Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/7ac74e38b28d9439ac996becd3858eb0d2755a7e.roa
File:                     7ac74e38b28d9439ac996becd3858eb0d2755a7e.roa (raw, json)
Hash identifier:          SEUhaxZ3PJKw+Dlwexf8jiQSgjjxcaAzaQyu4p1kAco=
Subject key identifier:   D4:3F:BF:18:BF:5F:4D:C7:E7:23:8F:CB:09:B2:7C:B7:78:C1:7D:6C
Certificate issuer:       /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial:       058C89
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/7ac74e38b28d9439ac996becd3858eb0d2755a7e.roa
Signing time:             Thu 02 Feb 2023 23:56:27 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Tue 14 Jan 2025 03:00:00 +0000
asID:                     270149
IP address blocks:        148.208.0.0/16 maxlen: 16
                          2806:3c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363657 (0x58c89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jan 14 03:00:00 2025 GMT
        Subject: CN=7ac74e38b28d9439ac996becd3858eb0d2755a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:d1:72:88:82:71:0a:20:be:c6:7b:01:86:
                    04:03:e4:19:36:a3:9d:19:18:30:ca:75:3a:4f:fa:
                    82:42:22:e9:9c:28:84:0b:d2:71:a4:18:4f:c0:d7:
                    91:99:4e:86:47:cd:6d:8b:d6:89:28:b0:c2:2a:da:
                    a6:9e:cc:66:29:03:89:5e:65:f6:9d:2b:2a:f8:1e:
                    5d:85:70:47:1c:f3:9f:ec:ac:fa:37:8a:b0:1c:93:
                    6c:4a:2a:01:ff:18:b8:75:6f:0b:98:d0:9a:04:2e:
                    78:ff:3a:4a:e4:7e:90:7f:12:e5:02:c7:b1:03:4f:
                    c5:11:df:6b:be:37:0a:ba:1c:ba:f0:9c:ae:c9:a5:
                    52:c7:12:7c:62:d8:72:fb:9c:46:2f:8e:78:96:3d:
                    e1:4c:e6:ec:a5:d0:45:58:3f:d6:45:75:80:ad:95:
                    ff:ff:8a:bb:c2:75:46:70:65:a5:4b:e2:bb:eb:4f:
                    43:30:83:f9:12:82:3b:4f:ac:c3:6d:8f:d7:f7:d0:
                    8a:9a:31:e2:31:4e:02:f2:a0:d3:28:b3:fe:14:e7:
                    a5:c6:ca:9d:01:6e:09:cf:88:b1:9f:d3:0c:71:96:
                    a4:e3:d0:38:e5:63:9c:8e:db:85:73:14:7c:1b:bb:
                    c4:3d:f3:df:c0:33:8a:d9:b7:73:bf:3b:ae:20:54:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3F:BF:18:BF:5F:4D:C7:E7:23:8F:CB:09:B2:7C:B7:78:C1:7D:6C
            X509v3 Authority Key Identifier:
                keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/7ac74e38b28d9439ac996becd3858eb0d2755a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16
                IPv6:
                  2806:3c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:ef:9b:28:1d:c6:e5:4f:ff:f7:71:52:3f:45:cf:26:30:
         7d:4c:89:bd:30:8b:bf:aa:71:cb:2f:10:cc:84:2e:d6:f8:6e:
         f6:81:66:fa:5c:46:66:5d:10:b9:95:a8:44:61:c9:20:0e:e0:
         9b:35:07:a7:da:66:ab:3c:3c:c2:7d:9e:36:8a:86:c8:93:9e:
         94:da:d9:c4:12:14:71:f5:03:dc:94:99:52:c2:eb:f3:28:9e:
         fe:e8:85:13:4d:8e:47:93:e7:c3:f5:16:44:13:8e:8f:c1:a2:
         b0:3e:1a:70:7e:48:51:e8:f1:56:2b:e0:26:d8:20:d9:f2:30:
         df:e1:63:26:4c:27:fe:35:75:72:c9:59:d4:35:d2:a3:ee:fd:
         cc:87:58:41:64:cd:7e:85:ee:58:11:61:f1:e7:43:b9:93:8b:
         2e:7f:8c:0f:b8:95:f6:53:8a:1c:d3:ae:4f:36:96:63:96:db:
         bf:ce:6c:44:47:eb:71:59:94:2c:08:63:6a:29:ee:09:27:3e:
         10:76:8d:1d:63:2f:c2:7d:25:1e:64:77:de:12:d3:91:59:eb:
         53:57:a9:51:a8:56:3a:a4:e2:03:d0:05:51:b3:f5:6d:5f:44:
         a7:25:6c:f4:33:0e:e2:ce:f6:ae:c9:12:d3:c6:f9:80:b2:92:
         fb:9e:ca:ad
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDBYyJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI0
YjlhODNhODRlZDY1MWIwYjYxMzM1OWZiYjFhODc1ZTQzNjMxNmEwHhcNMjIwNjE5
MDMwMDAwWhcNMjUwMTE0MDMwMDAwWjAzMTEwLwYDVQQDEyg3YWM3NGUzOGIyOGQ5
NDM5YWM5OTZiZWNkMzg1OGViMGQyNzU1YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvvTRcoiCcQogvsZ7AYYEA+QZNqOdGRgwynU6T/qCQiLpnCiE
C9JxpBhPwNeRmU6GR81ti9aJKLDCKtqmnsxmKQOJXmX2nSsq+B5dhXBHHPOf7Kz6
N4qwHJNsSioB/xi4dW8LmNCaBC54/zpK5H6QfxLlAsexA0/FEd9rvjcKuhy68Jyu
yaVSxxJ8Ythy+5xGL454lj3hTObspdBFWD/WRXWArZX//4q7wnVGcGWlS+K7609D
MIP5EoI7T6zDbY/X99CKmjHiMU4C8qDTKLP+FOelxsqdAW4Jz4ixn9MMcZak49A4
5WOcjtuFcxR8G7vEPfPfwDOK2bdzvzuuIFT8FwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFNQ/vxi/X03H5yOPywmyfLd4wX1sMB8GA1UdIwQYMBaAFJ0fHbjfi+Lu5+Le
TXfli/ONLMypMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjRiOWE4
M2E4NGVkNjUxYjBiNjEzMzU5ZmJiMWE4NzVlNDM2MzE2YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzcyMjJiZjctNzFiNy00MGJhLWJkYjEtZWE1MDMw
ZGI1Mjc1LzdhYzc0ZTM4YjI4ZDk0MzlhYzk5NmJlY2QzODU4ZWIwZDI3NTVhN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NzIyMmJmNy03MWI3LTQwYmEtYmRiMS1lYTUw
MzBkYjUyNzUvMjRiOWE4M2E4NGVkNjUxYjBiNjEzMzU5ZmJiMWE4NzVlNDM2MzE2
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwCwQCAAEwBQMDAJTQMA0EAgACMAcDBQAoBgPIMA0GCSqGSIb3DQEBCwUAA4IB
AQBPYe+bKB3G5U//93FSP0XPJjB9TIm9MIu/qnHLLxDMhC7W+G72gWb6XEZmXRC5
lahEYckgDuCbNQen2marPDzCfZ42iobIk56U2tnEEhRx9QPclJlSwuvzKJ7+6IUT
TY5Hk+fD9RZEE46PwaKwPhpwfkhR6PFWK+Am2CDZ8jDf4WMmTCf+NXVyyVnUNdKj
7v3Mh1hBZM1+he5YEWHx50O5k4suf4wPuJX2U4oc065PNpZjltu/zmxER+txWZQs
CGNqKe4JJz4Qdo0dYy/CfSUeZHfeEtORWetTV6lRqFY6pOID0AVRs/VtX0SnJWz0
Mw7izvauyRLTxvmAspL7nsqt
-----END CERTIFICATE-----