Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9fb86ffcc202c413364980cb6e33bd366e0da522.roa
File:                     9fb86ffcc202c413364980cb6e33bd366e0da522.roa (raw, json)
Hash identifier:          BQvhGP+odJjtSmonvwps0RWOXV+SgNKRlAFzSKTr63Y=
Subject key identifier:   DB:AE:02:21:29:5F:3E:37:81:B6:4E:56:77:6F:34:9D:18:44:E8:7C
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24A68F
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9fb86ffcc202c413364980cb6e33bd366e0da522.roa
Signing time:             Mon 30 Oct 2023 12:06:47 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52374
IP address blocks:        200.14.75.0/24 maxlen: 24
                          200.115.92.0/24 maxlen: 24
                          2001:13c7:600e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401935 (0x24a68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=9fb86ffcc202c413364980cb6e33bd366e0da522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:a4:d9:d0:84:46:69:d1:a3:72:c7:a0:2a:
                    67:1e:ab:16:40:08:9a:53:b2:71:f7:f3:10:fd:17:
                    00:10:68:fe:df:7b:31:1c:da:e9:44:ea:32:c8:4f:
                    b9:cc:7c:d1:b4:38:3f:a9:3e:f5:69:57:6c:41:91:
                    a7:9e:39:aa:30:6d:6e:2a:f9:1e:f0:4c:fb:31:25:
                    67:36:a5:36:ae:20:c4:63:8c:2d:f2:e7:7e:c2:f7:
                    4a:c0:61:20:33:96:c1:fa:a4:e9:b5:87:26:5b:6e:
                    92:fc:ed:86:4d:b9:35:8e:4e:75:22:a5:00:68:00:
                    64:af:64:4b:2f:db:25:4f:af:01:a8:7b:38:4c:d8:
                    b2:56:9b:3b:ea:bc:34:ef:88:a7:19:de:5f:7c:36:
                    28:de:10:15:bf:d2:1b:e2:dc:01:53:25:91:3b:b6:
                    d7:72:90:ea:67:09:b1:e1:e1:4c:e1:5f:6c:79:ae:
                    54:b8:d9:09:2c:65:8d:3a:2e:4a:b7:ca:82:a5:da:
                    3b:02:2b:7c:64:0d:a9:11:89:4a:47:4d:d3:e3:35:
                    7e:e8:dc:d4:7d:90:21:f3:87:03:f9:68:5b:3f:2a:
                    a3:6a:4d:0e:e2:0d:88:20:86:28:5a:05:b1:19:92:
                    fe:cc:92:2a:f9:96:3d:ad:96:7e:c3:f3:ee:77:39:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:02:21:29:5F:3E:37:81:B6:4E:56:77:6F:34:9D:18:44:E8:7C
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/9fb86ffcc202c413364980cb6e33bd366e0da522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.75.0/24
                  200.115.92.0/24
                IPv6:
                  2001:13c7:600e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:66:cb:72:fc:16:2d:d5:98:d2:95:c2:5e:e7:a4:29:17:
         f1:c7:67:09:13:b1:10:37:0f:94:da:5b:6f:06:7c:fd:43:5b:
         67:18:7d:31:45:1e:89:e5:20:10:ce:40:9a:f5:5d:06:8b:f0:
         82:11:30:3d:92:84:3e:67:73:ee:36:90:2f:73:86:b3:ac:30:
         8a:cf:ff:a7:6d:9a:70:02:aa:8d:d0:a0:8b:5f:bf:f4:c0:4a:
         3f:f8:6a:67:0a:cf:b5:0d:0c:c0:91:f7:8b:dd:8a:9e:dc:8a:
         7f:d6:cb:66:b5:67:5e:99:bb:89:8b:4a:2b:15:0f:0a:58:38:
         7a:db:cc:fe:f0:66:4b:6c:58:93:68:08:fc:09:bc:fd:db:c2:
         f0:c8:53:46:98:8b:63:6a:1c:0d:6c:e6:91:65:a5:c6:02:00:
         2c:96:72:a5:40:02:6e:f4:b0:fa:f0:58:d3:f9:6c:1a:67:e1:
         ea:dc:73:a0:e2:4b:62:27:8b:69:a5:a0:90:ab:9b:2d:fe:60:
         fc:6b:de:54:e1:5c:10:75:58:73:3a:eb:3e:14:1a:d8:2a:d0:
         aa:e5:e0:27:36:b1:d6:0a:21:9d:16:ed:28:1b:20:6c:17:63:
         50:7b:15:0d:68:71:33:28:86:d6:2d:7e:00:49:8c:10:e7:91:
         ca:8a:12:02
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJKaPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEyg5ZmI4NmZmY2MyMDJj
NDEzMzY0OTgwY2I2ZTMzYmQzNjZlMGRhNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp4Sk2dCERmnRo3LHoCpnHqsWQAiaU7Jx9/MQ/RcAEGj+33sx
HNrpROoyyE+5zHzRtDg/qT71aVdsQZGnnjmqMG1uKvke8Ez7MSVnNqU2riDEY4wt
8ud+wvdKwGEgM5bB+qTptYcmW26S/O2GTbk1jk51IqUAaABkr2RLL9slT68BqHs4
TNiyVps76rw074inGd5ffDYo3hAVv9Ib4twBUyWRO7bXcpDqZwmx4eFM4V9sea5U
uNkJLGWNOi5Kt8qCpdo7Ait8ZA2pEYlKR03T4zV+6NzUfZAh84cD+WhbPyqjak0O
4g2IIIYoWgWxGZL+zJIq+ZY9rZZ+w/PudzkqJQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFNuuAiEpXz43gbZOVndvNJ0YROh8MB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzlmYjg2ZmZjYzIwMmM0MTMzNjQ5ODBjYjZlMzNiZDM2NmUwZGE1MjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgOSwMEAMhzXDAPBAIAAjAJAwcAIAETx2AOMA0GCSqGSIb3
DQEBCwUAA4IBAQAcFWbLcvwWLdWY0pXCXuekKRfxx2cJE7EQNw+U2ltvBnz9Q1tn
GH0xRR6J5SAQzkCa9V0Gi/CCETA9koQ+Z3PuNpAvc4azrDCKz/+nbZpwAqqN0KCL
X7/0wEo/+GpnCs+1DQzAkfeL3Yqe3Ip/1stmtWdembuJi0orFQ8KWDh628z+8GZL
bFiTaAj8Cbz928LwyFNGmItjahwNbOaRZaXGAgAslnKlQAJu9LD68FjT+WwaZ+Hq
3HOg4ktiJ4tppaCQq5st/mD8a95U4VwQdVhzOus+FBrYKtCq5eAnNrHWCiGdFu0o
GyBsF2NQexUNaHEzKIbWLX4ASYwQ55HKihIC
-----END CERTIFICATE-----