:f5:97:08:af:34:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9A:EA:E7:49:93:78:0C:D8:B5:0F:B1:BA:BF:52:E1:99:74:68:9D
            X509v3 Authority Key Identifier:
                keyid:17:2E:C7:88:54:89:87:DB:93:63:DE:5A:22:37:1D:CE:FA:64:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/743055e059a56878a00a3e896ce118bf141b68c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5686028c-1710-4cec-be24-df1a03ee722d/66eeac00749e64533a6c378a2fcff341dcfc0199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5686028c-1710-4cec-be24-df1a03ee722d/743055e059a56878a00a3e896ce118bf141b68c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.235.0/24
                IPv6:
                  2803:c210::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:ad:1b:a1:bc:2e:a5:73:18:b9:5e:5b:f6:37:67:50:bf:
         d8:78:cf:31:92:24:96:0a:76:73:f3:1b:4b:82:bf:0f:f3:c4:
         e8:21:62:bc:b4:24:0b:e2:02:95:54:57:08:23:76:da:17:7a:
         83:86:25:07:52:ad:9c:00:b9:ea:99:f1:2d:29:de:18:da:b3:
         5d:06:71:fe:e7:09:7c:37:55:b6:4f:63:98:61:9a:8b:f2:c4:
         15:5b:72:9d:52:25:68:5f:b2:c2:5e:bf:5b:cc:92:78:20:0c:
         15:1f:2b:e2:17:8b:49:24:19:fc:3e:d2:62:4c:c5:1b:7b:81:
         86:aa:6d:17:89:05:65:4f:fd:a1:79:fc:b0:8d:92:fc:9d:5a:
         ca:e7:5e:63:ee:d9:e8:80:2d:76:fe:c9:49:f8:46:46:2d:de:
         c9:4d:76:9f:42:62:a2:7b:1a:62:80:ba:be:da:5b:91:17:25:
         d6:82:5a:3e:eb:31:59:80:03:01:62:7f:22:8e:cb:b3:3b:f8:
         16:0b:91:ac:b9:55:cb:88:d9:ba:8c:31:f2:81:ef:2d:64:d0:
         1b:2d:59:d6:37:68:1a:97:75:42:ca:25:41:1f:1d:0e:82:5d:
         14:32:fa:a3:26:ba:a9:4d:dc:e5:d0:d1:f2:88:86:8b:cd:d9:
         e4:58:41:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCBNkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
MzA1NWUwNTlhNTY4NzhhMDBhM2U4OTZjZTExOGJmMTQxYjY4YzUwHhcNMjMwNDI0
MTgzOTIwWhcNMjUwNDI1MTgzOTIwWjAzMTEwLwYDVQQDEyg2NmVlYWMwMDc0OWU2
NDUzM2E2YzM3OGEyZmNmZjM0MWRjZmMwMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAix2ja6cd/RMgA7pdyTJXWL/xg0XBrSuRAuAdRzHA8+2zTKwx
Nkb5ISiGwEAipKtiIhcrYowscqSFs0SSXT/fHrTqa3bfwo+LwWE6YzTjHcK9Up8U
P+5mV5McDvwZd4HlKv7523/bA59U2g0m/lyCD+QQovAz4eocEViqwE6CeoFcSjCN
qQcOxiQPWq4MxUQVYo6VjAbundKi0bDuXM0RHwrAs/Ec1nwgC5L2Y1zG2x3YEsmc
N6iMRs/FJokrmYubYzANL4j7l0ykPkR+pA2k8jgfdZEEMRETvBW51J8Dl8DHjUMG
e4xdI1S4Q9mDwA/oR2jl98nbPFgd9ZcIrzTA3QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFGa6udJk3gM2LUPsbq/UuGZdGidMB8GA1UdIwQYMBaAFBcux4hUiYfbk2Pe
WiI3Hc76ZEvlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzQzMDU1
ZTA1OWE1Njg3OGEwMGEzZTg5NmNlMTE4YmYxNDFiNjhjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTY4NjAyOGMtMTcxMC00Y2VjLWJlMjQtZGYxYTAz
ZWU3MjJkLzY2ZWVhYzAwNzQ5ZTY0NTMzYTZjMzc4YTJmY2ZmMzQxZGNmYzAxOTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Njg2MDI4Yy0xNzEwLTRjZWMtYmUyNC1kZjFh
MDNlZTcyMmQvNzQzMDU1ZTA1OWE1Njg3OGEwMGEzZTg5NmNlMTE4YmYxNDFiNjhj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAMgK6zANBAIAAjAHAwUAKAPCEDANBgkqhkiG9w0BAQsFAAOC
AQEAagKtG6G8LqVzGLleW/Y3Z1C/2HjPMZIklgp2c/MbS4K/D/PE6CFivLQkC+IC
lVRXCCN22hd6g4YlB1KtnAC56pnxLSneGNqzXQZx/ucJfDdVtk9jmGGai/LEFVty
nVIlaF+ywl6/W8ySeCAMFR8r4heLSSQZ/D7SYkzFG3uBhqptF4kFZU/9oXn8sI2S
/J1ayudeY+7Z6IAtdv7JSfhGRi3eyU12n0JionsaYoC6vtpbkRcl1oJaPusxWYAD
AWJ/Io7Lszv4FguRrLlVy4jZuowx8oHvLWTQGy1Z1jdoGpd1QsolQR8dDoJdFDL6
oya6qU3c5dDR8oiGi83Z5FhBuA==
-----END CERTIFICATE-----