Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/29287c5d47041ff6fd7b986bace98092860af9c5.roa
File:                     29287c5d47041ff6fd7b986bace98092860af9c5.roa (raw, json)
Hash identifier:          roG+X98r5DhpEMxolBfdZLeKkJsLVz3xPvFfrFoc10E=
Subject key identifier:   6D:24:65:D9:77:25:68:68:69:C1:A8:DA:A4:CD:E3:A1:E5:B9:A9:8C
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24BB22
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/29287c5d47041ff6fd7b986bace98092860af9c5.roa
Signing time:             Mon 30 Oct 2023 12:06:56 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52324
IP address blocks:        200.13.83.0/24 maxlen: 24
                          200.115.90.0/24 maxlen: 24
                          2001:13c7:6008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407202 (0x24bb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=29287c5d47041ff6fd7b986bace98092860af9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:24:4c:66:9b:8f:25:ef:5a:e7:77:98:40:af:
                    67:6c:25:8a:32:09:2c:e5:7a:d6:1a:ce:35:84:58:
                    a4:d4:c4:9f:5a:72:1d:38:bb:07:70:60:8d:24:66:
                    04:42:bb:54:b8:1f:cf:94:88:39:cf:33:39:08:1b:
                    34:c9:c1:4c:c5:8f:7c:64:46:16:5d:58:f7:2d:22:
                    f3:ec:14:54:89:89:6d:6f:6e:b5:e2:17:55:2a:a5:
                    95:f6:e4:83:e7:1b:da:40:7b:45:a9:4a:81:dd:2c:
                    6f:4b:a3:80:f7:fc:b7:00:50:42:41:2b:b1:90:ac:
                    41:20:dc:4d:b2:2f:21:81:9c:7c:b7:87:5e:7d:96:
                    0b:e4:da:4c:80:f8:22:9f:6e:2a:58:97:f3:65:ca:
                    86:e2:25:34:85:fd:1d:c0:f3:bb:b0:21:e0:7c:fa:
                    b2:14:aa:21:2c:5e:00:4c:65:79:de:56:6f:80:d9:
                    e2:65:c5:87:35:0e:34:b2:0d:c5:ad:b5:2b:81:f9:
                    65:89:0d:49:2f:91:aa:e1:4c:ea:25:5a:dd:44:51:
                    53:bd:53:12:57:ce:71:95:f5:82:69:a9:fd:2e:f4:
                    62:a5:ff:92:d3:cc:a9:d8:ce:98:76:1e:bb:e3:19:
                    20:e2:ed:57:88:99:dd:2b:02:e5:f8:97:95:6a:4c:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:65:D9:77:25:68:68:69:C1:A8:DA:A4:CD:E3:A1:E5:B9:A9:8C
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/29287c5d47041ff6fd7b986bace98092860af9c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.83.0/24
                  200.115.90.0/24
                IPv6:
                  2001:13c7:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:30:0f:4c:6b:b8:56:21:8e:7f:78:09:4f:79:df:44:c8:
         bd:03:d3:47:31:86:28:0d:1e:af:a4:3a:73:a9:40:b8:6b:e3:
         3a:24:5a:77:74:d7:2c:e5:1e:9b:16:08:74:73:7e:17:27:11:
         de:a5:22:31:10:66:16:c6:c9:25:6a:dd:04:02:ef:6c:d2:a9:
         e0:99:6b:f7:d2:01:e4:3d:78:16:c2:57:5e:b4:71:76:b5:54:
         8d:9f:30:c1:57:64:f6:1b:bb:6f:e8:81:22:c0:d1:4c:98:35:
         8d:f5:50:b4:32:15:81:8d:bf:4d:0b:ea:44:15:0c:94:61:1c:
         ca:6d:e9:17:ed:54:ef:16:72:1b:e9:27:23:73:6c:73:8f:7a:
         e7:cf:2c:72:2e:2a:41:83:dc:d0:98:6c:73:2d:6e:58:9e:e4:
         08:eb:c4:26:3e:54:c4:7b:f0:54:4f:8e:4d:3c:20:05:6f:35:
         3e:c6:99:01:49:5a:d1:cb:bb:3b:5d:28:42:fc:bd:4b:7e:72:
         c2:dc:c8:ad:b2:c4:cb:ca:c6:35:62:8c:2f:ee:ca:49:2e:aa:
         de:6e:8f:10:e9:ed:2a:46:5f:83:26:23:d6:4c:b5:0a:ac:cf:
         43:cc:8a:62:80:2c:d9:54:cf:53:26:a3:57:44:be:74:38:8d:
         cd:ca:c9:d2
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJLsiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEygyOTI4N2M1ZDQ3MDQx
ZmY2ZmQ3Yjk4NmJhY2U5ODA5Mjg2MGFmOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6iRMZpuPJe9a53eYQK9nbCWKMgks5XrWGs41hFik1MSfWnId
OLsHcGCNJGYEQrtUuB/PlIg5zzM5CBs0ycFMxY98ZEYWXVj3LSLz7BRUiYltb261
4hdVKqWV9uSD5xvaQHtFqUqB3SxvS6OA9/y3AFBCQSuxkKxBINxNsi8hgZx8t4de
fZYL5NpMgPgin24qWJfzZcqG4iU0hf0dwPO7sCHgfPqyFKohLF4ATGV53lZvgNni
ZcWHNQ40sg3FrbUrgflliQ1JL5Gq4UzqJVrdRFFTvVMSV85xlfWCaan9LvRipf+S
08yp2M6Ydh674xkg4u1XiJndKwLl+JeVakz68wIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFG0kZdl3JWhoacGo2qTN46HluamMMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzI5Mjg3YzVkNDcwNDFmZjZmZDdiOTg2YmFjZTk4MDkyODYwYWY5YzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgNUwMEAMhzWjAPBAIAAjAJAwcAIAETx2AIMA0GCSqGSIb3
DQEBCwUAA4IBAQBT1TAPTGu4ViGOf3gJT3nfRMi9A9NHMYYoDR6vpDpzqUC4a+M6
JFp3dNcs5R6bFgh0c34XJxHepSIxEGYWxsklat0EAu9s0qngmWv30gHkPXgWwlde
tHF2tVSNnzDBV2T2G7tv6IEiwNFMmDWN9VC0MhWBjb9NC+pEFQyUYRzKbekX7VTv
FnIb6Scjc2xzj3rnzyxyLipBg9zQmGxzLW5YnuQI68QmPlTEe/BUT45NPCAFbzU+
xpkBSVrRy7s7XShC/L1LfnLC3MitssTLysY1Yowv7spJLqrebo8Q6e0qRl+DJiPW
TLUKrM9DzIpigCzZVM9TJqNXRL50OI3NysnS
-----END CERTIFICATE-----