Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/14d1f623430b65bd2ffb48dd158563686c6d743b.roa
File:                     14d1f623430b65bd2ffb48dd158563686c6d743b.roa (raw, json)
Hash identifier:          Gpg9AaPcegqRE99QeaO7vtbXxYcWETl2mk1PahyDO5c=
Subject key identifier:   A1:86:A8:03:B9:B0:A0:75:88:15:1D:17:18:52:D3:F7:FA:CC:5B:08
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B137A
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/14d1f623430b65bd2ffb48dd158563686c6d743b.roa
Signing time:             Thu 15 Feb 2024 21:18:31 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     264845
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2823034 (0x2b137a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=14d1f623430b65bd2ffb48dd158563686c6d743b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:87:fb:82:fd:35:54:dd:7c:02:c4:51:e8:
                    fc:ce:6b:44:27:8e:39:cd:30:e3:3f:99:35:d2:9d:
                    ec:69:3c:bb:32:86:6d:57:e0:19:f5:30:31:16:02:
                    e7:49:ba:a8:71:74:9a:7d:99:b0:18:73:75:4f:5b:
                    46:0d:04:85:5d:c0:d9:2d:26:f2:77:b3:5e:fb:ee:
                    13:a5:d0:c1:c3:ee:26:e1:e2:fb:9a:43:94:e5:d7:
                    7d:a0:ca:d1:fc:b3:6a:80:d6:fb:49:44:80:c7:9f:
                    6c:2b:cd:18:7c:68:43:4e:48:e5:5c:90:28:53:52:
                    5f:37:57:89:c0:b8:92:4b:c9:89:00:28:85:5d:49:
                    c3:5a:05:f1:c5:b3:a5:e1:c2:8d:70:1e:73:67:e1:
                    f0:c9:ca:37:ff:d8:6f:9e:1a:95:8c:ea:98:28:79:
                    c1:83:fc:c6:cc:81:ca:e2:b5:52:f3:12:d7:0d:b3:
                    8d:b9:c7:91:4a:e7:3d:4c:78:7b:42:13:01:7a:08:
                    11:32:ae:3d:6b:de:ea:3b:f5:53:f5:09:ae:50:db:
                    13:5f:e3:60:e3:27:87:47:20:76:d6:63:2e:92:21:
                    e9:e4:b3:cd:2d:6c:ae:b3:f3:31:64:98:b3:24:f3:
                    1c:0b:4d:24:83:bc:70:0e:42:b1:51:74:43:d6:4f:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:86:A8:03:B9:B0:A0:75:88:15:1D:17:18:52:D3:F7:FA:CC:5B:08
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/14d1f623430b65bd2ffb48dd158563686c6d743b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:ad:b7:a8:e8:5a:2e:98:28:4a:7e:5f:4d:be:6b:3f:26:
         a5:12:7a:98:48:7e:4d:38:c9:f5:c5:4c:49:35:d4:17:7c:d6:
         44:4d:d4:8a:f4:1a:07:11:9e:28:2a:45:73:42:35:e7:b1:bb:
         07:61:e1:fa:39:d8:2f:7b:c6:64:a4:ad:5c:f1:c0:60:1d:4f:
         1c:00:52:04:c5:3f:3c:9e:b7:dc:c9:7c:82:bb:91:ae:e6:f9:
         f4:25:0a:12:00:01:b9:61:78:a1:e8:ba:0d:2f:ab:d4:3e:95:
         b5:21:70:bb:eb:10:5b:39:81:0c:0a:ec:15:87:a6:b8:f3:a8:
         b8:49:39:10:f0:b7:40:2d:3f:28:99:65:72:f9:60:19:a2:af:
         7b:d0:e6:26:1f:eb:1c:e0:81:ff:1d:48:2d:52:45:00:aa:c4:
         c9:b9:62:3a:3f:99:8b:4a:02:f1:fe:20:72:42:69:f4:de:6f:
         af:82:17:f0:25:93:12:5c:d5:6e:b5:46:41:86:a1:34:d8:ad:
         51:24:fe:36:c7:e5:c9:ca:4a:29:c3:fc:b4:9f:91:57:5d:7a:
         92:56:7d:69:ec:db:f9:ad:c1:63:00:50:df:de:04:f1:4a:53:
         9d:00:26:0d:f6:c2:ac:be:83:0d:6f:a6:67:97:5e:c2:a9:50:
         e3:b1:79:90
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKxN6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
YzIwNDc2N2Y0MDQ1OTBiYzVjZjFhYjViMzQ0OWVmMTQ5NDBmZDAwHhcNMjQwMjE1
MjExODI5WhcNMjkwMjE1MjExODI5WjAzMTEwLwYDVQQDEygxNGQxZjYyMzQzMGI2
NWJkMmZmYjQ4ZGQxNTg1NjM2ODZjNmQ3NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAneaH+4L9NVTdfALEUej8zmtEJ445zTDjP5k10p3saTy7MoZt
V+AZ9TAxFgLnSbqocXSafZmwGHN1T1tGDQSFXcDZLSbyd7Ne++4TpdDBw+4m4eL7
mkOU5dd9oMrR/LNqgNb7SUSAx59sK80YfGhDTkjlXJAoU1JfN1eJwLiSS8mJACiF
XUnDWgXxxbOl4cKNcB5zZ+Hwyco3/9hvnhqVjOqYKHnBg/zGzIHK4rVS8xLXDbON
uceRSuc9THh7QhMBeggRMq49a97qO/VT9QmuUNsTX+Ng4yeHRyB21mMukiHp5LPN
LWyus/MxZJizJPMcC00kg7xwDkKxUXRD1k8+sQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKGGqAO5sKB1iBUdFxhS0/f6zFsIMB8GA1UdIwQYMBaAFCsCVqqahYJrvhGH
XldyuwsA1XCEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjVjMjA0
NzY3ZjQwNDU5MGJjNWNmMWFiNWIzNDQ5ZWYxNDk0MGZkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzE0ZDFmNjIzNDMwYjY1YmQyZmZiNDhkZDE1ODU2MzY4NmM2ZDc0M2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvNjVjMjA0NzY3ZjQwNDU5MGJjNWNmMWFiNWIzNDQ5ZWYxNDk0MGZk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5wNDANBgkqhkiG9w0BAQsFAAOCAQEABM2tt6joWi6YKEp+
X02+az8mpRJ6mEh+TTjJ9cVMSTXUF3zWRE3UivQaBxGeKCpFc0I157G7B2Hh+jnY
L3vGZKStXPHAYB1PHABSBMU/PJ633Ml8gruRrub59CUKEgABuWF4oei6DS+r1D6V
tSFwu+sQWzmBDArsFYemuPOouEk5EPC3QC0/KJllcvlgGaKve9DmJh/rHOCB/x1I
LVJFAKrEybliOj+Zi0oC8f4gckJp9N5vr4IX8CWTElzVbrVGQYahNNitUST+Nsfl
ycpKKcP8tJ+RV116klZ9aezb+a3BYwBQ394E8UpTnQAmDfbCrL6DDW+mZ5dewqlQ
47F5kA==
-----END CERTIFICATE-----