Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/1f2d1fde960487703d97281896fabe8f76d82737.roa
File:                     1f2d1fde960487703d97281896fabe8f76d82737.roa (raw, json)
Hash identifier:          K0Zi7Y2DVQ5tG5FmAxtF1SdVBKjvhmeQKfSsjunxDrc=
Subject key identifier:   5E:CF:58:57:E8:E9:DC:2D:7C:EB:54:2D:2C:08:02:35:28:8B:5D:50
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       0602C1
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/1f2d1fde960487703d97281896fabe8f76d82737.roa
Signing time:             Tue 11 Jul 2023 17:16:42 +0000
ROA not before:           Mon 10 Jul 2023 17:16:42 +0000
ROA not after:            Fri 11 Jul 2025 17:16:42 +0000
asID:                     7418
IP address blocks:        191.124.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393921 (0x602c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 10 17:16:42 2023 GMT
            Not After : Jul 11 17:16:42 2025 GMT
        Subject: CN=1f2d1fde960487703d97281896fabe8f76d82737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:a7:5c:59:b9:36:96:ee:70:39:11:78:c5:
                    55:24:a8:5f:1c:d8:ea:25:c8:90:a3:ee:67:0e:ad:
                    43:99:dc:40:db:cf:ae:12:cb:36:fc:17:ca:e3:80:
                    fa:54:77:2b:62:4d:52:80:4e:ab:a9:ca:a7:d8:4e:
                    b9:29:62:a6:7e:f2:7a:eb:b7:00:ce:de:56:25:99:
                    ce:a3:ea:71:3a:b8:6d:af:de:06:51:e8:07:2f:fd:
                    11:2d:0b:01:32:d1:77:c3:80:04:8a:98:89:92:10:
                    05:c2:0b:c4:c8:1b:92:8a:c5:73:07:30:b4:fc:ed:
                    7b:eb:74:3c:f4:64:a2:52:8f:c7:77:16:6d:be:34:
                    c6:10:d1:8b:9b:86:71:ad:83:24:d4:15:be:8a:ec:
                    f7:4a:67:ec:da:76:ce:a5:29:29:23:95:43:fe:c0:
                    38:11:3c:e1:ec:8f:6f:ea:db:2b:ca:3c:38:67:dc:
                    0a:a5:24:dd:29:00:1c:68:5d:ce:c7:75:eb:10:f5:
                    8e:53:45:54:5e:84:43:0d:0f:3e:73:80:f8:b6:d2:
                    12:87:25:d6:51:90:8d:38:8c:64:d6:50:9f:ef:dd:
                    69:10:c6:d7:35:17:1a:ac:6b:d8:62:48:0d:38:33:
                    cc:3d:0c:ba:98:b5:ef:36:fe:b3:bd:8b:14:95:9a:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:58:57:E8:E9:DC:2D:7C:EB:54:2D:2C:08:02:35:28:8B:5D:50
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/1f2d1fde960487703d97281896fabe8f76d82737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.124.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a9:00:ed:8c:37:aa:bb:a3:42:56:c9:7c:33:8a:ec:49:14:56:
         d2:94:80:a0:20:13:0d:ca:65:bd:b7:1b:3c:9e:f0:30:a0:f4:
         32:56:ad:4b:5c:6c:72:a9:9c:8e:fd:a7:2d:ef:4b:01:98:cf:
         91:74:fa:7e:fa:c4:9f:42:94:d8:6a:38:ef:4a:98:1d:f2:d5:
         1c:33:3f:05:ec:aa:c5:66:9f:cf:45:62:38:ac:8f:ff:9c:8d:
         8e:b3:98:0c:b7:56:1d:26:2d:40:83:b3:30:ab:43:a5:b3:88:
         1d:1f:a9:25:a6:44:42:f5:78:4e:85:0b:7e:f4:83:e6:f0:07:
         5e:c7:0d:86:ba:85:b1:c4:57:b7:32:92:b5:91:b4:f7:52:80:
         f5:81:97:b9:20:88:66:0b:c0:06:db:29:32:94:60:5d:d0:45:
         1f:ce:2c:76:22:59:4d:7c:97:c7:a4:62:db:12:64:b6:a4:bf:
         fa:3f:b6:c7:b0:02:7f:38:ec:73:52:b7:6d:8b:e8:53:df:c6:
         c6:06:9c:97:18:24:83:c3:85:ba:bf:0a:96:32:65:b5:f4:d1:
         60:3f:54:66:e8:b0:44:2f:98:db:b8:96:11:54:9f:5b:98:8b:
         a2:1a:74:02:40:a6:25:d5:37:d9:e7:23:a9:05:52:42:87:ac:
         5d:a2:46:27
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDBgLBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
YTI0MWE4NGMyN2JmZTM1ZTg0ZGVhNjVmNGE3ZGIwMGZhYjU1M2MwHhcNMjMwNzEw
MTcxNjQyWhcNMjUwNzExMTcxNjQyWjAzMTEwLwYDVQQDEygxZjJkMWZkZTk2MDQ4
NzcwM2Q5NzI4MTg5NmZhYmU4Zjc2ZDgyNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh0GnXFm5NpbucDkReMVVJKhfHNjqJciQo+5nDq1DmdxA28+u
Ess2/BfK44D6VHcrYk1SgE6rqcqn2E65KWKmfvJ667cAzt5WJZnOo+pxOrhtr94G
UegHL/0RLQsBMtF3w4AEipiJkhAFwgvEyBuSisVzBzC0/O1763Q89GSiUo/HdxZt
vjTGENGLm4ZxrYMk1BW+iuz3Smfs2nbOpSkpI5VD/sA4ETzh7I9v6tsryjw4Z9wK
pSTdKQAcaF3Ox3XrEPWOU0VUXoRDDQ8+c4D4ttIShyXWUZCNOIxk1lCf791pEMbX
NRcarGvYYkgNODPMPQy6mLXvNv6zvYsUlZriVwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFF7PWFfo6dwtfOtULSwIAjUoi11QMB8GA1UdIwQYMBaAFPRYYPyM8OxmjBJA
t3XD4k5sNgOAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmNhMjQx
YTg0YzI3YmZlMzVlODRkZWE2NWY0YTdkYjAwZmFiNTUzYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2Q3ZGEwYzMtYzBhMC00ZGJiLWEzNTYtNTA0NDhk
NzQ5MzE3LzFmMmQxZmRlOTYwNDg3NzAzZDk3MjgxODk2ZmFiZThmNzZkODI3Mzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZDdkYTBjMy1jMGEwLTRkYmItYTM1Ni01MDQ0
OGQ3NDkzMTcvYmNhMjQxYTg0YzI3YmZlMzVlODRkZWE2NWY0YTdkYjAwZmFiNTUz
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAr98MA0GCSqGSIb3DQEBCwUAA4IBAQCpAO2MN6q7o0JWyXwz
iuxJFFbSlICgIBMNymW9txs8nvAwoPQyVq1LXGxyqZyO/act70sBmM+RdPp++sSf
QpTYajjvSpgd8tUcMz8F7KrFZp/PRWI4rI//nI2Os5gMt1YdJi1Ag7Mwq0Ols4gd
H6klpkRC9XhOhQt+9IPm8Adexw2GuoWxxFe3MpK1kbT3UoD1gZe5IIhmC8AG2yky
lGBd0EUfzix2IllNfJfHpGLbEmS2pL/6P7bHsAJ/OOxzUrdti+hT38bGBpyXGCSD
w4W6vwqWMmW19NFgP1Rm6LBEL5jbuJYRVJ9bmIuiGnQCQKYl1TfZ5yOpBVJCh6xd
okYn
-----END CERTIFICATE-----