Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ced1fa6c73657adb4ba14bbedde7cd52ece57acd.roa
File:                     ced1fa6c73657adb4ba14bbedde7cd52ece57acd.roa (raw, json)
Hash identifier:          QGYdXxNOCreTM0hWLcaUXt4AhivekobgsQ5moaDedz8=
Subject key identifier:   F3:00:4E:FD:C5:BB:7D:24:65:89:5D:BA:79:82:B6:97:6C:7B:4D:E1
Certificate issuer:       /CN=ae3cf2536575d774352e8bdfb75251b353267e80
Certificate serial:       1199C1
Authority key identifier: A9:D0:89:41:9C:89:B0:BA:BF:5D:A7:C1:60:56:34:1D:AF:D9:D5:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3cf2536575d774352e8bdfb75251b353267e80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ced1fa6c73657adb4ba14bbedde7cd52ece57acd.roa
Signing time:             Wed 31 May 2023 08:30:02 +0000
ROA not before:           Tue 30 May 2023 08:30:02 +0000
ROA not after:            Thu 29 May 2025 08:30:02 +0000
asID:                     27989
IP address blocks:        201.131.49.0/24 maxlen: 24
                          2801:1c:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153473 (0x1199c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3cf2536575d774352e8bdfb75251b353267e80
        Validity
            Not Before: May 30 08:30:02 2023 GMT
            Not After : May 29 08:30:02 2025 GMT
        Subject: CN=ced1fa6c73657adb4ba14bbedde7cd52ece57acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:51:89:d0:63:33:03:c9:50:95:5d:e3:ef:
                    dd:cf:e4:9e:e5:7d:72:e3:be:c2:38:d3:db:56:69:
                    55:f5:88:55:bc:eb:bc:8c:fc:f3:88:e2:93:b1:ea:
                    67:2a:b5:f9:4f:6d:91:2a:a1:eb:b2:36:7e:f3:77:
                    b0:cb:3d:a0:a9:5a:a2:33:a2:2e:92:c7:7a:6c:78:
                    75:6d:a4:e8:97:65:95:37:f3:84:66:e2:65:85:a1:
                    31:77:90:ef:3c:1f:5b:15:63:94:e8:b4:3c:49:92:
                    f4:54:2a:b0:4d:30:6a:ed:34:da:45:39:0d:7c:9f:
                    ab:77:f5:5b:b8:ce:f7:6d:82:25:a8:d3:ea:47:f2:
                    08:6e:f8:0a:e2:55:58:8f:8e:dc:52:d1:ba:67:fc:
                    8e:6f:5e:ec:45:2a:f0:98:e4:79:73:b3:19:0a:89:
                    af:ce:3a:17:91:c7:f2:24:4f:4d:b1:2e:da:24:86:
                    8e:79:84:47:a3:b5:40:90:6d:af:6d:82:73:ea:90:
                    07:82:8f:a1:e1:d4:74:8f:c7:14:a5:13:1b:5e:80:
                    4a:7e:bf:f0:87:89:c9:64:a1:0b:0e:38:b7:d8:57:
                    e6:14:84:11:66:93:2b:84:17:b7:5a:c0:2b:6f:36:
                    89:fc:a0:fe:30:9d:ed:dc:10:fa:d4:b5:29:34:f3:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:00:4E:FD:C5:BB:7D:24:65:89:5D:BA:79:82:B6:97:6C:7B:4D:E1
            X509v3 Authority Key Identifier:
                keyid:A9:D0:89:41:9C:89:B0:BA:BF:5D:A7:C1:60:56:34:1D:AF:D9:D5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3cf2536575d774352e8bdfb75251b353267e80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ced1fa6c73657adb4ba14bbedde7cd52ece57acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ae3cf2536575d774352e8bdfb75251b353267e80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.49.0/24
                IPv6:
                  2801:1c:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:40:d4:9b:11:ea:a4:d1:de:c9:17:93:0d:aa:48:f1:8b:
         cc:fe:9c:7e:06:b7:4a:e1:48:f6:78:10:af:00:a3:ad:56:71:
         b0:b3:65:10:84:76:c5:55:55:e0:ad:83:ad:a5:1c:e2:98:cd:
         e9:c2:bb:44:0f:b7:ed:a9:de:02:4d:29:e6:bf:f5:79:14:a2:
         14:33:86:97:e9:e9:dc:57:78:86:d3:10:16:6b:bc:47:0e:78:
         37:26:16:8f:9d:22:47:82:cb:c1:e7:e0:bf:30:f8:c8:0d:ac:
         fa:52:87:cf:b4:9c:26:29:af:5a:cb:4a:aa:28:97:2f:b5:ac:
         ec:28:98:39:af:08:a6:c3:13:d9:17:84:7c:91:30:37:5d:10:
         92:89:4d:c1:49:86:06:b8:11:75:0c:56:8e:aa:41:ed:2e:bd:
         24:81:9c:07:bc:44:5e:75:41:be:4d:93:4c:b3:ad:7c:b0:35:
         4f:8a:d0:81:0e:19:1e:2e:e9:b2:90:be:00:f9:f2:55:f9:c4:
         04:3a:5b:56:e3:0a:aa:39:3d:98:60:7f:70:ce:a5:e1:de:9e:
         27:b0:fa:2b:7a:ca:d8:de:75:41:82:d1:3c:37:e1:fd:f4:63:
         22:36:80:6a:91:ef:d7:12:35:6c:4c:f2:b9:e5:26:1a:7c:f0:
         14:40:26:d7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDEZnBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
M2NmMjUzNjU3NWQ3NzQzNTJlOGJkZmI3NTI1MWIzNTMyNjdlODAwHhcNMjMwNTMw
MDgzMDAyWhcNMjUwNTI5MDgzMDAyWjAzMTEwLwYDVQQDEyhjZWQxZmE2YzczNjU3
YWRiNGJhMTRiYmVkZGU3Y2Q1MmVjZTU3YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo4lRidBjMwPJUJVd4+/dz+Se5X1y477CONPbVmlV9YhVvOu8
jPzziOKTsepnKrX5T22RKqHrsjZ+83ewyz2gqVqiM6Iuksd6bHh1baTol2WVN/OE
ZuJlhaExd5DvPB9bFWOU6LQ8SZL0VCqwTTBq7TTaRTkNfJ+rd/VbuM73bYIlqNPq
R/IIbvgK4lVYj47cUtG6Z/yOb17sRSrwmOR5c7MZComvzjoXkcfyJE9NsS7aJIaO
eYRHo7VAkG2vbYJz6pAHgo+h4dR0j8cUpRMbXoBKfr/wh4nJZKELDji32FfmFIQR
ZpMrhBe3WsArbzaJ/KD+MJ3t3BD61LUpNPM5OwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFPMATv3Fu30kZYldunmCtpdse03hMB8GA1UdIwQYMBaAFKnQiUGcibC6v12n
wWBWNB2v2dXwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWUzY2Yy
NTM2NTc1ZDc3NDM1MmU4YmRmYjc1MjUxYjM1MzI2N2U4MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjk0MmMyOTgtYzY3Ni00ZTlhLTk1NzUtMGRlMDFk
ZTRmNWY1L2NlZDFmYTZjNzM2NTdhZGI0YmExNGJiZWRkZTdjZDUyZWNlNTdhY2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OTQyYzI5OC1jNjc2LTRlOWEtOTU3NS0wZGUw
MWRlNGY1ZjUvYWUzY2YyNTM2NTc1ZDc3NDM1MmU4YmRmYjc1MjUxYjM1MzI2N2U4
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMmDMTAPBAIAAjAJAwcAKAEAHGAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCDrEDUmxHqpNHeyReTDapI8YvM/px+BrdK4Uj2eBCvAKOtVnGws2UQhHbF
VVXgrYOtpRzimM3pwrtED7ftqd4CTSnmv/V5FKIUM4aX6encV3iG0xAWa7xHDng3
JhaPnSJHgsvB5+C/MPjIDaz6UofPtJwmKa9ay0qqKJcvtazsKJg5rwimwxPZF4R8
kTA3XRCSiU3BSYYGuBF1DFaOqkHtLr0kgZwHvERedUG+TZNMs618sDVPitCBDhke
LumykL4A+fJV+cQEOltW4wqqOT2YYH9wzqXh3p4nsPoresrY3nVBgtE8N+H99GMi
NoBqke/XEjVsTPK55SYafPAUQCbX
-----END CERTIFICATE-----