Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/5e2bc30c05599c548254ec65fa1c909a87bbafb7.roa
File:                     5e2bc30c05599c548254ec65fa1c909a87bbafb7.roa (raw, json)
Hash identifier:          cYO0nm80oYCUdMkhvZHnSuNE4SCET91PXFhoaK02dto=
Subject key identifier:   4D:AD:D9:0E:B0:43:46:D8:13:6E:DB:E6:4A:DC:E8:6A:A2:B1:0C:81
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       2487E3
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/5e2bc30c05599c548254ec65fa1c909a87bbafb7.roa
Signing time:             Mon 30 Oct 2023 12:06:39 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52359
IP address blocks:        200.14.74.0/24 maxlen: 24
                          200.115.86.0/24 maxlen: 24
                          2001:13c7:600d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394083 (0x2487e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=5e2bc30c05599c548254ec65fa1c909a87bbafb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:8f:19:43:11:f9:ed:af:e8:81:31:10:47:
                    c3:1a:df:2f:ba:14:c4:d0:ef:4d:1e:18:86:a7:6d:
                    6d:d3:2e:31:0c:7b:f7:30:3f:61:44:71:39:b9:67:
                    42:22:d3:17:c5:d8:83:7e:af:22:53:ee:16:72:48:
                    84:6c:54:1c:72:6a:41:2a:48:e2:df:19:44:9b:54:
                    4a:7f:4b:a3:8c:3b:ac:8b:89:37:b1:35:15:86:70:
                    b2:4e:67:4b:98:98:06:ac:95:84:2a:f0:c0:5a:97:
                    c4:e0:f0:1e:3a:26:34:08:8f:95:8d:44:b6:11:88:
                    62:d8:ee:77:0f:f1:8e:ee:ad:50:da:89:c8:13:82:
                    72:d5:dd:54:91:32:9d:98:04:dc:a1:ef:ff:ad:8e:
                    af:4c:6b:fa:2f:94:a8:2a:3e:f0:72:90:61:d0:ae:
                    b9:74:b3:4c:de:6d:8c:c9:6a:c9:a4:c9:af:3b:25:
                    b1:fe:e5:34:ec:47:7b:9f:c0:30:45:ff:67:a6:49:
                    78:5a:94:01:d6:8c:52:0e:cc:87:b6:8a:f4:1e:b4:
                    4a:82:12:e4:55:77:c3:1e:0e:0a:9a:3e:cf:c0:85:
                    15:22:46:12:e4:d9:ee:7c:1d:49:d3:9c:d3:a1:0c:
                    25:6e:06:f3:93:d3:7e:c4:05:7e:00:74:c3:58:82:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:D9:0E:B0:43:46:D8:13:6E:DB:E6:4A:DC:E8:6A:A2:B1:0C:81
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/5e2bc30c05599c548254ec65fa1c909a87bbafb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.74.0/24
                  200.115.86.0/24
                IPv6:
                  2001:13c7:600d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:1b:7f:b0:8a:ec:95:f9:d0:ec:c3:d7:13:96:fc:49:bf:67:
         34:b2:75:e5:34:cd:e1:be:86:41:a5:a8:4b:b7:aa:e7:18:73:
         dc:34:0c:36:1d:36:ef:9f:d2:0b:2b:7c:3e:4d:b7:53:d4:cc:
         a3:07:a7:14:aa:9b:41:7e:70:6e:5a:65:5c:ae:9f:6d:15:60:
         67:28:2c:d2:93:b2:3d:31:ba:49:a1:7d:69:06:32:45:ae:5a:
         72:5e:22:c5:4d:8b:59:bc:3a:b4:d2:86:38:9d:48:d1:39:f8:
         b1:e7:a0:f6:ca:da:54:82:10:a6:75:71:24:ba:bb:4a:45:49:
         a1:4f:85:9f:38:55:df:28:9f:3b:3e:c1:26:70:8c:e4:8f:1a:
         35:50:8c:8e:22:8d:03:d3:08:9b:f6:57:d9:ec:b1:1d:93:70:
         5c:18:25:7e:55:50:61:b8:f8:f9:b9:b9:5e:49:2a:d9:8a:78:
         83:c2:c8:c0:8e:a7:e4:d5:c4:dd:d1:10:08:48:bf:f9:78:53:
         f9:e8:df:cf:d4:45:84:12:b4:23:45:dd:01:d2:7a:52:cd:51:
         f3:2b:7f:2a:11:77:42:91:f4:c1:92:ba:d9:df:2c:59:52:77:
         f4:0e:45:14:2a:6f:63:a8:b1:9c:34:e8:c3:1a:f9:8b:ad:64:
         89:0c:5c:51
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJIfjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEyg1ZTJiYzMwYzA1NTk5
YzU0ODI1NGVjNjVmYTFjOTA5YTg3YmJhZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiqiPGUMR+e2v6IExEEfDGt8vuhTE0O9NHhiGp21t0y4xDHv3
MD9hRHE5uWdCItMXxdiDfq8iU+4WckiEbFQccmpBKkji3xlEm1RKf0ujjDusi4k3
sTUVhnCyTmdLmJgGrJWEKvDAWpfE4PAeOiY0CI+VjUS2EYhi2O53D/GO7q1Q2onI
E4Jy1d1UkTKdmATcoe//rY6vTGv6L5SoKj7wcpBh0K65dLNM3m2MyWrJpMmvOyWx
/uU07Ed7n8AwRf9npkl4WpQB1oxSDsyHtor0HrRKghLkVXfDHg4Kmj7PwIUVIkYS
5NnufB1J05zToQwlbgbzk9N+xAV+AHTDWIKk4QIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFE2t2Q6wQ0bYE27b5krc6GqisQyBMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzVlMmJjMzBjMDU1OTljNTQ4MjU0ZWM2NWZhMWM5MDlhODdiYmFmYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgOSgMEAMhzVjAPBAIAAjAJAwcAIAETx2ANMA0GCSqGSIb3
DQEBCwUAA4IBAQAOG3+wiuyV+dDsw9cTlvxJv2c0snXlNM3hvoZBpahLt6rnGHPc
NAw2HTbvn9ILK3w+TbdT1MyjB6cUqptBfnBuWmVcrp9tFWBnKCzSk7I9MbpJoX1p
BjJFrlpyXiLFTYtZvDq00oY4nUjROfix56D2ytpUghCmdXEkurtKRUmhT4WfOFXf
KJ87PsEmcIzkjxo1UIyOIo0D0wib9lfZ7LEdk3BcGCV+VVBhuPj5ubleSSrZiniD
wsjAjqfk1cTd0RAISL/5eFP56N/P1EWEErQjRd0B0npSzVHzK38qEXdCkfTBkrrZ
3yxZUnf0DkUUKm9jqLGcNOjDGvmLrWSJDFxR
-----END CERTIFICATE-----