Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/74d33e415fb9314ba037805d8b2f442d0a3f4622.roa
File:                     74d33e415fb9314ba037805d8b2f442d0a3f4622.roa (raw, json)
Hash identifier:          ouI06eqyKszwYS/xorpZJRp3Cs8M1ZWdFwfJYDe/uq4=
Subject key identifier:   D0:32:18:0E:22:08:52:AA:29:5B:91:BC:8A:A0:A2:5B:5A:E5:96:36
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       247AAD
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/74d33e415fb9314ba037805d8b2f442d0a3f4622.roa
Signing time:             Mon 30 Oct 2023 12:06:36 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61441
IP address blocks:        200.115.85.0/24 maxlen: 24
                          201.182.129.0/24 maxlen: 24
                          2001:13c7:6015::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390701 (0x247aad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=74d33e415fb9314ba037805d8b2f442d0a3f4622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:a8:47:b4:70:53:f9:d2:82:ff:cf:e9:de:
                    bd:e5:d1:8d:24:55:c1:a2:2f:c3:f8:f3:8a:52:9b:
                    b2:4d:1e:4a:07:e0:9c:9f:31:02:0e:7f:9c:c9:ac:
                    af:e9:f6:15:2b:71:da:da:c8:7b:75:53:ba:ad:42:
                    32:cc:73:d3:ca:62:ba:21:2e:a4:22:46:68:ad:bd:
                    ec:ec:be:dd:42:7a:b9:de:79:8c:6a:5b:c2:48:3e:
                    b3:03:31:df:83:8b:58:75:ce:d5:f4:71:1c:a7:95:
                    5d:4c:80:fd:ff:cf:94:80:16:16:f3:92:8f:25:5b:
                    8d:ad:bc:64:33:b3:0d:85:f0:62:d3:f3:16:81:52:
                    3f:9d:87:e6:c5:21:3c:a0:09:b5:71:0c:a4:38:cc:
                    93:59:97:ac:8f:d2:8f:87:90:be:1b:60:81:23:53:
                    29:4d:b9:b5:3e:e2:d3:db:1f:10:b2:56:ad:75:d8:
                    db:26:aa:23:c4:66:72:91:68:dc:83:01:c2:11:6e:
                    ba:a7:c5:b3:88:e7:9b:35:2c:4f:75:21:71:b9:6d:
                    94:17:37:4e:bb:7c:43:a0:57:b9:9c:ed:61:52:c6:
                    42:a7:73:d1:c4:63:bb:4c:dd:5f:35:89:1a:ac:19:
                    42:5b:b9:92:cf:2c:87:9c:fa:e7:fb:0c:be:7c:2b:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:18:0E:22:08:52:AA:29:5B:91:BC:8A:A0:A2:5B:5A:E5:96:36
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/74d33e415fb9314ba037805d8b2f442d0a3f4622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.85.0/24
                  201.182.129.0/24
                IPv6:
                  2001:13c7:6015::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:72:61:2a:25:ca:6a:cd:f9:21:ed:55:df:2f:ba:77:66:db:
         e8:60:e0:d8:c7:e2:a4:5d:d7:09:3b:e0:af:d1:9d:c9:09:c1:
         2f:b1:42:46:cd:cc:f1:c7:94:a1:32:28:cd:ee:1c:ee:21:a4:
         46:02:38:93:87:c8:1e:e8:94:3d:90:34:55:15:18:e6:f1:da:
         5f:61:e6:26:98:2f:c6:65:74:e1:99:b4:96:c1:af:57:52:1c:
         cb:02:e6:7c:97:81:d9:b2:87:9d:1a:46:43:e2:c5:45:ad:0e:
         42:ad:5f:44:a2:d1:67:77:d4:7a:5e:d7:0b:00:e2:45:99:f3:
         fa:78:79:f7:03:42:7d:64:ff:f3:36:48:f4:b8:fe:22:cd:8b:
         04:79:ec:c8:6c:91:9c:d1:41:40:50:12:58:0c:25:da:93:1f:
         00:04:2c:b9:f3:9e:0d:af:71:df:ed:9d:62:c1:cb:e5:0f:6a:
         1e:63:2a:74:85:11:e3:50:ea:a0:68:25:90:7f:70:ce:74:bc:
         f2:6a:a1:76:82:e1:8b:4d:34:f8:2e:2f:af:91:13:9e:c0:15:
         56:b7:e3:45:a1:9d:93:2f:4e:18:75:e6:03:d0:a0:e2:60:6b:
         35:65:9a:7e:7a:00:2a:93:4e:aa:9b:17:ee:0a:10:80:50:48:
         53:7b:c8:f2
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJHqtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEyg3NGQzM2U0MTVmYjkz
MTRiYTAzNzgwNWQ4YjJmNDQyZDBhM2Y0NjIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgVqoR7RwU/nSgv/P6d695dGNJFXBoi/D+POKUpuyTR5KB+Cc
nzECDn+cyayv6fYVK3Ha2sh7dVO6rUIyzHPTymK6IS6kIkZorb3s7L7dQnq53nmM
alvCSD6zAzHfg4tYdc7V9HEcp5VdTID9/8+UgBYW85KPJVuNrbxkM7MNhfBi0/MW
gVI/nYfmxSE8oAm1cQykOMyTWZesj9KPh5C+G2CBI1MpTbm1PuLT2x8Qslatddjb
JqojxGZykWjcgwHCEW66p8WziOebNSxPdSFxuW2UFzdOu3xDoFe5nO1hUsZCp3PR
xGO7TN1fNYkarBlCW7mSzyyHnPrn+wy+fCtW2QIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFNAyGA4iCFKqKVuRvIqgolta5ZY2MB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzc0ZDMzZTQxNWZiOTMxNGJhMDM3ODA1ZDhiMmY0NDJkMGEzZjQ2MjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMhzVQMEAMm2gTAPBAIAAjAJAwcAIAETx2AVMA0GCSqGSIb3
DQEBCwUAA4IBAQBAcmEqJcpqzfkh7VXfL7p3ZtvoYODYx+KkXdcJO+Cv0Z3JCcEv
sUJGzczxx5ShMijN7hzuIaRGAjiTh8ge6JQ9kDRVFRjm8dpfYeYmmC/GZXThmbSW
wa9XUhzLAuZ8l4HZsoedGkZD4sVFrQ5CrV9EotFnd9R6XtcLAOJFmfP6eHn3A0J9
ZP/zNkj0uP4izYsEeezIbJGc0UFAUBJYDCXakx8ABCy5854Nr3Hf7Z1iwcvlD2oe
Yyp0hRHjUOqgaCWQf3DOdLzyaqF2guGLTTT4Li+vkROewBVWt+NFoZ2TL04YdeYD
0KDiYGs1ZZp+egAqk06qmxfuChCAUEhTe8jy
-----END CERTIFICATE-----