Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/83aaf4fe840568f4e712624c077f412d05cef870.roa
File:                     83aaf4fe840568f4e712624c077f412d05cef870.roa (raw, json)
Hash identifier:          qK1O4l2W2pfrqTmFyqVwazfJEI6ZA0H5unQC8CS/hbU=
Subject key identifier:   0C:5B:AA:0A:92:B4:C8:84:CC:CF:B0:26:37:57:E8:09:7B:CD:78:6D
Certificate issuer:       /CN=72201ce88caa8d6bed08962d2748088a683dfa85
Certificate serial:       1D0958
Authority key identifier: 52:EB:65:C3:55:06:AE:0F:46:15:3A:00:53:32:2A:5A:86:CD:B3:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72201ce88caa8d6bed08962d2748088a683dfa85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/83aaf4fe840568f4e712624c077f412d05cef870.roa
Signing time:             Wed 25 Oct 2023 13:38:48 +0000
ROA not before:           Wed 25 Oct 2023 13:38:48 +0000
ROA not after:            Sat 25 Oct 2025 13:38:48 +0000
asID:                     270034
IP address blocks:        177.12.88.0/22 maxlen: 24
                          2803:65e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902936 (0x1d0958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72201ce88caa8d6bed08962d2748088a683dfa85
        Validity
            Not Before: Oct 25 13:38:48 2023 GMT
            Not After : Oct 25 13:38:48 2025 GMT
        Subject: CN=83aaf4fe840568f4e712624c077f412d05cef870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:0a:63:39:c9:01:9d:1d:15:75:ab:a2:18:
                    e8:69:4b:7e:e9:47:84:c0:1f:d1:57:bd:a9:b3:4c:
                    ea:18:f0:52:16:cc:30:32:c3:f8:cf:57:63:ed:19:
                    22:73:a7:dc:c8:4a:fc:6d:20:0e:0d:c4:21:d7:c1:
                    cb:f9:d0:b7:1d:1e:3e:4b:16:a6:4f:69:40:01:ef:
                    63:91:8a:dd:e8:91:84:99:8b:af:19:be:09:bf:f4:
                    69:ba:4b:7b:b7:1d:5e:0b:67:6f:01:1d:b2:d9:e3:
                    63:ba:95:9b:7c:7b:0f:2f:44:6e:ff:08:6c:66:91:
                    05:e3:b6:9d:9a:df:b9:71:b6:d4:88:fc:b7:31:1b:
                    55:ec:55:30:d7:e7:dc:c2:3b:ae:5d:1c:5c:57:87:
                    bc:1f:7a:74:2b:8c:b3:07:ac:60:9e:20:d4:de:b0:
                    2c:df:95:6e:48:31:d6:0e:33:a1:63:ab:9b:6e:3c:
                    0c:6d:76:b2:cd:54:59:8d:72:36:60:25:dc:85:03:
                    4b:2b:d4:59:2b:26:71:d7:7e:81:f5:10:5e:f0:3b:
                    23:d2:cd:71:f5:13:85:cf:16:f5:9a:4a:41:36:f7:
                    fc:b3:aa:14:9f:6b:48:31:65:28:6e:46:9b:85:ba:
                    7a:9e:87:79:21:93:20:9b:ed:24:de:39:ac:5e:9d:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5B:AA:0A:92:B4:C8:84:CC:CF:B0:26:37:57:E8:09:7B:CD:78:6D
            X509v3 Authority Key Identifier:
                keyid:52:EB:65:C3:55:06:AE:0F:46:15:3A:00:53:32:2A:5A:86:CD:B3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72201ce88caa8d6bed08962d2748088a683dfa85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/83aaf4fe840568f4e712624c077f412d05cef870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/72201ce88caa8d6bed08962d2748088a683dfa85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.88.0/22
                IPv6:
                  2803:65e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:5e:23:45:fc:47:b1:f2:2e:a3:58:c9:39:dd:a7:03:8d:72:
         44:6f:dd:d3:e0:24:70:8d:c4:48:24:9d:80:ce:91:07:76:f4:
         80:2f:c3:f9:e4:5d:27:85:b2:ad:04:8e:ed:0a:01:2e:a6:ae:
         a5:58:38:a9:42:c6:69:31:7c:af:38:ce:6f:09:2c:d5:18:56:
         49:15:52:81:d5:24:0a:ad:4a:89:cb:76:e5:3a:e1:3e:04:6f:
         a3:de:db:9b:01:1a:b7:77:8d:97:55:4f:1f:e1:42:e6:ed:83:
         dc:6a:37:68:cf:f9:a4:c3:09:19:5d:15:5b:aa:09:b8:f6:de:
         74:ee:51:a4:0a:db:09:bb:9f:d7:12:ed:59:9d:24:84:7e:b9:
         82:5e:d7:29:84:fd:96:7a:a6:27:db:8f:30:17:69:b4:0a:a4:
         18:e0:c6:dc:df:fc:50:24:ee:93:a2:5d:3c:42:14:51:9e:01:
         b7:cd:eb:62:4b:14:23:19:89:90:3b:c1:66:dc:13:94:71:8e:
         32:81:78:96:59:56:db:42:46:c3:0a:e4:4c:42:7a:31:b4:27:
         f8:88:2d:6e:1c:14:59:37:6b:a9:17:48:4c:bf:de:50:2f:1f:
         24:a2:1a:e2:9b:b5:c2:c0:a8:39:41:b8:11:ae:1b:b6:a1:c9:
         6b:ec:d2:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHQlYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
MjAxY2U4OGNhYThkNmJlZDA4OTYyZDI3NDgwODhhNjgzZGZhODUwHhcNMjMxMDI1
MTMzODQ4WhcNMjUxMDI1MTMzODQ4WjAzMTEwLwYDVQQDEyg4M2FhZjRmZTg0MDU2
OGY0ZTcxMjYyNGMwNzdmNDEyZDA1Y2VmODcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkMIKYznJAZ0dFXWrohjoaUt+6UeEwB/RV72ps0zqGPBSFsww
MsP4z1dj7Rkic6fcyEr8bSAODcQh18HL+dC3HR4+SxamT2lAAe9jkYrd6JGEmYuv
Gb4Jv/Rpukt7tx1eC2dvAR2y2eNjupWbfHsPL0Ru/whsZpEF47admt+5cbbUiPy3
MRtV7FUw1+fcwjuuXRxcV4e8H3p0K4yzB6xgniDU3rAs35VuSDHWDjOhY6ubbjwM
bXayzVRZjXI2YCXchQNLK9RZKyZx136B9RBe8Dsj0s1x9ROFzxb1mkpBNvf8s6oU
n2tIMWUobkabhbp6nod5IZMgm+0k3jmsXp2xvwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAxbqgqStMiEzM+wJjdX6Al7zXhtMB8GA1UdIwQYMBaAFFLrZcNVBq4PRhU6
AFMyKlqGzbOKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzIyMDFj
ZTg4Y2FhOGQ2YmVkMDg5NjJkMjc0ODA4OGE2ODNkZmE4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjc2MGIzMTktMDI2Yi00NDY4LWIwMWUtYTRhNTQw
MzZmNDRiLzgzYWFmNGZlODQwNTY4ZjRlNzEyNjI0YzA3N2Y0MTJkMDVjZWY4NzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NzYwYjMxOS0wMjZiLTQ0NjgtYjAxZS1hNGE1
NDAzNmY0NGIvNzIyMDFjZTg4Y2FhOGQ2YmVkMDg5NjJkMjc0ODA4OGE2ODNkZmE4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArEMWDANBAIAAjAHAwUAKANl4DANBgkqhkiG9w0BAQsFAAOC
AQEAWF4jRfxHsfIuo1jJOd2nA41yRG/d0+AkcI3ESCSdgM6RB3b0gC/D+eRdJ4Wy
rQSO7QoBLqaupVg4qULGaTF8rzjObwks1RhWSRVSgdUkCq1Kict25TrhPgRvo97b
mwEat3eNl1VPH+FC5u2D3Go3aM/5pMMJGV0VW6oJuPbedO5RpArbCbuf1xLtWZ0k
hH65gl7XKYT9lnqmJ9uPMBdptAqkGODG3N/8UCTuk6JdPEIUUZ4Bt83rYksUIxmJ
kDvBZtwTlHGOMoF4lllW20JGwwrkTEJ6MbQn+IgtbhwUWTdrqRdITL/eUC8fJKIa
4pu1wsCoOUG4Ea4btqHJa+zSRA==
-----END CERTIFICATE-----