Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/00f8374eec435b729aef2f33b05a906ee4b86480.roa
File:                     00f8374eec435b729aef2f33b05a906ee4b86480.roa (raw, json)
Hash identifier:          s3+QuRynt+dlgjnwBAcVJ4NCK87piflHSnMpX6827MQ=
Subject key identifier:   F3:87:27:4C:2C:ED:80:87:7A:D5:92:5C:9E:5F:78:A3:F3:DD:69:CB
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       22E60A
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/00f8374eec435b729aef2f33b05a906ee4b86480.roa
Signing time:             Tue 20 Jun 2023 15:45:25 +0000
ROA not before:           Mon 19 Jun 2023 15:45:21 +0000
ROA not after:            Fri 20 Jun 2025 15:45:21 +0000
asID:                     52343
IP address blocks:        190.15.143.0/24 maxlen: 24
                          2800:68:15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287114 (0x22e60a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jun 19 15:45:21 2023 GMT
            Not After : Jun 20 15:45:21 2025 GMT
        Subject: CN=00f8374eec435b729aef2f33b05a906ee4b86480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:ca:8e:41:6a:f0:c4:c5:84:b5:e7:9a:10:
                    35:b1:af:1b:85:f0:66:c3:73:81:92:08:48:20:46:
                    f2:ff:7f:45:46:c9:4b:f5:36:da:fe:85:c2:0c:0d:
                    e0:5b:ab:2b:8a:e2:b6:77:2a:8c:ce:64:b1:00:25:
                    86:ab:f5:0a:22:79:04:4a:1f:95:4c:fa:53:32:49:
                    a7:c8:e3:71:e7:98:55:58:43:ee:ee:89:fe:f2:ae:
                    d3:1c:89:fb:5a:21:50:39:3e:08:d4:d3:b8:94:65:
                    ac:4e:15:97:b2:27:88:65:24:1c:55:7c:b1:2d:d5:
                    3b:7c:93:99:d0:d4:7d:be:db:8b:6f:cc:bb:23:46:
                    f3:38:2b:75:07:64:c6:9b:3b:0c:c2:8c:81:08:85:
                    eb:67:6d:70:f5:9d:5e:00:81:0d:71:cb:0a:85:52:
                    2d:69:ca:57:ad:39:38:e8:b2:5f:72:d1:cd:3a:15:
                    33:9e:b9:e3:35:cc:56:90:bf:51:63:d1:07:6a:e3:
                    44:79:3d:16:14:77:a8:13:b6:04:32:35:dc:89:26:
                    e5:c0:6b:03:68:6f:f0:78:f1:a7:68:66:6f:ff:20:
                    23:cb:89:97:8f:f0:d4:7c:79:61:a9:62:92:3f:cd:
                    f6:55:2e:62:93:c1:67:38:67:72:cc:36:46:4d:8f:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:27:4C:2C:ED:80:87:7A:D5:92:5C:9E:5F:78:A3:F3:DD:69:CB
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/00f8374eec435b729aef2f33b05a906ee4b86480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.143.0/24
                IPv6:
                  2800:68:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:83:d1:e6:d6:07:62:49:67:ee:6a:53:34:16:f3:be:69:04:
         2e:00:64:40:57:88:cf:8e:98:25:78:57:83:d7:45:39:c3:9f:
         53:86:53:8d:87:c9:90:d0:90:9a:15:5e:fe:ac:73:15:66:66:
         5a:52:3c:89:f2:8c:f2:d2:5d:df:cc:a0:61:e1:1f:1d:69:23:
         77:65:17:dd:40:ad:02:a8:e3:29:18:38:e9:ad:83:69:a1:e5:
         c5:b8:0a:24:ed:02:4d:fe:08:7d:6e:72:1b:26:db:59:cd:5f:
         a3:c1:4f:ac:74:54:d3:f9:60:0a:60:66:91:49:93:dd:08:e0:
         76:09:8f:89:67:85:f3:1a:0e:42:ff:7c:c8:9e:a9:76:4e:17:
         ad:f2:ea:88:98:6a:9d:2f:a6:ae:6f:57:d0:b1:e4:7b:92:89:
         a6:bf:b3:9c:31:2f:63:3f:ec:9d:d6:84:3c:4c:6c:9b:3c:e4:
         ca:b3:97:d6:ab:7a:e0:dc:cf:b4:f9:d4:34:c9:fb:55:96:cf:
         7e:7b:79:87:30:97:eb:41:12:b1:a7:bd:41:a3:f2:6f:2e:36:
         f6:c1:0b:14:9f:31:90:06:6a:88:d3:ae:06:26:c4:75:cd:41:
         ec:20:fe:7c:cc:9d:b0:c4:27:42:96:bd:cb:72:db:bb:d8:49:
         5d:b1:7a:0e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDIuYKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjMwNjE5
MTU0NTIxWhcNMjUwNjIwMTU0NTIxWjAzMTEwLwYDVQQDEygwMGY4Mzc0ZWVjNDM1
YjcyOWFlZjJmMzNiMDVhOTA2ZWU0Yjg2NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnXrKjkFq8MTFhLXnmhA1sa8bhfBmw3OBkghIIEby/39FRslL
9Tba/oXCDA3gW6sriuK2dyqMzmSxACWGq/UKInkESh+VTPpTMkmnyONx55hVWEPu
7on+8q7THIn7WiFQOT4I1NO4lGWsThWXsieIZSQcVXyxLdU7fJOZ0NR9vtuLb8y7
I0bzOCt1B2TGmzsMwoyBCIXrZ21w9Z1eAIENccsKhVItacpXrTk46LJfctHNOhUz
nrnjNcxWkL9RY9EHauNEeT0WFHeoE7YEMjXciSblwGsDaG/wePGnaGZv/yAjy4mX
j/DUfHlhqWKSP832VS5ik8FnOGdyzDZGTY/giwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFPOHJ0ws7YCHetWSXJ5feKPz3WnLMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzAwZjgzNzRlZWM0MzViNzI5YWVmMmYzM2IwNWE5MDZlZTRiODY0ODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAL4PjzAPBAIAAjAJAwcAKAAAaAAVMA0GCSqGSIb3DQEBCwUA
A4IBAQAhg9Hm1gdiSWfualM0FvO+aQQuAGRAV4jPjpgleFeD10U5w59ThlONh8mQ
0JCaFV7+rHMVZmZaUjyJ8ozy0l3fzKBh4R8daSN3ZRfdQK0CqOMpGDjprYNpoeXF
uAok7QJN/gh9bnIbJttZzV+jwU+sdFTT+WAKYGaRSZPdCOB2CY+JZ4XzGg5C/3zI
nql2Thet8uqImGqdL6aub1fQseR7kommv7OcMS9jP+yd1oQ8TGybPOTKs5fWq3rg
3M+0+dQ0yftVls9+e3mHMJfrQRKxp71Bo/JvLjb2wQsUnzGQBmqI064GJsR1zUHs
IP58zJ2wxCdClr3Lctu72EldsXoO
-----END CERTIFICATE-----