Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa
File:                     f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa (raw, json)
Hash identifier:          w7HhokUdjbNmRZScRBomR/CztSbiYAdY2J6PRejSEvo=
Subject key identifier:   58:72:E1:88:3F:68:1F:71:AC:C8:30:AF:BB:62:89:8C:67:50:49:D6
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       21929E
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa
Signing time:             Mon 24 Jul 2023 14:44:38 +0000
ROA not before:           Sun 23 Jul 2023 14:44:36 +0000
ROA not after:            Thu 24 Jul 2025 14:44:36 +0000
asID:                     266846
IP address blocks:        45.238.176.0/23 maxlen: 24
                          138.0.122.0/23 maxlen: 24
                          2803:bca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200222 (0x21929e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Jul 23 14:44:36 2023 GMT
            Not After : Jul 24 14:44:36 2025 GMT
        Subject: CN=f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:2d:59:83:83:13:aa:d5:5e:e8:cd:3e:07:
                    5d:43:f1:2d:3d:36:6a:b2:f1:e9:21:55:40:f9:8f:
                    32:61:3d:83:f2:ae:9a:ec:c9:33:73:c9:82:55:7b:
                    fa:2b:20:56:b7:0d:38:16:e9:af:1c:6b:fb:73:07:
                    d4:f0:79:f8:84:d7:82:fb:fb:fc:97:9f:6d:78:25:
                    1d:09:10:13:69:84:83:84:53:11:84:e7:da:23:16:
                    74:8c:d7:e5:6b:d5:3a:a8:ca:40:37:9a:1e:e6:66:
                    33:93:55:eb:63:18:bb:b6:fb:fb:4d:00:c9:d8:60:
                    d6:03:85:01:49:40:97:d1:e0:fc:90:bb:ed:1a:31:
                    70:da:5e:de:1e:6d:55:4b:cc:06:07:43:4d:e5:74:
                    13:79:8c:59:ee:22:a8:b2:3d:fc:88:57:24:28:29:
                    37:ec:57:7d:d6:3f:3d:04:39:27:f9:c0:75:14:17:
                    7d:67:8f:e9:1c:73:57:1c:96:30:12:da:be:f8:93:
                    87:76:8f:fe:b1:cf:af:2d:7e:f4:5c:af:68:da:90:
                    56:19:70:f2:1b:87:38:7d:f4:9f:bc:a5:6f:12:a5:
                    de:50:9f:d5:3d:0e:2b:b3:ec:b8:e4:e4:f5:65:00:
                    c0:e3:51:2e:3c:bb:50:85:96:6b:a8:68:6f:c9:9f:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:72:E1:88:3F:68:1F:71:AC:C8:30:AF:BB:62:89:8C:67:50:49:D6
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/f1ada2fbf71c0a1c9bf5a4d2b9ab7dbb08f0b14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/23
                  138.0.122.0/23
                IPv6:
                  2803:bca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:93:f2:45:29:dc:31:1e:f6:c7:dd:30:ee:e5:7d:96:d2:
         44:e9:93:e2:60:6b:6f:57:72:5d:78:57:92:3a:df:9f:8b:55:
         e2:5a:8c:c5:5e:3f:41:ce:b9:40:9d:3b:6d:f4:e0:dc:3e:7b:
         7d:dc:a1:98:45:17:23:3a:aa:8c:53:bd:93:02:23:72:86:fd:
         82:ad:99:1b:8e:72:c9:73:f9:c7:74:29:e0:89:1d:4d:4d:9d:
         71:8d:81:15:83:83:f5:33:6e:df:c7:99:99:54:60:81:c6:0b:
         d8:6e:ef:8f:93:b8:d2:32:8b:8e:c8:bd:17:84:79:9d:50:c8:
         3a:b1:5e:92:b8:22:de:ed:13:e8:7d:31:6c:46:11:b3:1f:6f:
         52:71:95:80:f7:7c:80:3e:e8:ed:10:20:86:22:79:98:bd:00:
         fe:be:bc:cf:28:7b:6e:04:f3:47:da:0d:b5:52:44:f9:95:76:
         d4:cd:50:4c:ef:30:a8:a4:6d:13:30:5c:d6:fa:7b:23:b5:c1:
         c4:20:4b:10:df:37:d1:e6:c4:9a:37:a8:93:c2:11:d9:46:27:
         db:c7:b8:b6:a7:4a:86:85:40:41:fe:55:60:28:fe:3f:79:ce:
         1c:01:20:70:f6:27:2d:fe:c3:b6:0a:38:86:d5:d8:98:d6:ae:
         12:36:ae:e5
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDIZKeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx
MjdlZmY1ZmI4OWQ0ZjA0ZjM2MmI4OWJlYjcyZDYxMjE0N2FmN2YwHhcNMjMwNzIz
MTQ0NDM2WhcNMjUwNzI0MTQ0NDM2WjAzMTEwLwYDVQQDEyhmMWFkYTJmYmY3MWMw
YTFjOWJmNWE0ZDJiOWFiN2RiYjA4ZjBiMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv58tWYODE6rVXujNPgddQ/EtPTZqsvHpIVVA+Y8yYT2D8q6a
7Mkzc8mCVXv6KyBWtw04FumvHGv7cwfU8Hn4hNeC+/v8l59teCUdCRATaYSDhFMR
hOfaIxZ0jNfla9U6qMpAN5oe5mYzk1XrYxi7tvv7TQDJ2GDWA4UBSUCX0eD8kLvt
GjFw2l7eHm1VS8wGB0NN5XQTeYxZ7iKosj38iFckKCk37Fd91j89BDkn+cB1FBd9
Z4/pHHNXHJYwEtq++JOHdo/+sc+vLX70XK9o2pBWGXDyG4c4ffSfvKVvEqXeUJ/V
PQ4rs+y45OT1ZQDA41EuPLtQhZZrqGhvyZ9xhQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFFhy4Yg/aB9xrMgwr7tiiYxnUEnWMB8GA1UdIwQYMBaAFPY9QYUeFNUrFKiK
0YhGJhc+hOMrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDEyN2Vm
ZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhL2YxYWRhMmZiZjcxYzBhMWM5YmY1YTRkMmI5YWI3ZGJiMDhmMGIxNGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvMDEyN2VmZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAS3usAMEAYoAejANBAIAAjAHAwUAKAO8oDANBgkqhkiG9w0B
AQsFAAOCAQEAI8+T8kUp3DEe9sfdMO7lfZbSROmT4mBrb1dyXXhXkjrfn4tV4lqM
xV4/Qc65QJ07bfTg3D57fdyhmEUXIzqqjFO9kwIjcob9gq2ZG45yyXP5x3Qp4Ikd
TU2dcY2BFYOD9TNu38eZmVRggcYL2G7vj5O40jKLjsi9F4R5nVDIOrFekrgi3u0T
6H0xbEYRsx9vUnGVgPd8gD7o7RAghiJ5mL0A/r68zyh7bgTzR9oNtVJE+ZV21M1Q
TO8wqKRtEzBc1vp7I7XBxCBLEN830ebEmjeok8IR2UYn28e4tqdKhoVAQf5VYCj+
P3nOHAEgcPYnLf7Dtgo4htXYmNauEjau5Q==
-----END CERTIFICATE-----