Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/bce0dcc43dc3b7b75b357b3845061d3dda4cd089.roa
File:                     bce0dcc43dc3b7b75b357b3845061d3dda4cd089.roa (raw, json)
Hash identifier:          JsQn0mjWntQ55ijpQjQfy5MZENK+fXqaxWkuIc2irKY=
Subject key identifier:   D9:78:4C:67:98:A9:13:3A:B0:DD:15:66:DF:85:E5:90:5B:EF:56:97
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       22EAC7
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/bce0dcc43dc3b7b75b357b3845061d3dda4cd089.roa
Signing time:             Tue 20 Jun 2023 15:45:27 +0000
ROA not before:           Mon 19 Jun 2023 15:45:21 +0000
ROA not after:            Fri 20 Jun 2025 15:45:21 +0000
asID:                     27947
IP address blocks:        190.15.128.0/20 maxlen: 24
                          2800:68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288327 (0x22eac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jun 19 15:45:21 2023 GMT
            Not After : Jun 20 15:45:21 2025 GMT
        Subject: CN=bce0dcc43dc3b7b75b357b3845061d3dda4cd089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:2c:89:0e:fd:42:0c:1c:08:e6:a0:b2:ce:
                    75:b8:a6:9c:06:a8:54:ea:7b:4a:30:b4:fb:65:32:
                    ab:41:a3:6f:d5:7b:ac:cb:04:f5:17:44:1a:01:54:
                    d0:3c:12:78:3f:ea:f5:d1:8e:c5:ab:7a:d3:ec:2d:
                    67:2e:31:6b:fa:92:8a:dd:f9:58:64:04:56:cc:92:
                    13:6f:fc:cc:20:a3:74:f8:5d:c6:4b:05:46:ca:4e:
                    b0:61:80:0b:8a:3f:d7:73:a0:06:f4:9b:e9:3d:05:
                    36:27:86:0d:41:70:18:16:77:d5:0a:ae:05:7b:34:
                    13:98:e7:ba:a0:81:c4:0b:c0:96:aa:41:30:b3:1d:
                    eb:55:43:05:da:8f:0a:4c:ae:80:39:fb:51:8f:c7:
                    c5:70:6a:9a:57:88:d0:f6:59:c9:3a:a1:fe:99:06:
                    85:34:47:dc:3e:7f:dd:23:62:7a:bf:30:e7:a8:8f:
                    a0:97:8c:f5:44:8b:9a:5e:0e:a8:b4:56:0e:fb:1f:
                    fd:66:b1:a5:b1:76:d0:77:0f:c6:26:7b:df:c2:ba:
                    00:a2:14:9d:a5:6b:87:e3:e7:4b:92:6f:f9:b5:60:
                    80:a2:07:62:9d:f9:29:a9:94:16:e4:34:76:5b:04:
                    aa:cb:99:f1:69:a0:40:cc:c9:bb:13:cf:12:fe:9f:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:4C:67:98:A9:13:3A:B0:DD:15:66:DF:85:E5:90:5B:EF:56:97
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/bce0dcc43dc3b7b75b357b3845061d3dda4cd089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:af:0d:63:27:45:44:a8:7e:57:4e:4e:25:4c:9d:04:b8:
         74:1f:50:78:00:4e:32:48:8f:16:1c:ef:b6:6b:8f:78:76:1c:
         91:18:af:b5:c1:b2:d1:21:68:d5:f6:70:cc:9f:65:9b:f7:c9:
         b8:d5:f7:00:35:f9:ee:41:90:1a:07:c9:96:ef:e4:17:0b:15:
         88:8f:b2:61:29:f4:8b:3d:3b:8d:2a:2c:bf:d3:67:da:85:41:
         22:98:2f:c4:f1:7d:ac:72:cb:a0:6d:a9:d5:35:f0:02:9d:93:
         da:80:ad:23:83:96:0c:14:29:1e:83:98:eb:90:9c:88:8d:08:
         55:72:84:b4:0f:8d:01:ec:c2:7a:1d:50:47:5d:93:cf:e5:ba:
         8f:8b:74:9a:11:50:d9:f1:4f:70:e6:c9:d4:22:5c:80:c2:2f:
         ca:9e:5b:7e:a1:f7:af:70:27:e6:07:d9:96:ae:42:af:73:00:
         35:30:d9:08:88:9f:76:c9:48:dc:3e:5a:e4:ad:e8:a1:bc:3c:
         29:6d:2f:30:fb:f6:7c:48:ba:87:3c:48:bb:69:0d:f0:55:8d:
         7c:57:eb:7e:31:f2:9b:99:75:48:ad:e0:7e:e4:22:f6:0f:28:
         ff:c4:06:fa:fc:6f:d1:2d:2a:2e:25:bb:f9:63:fd:e4:1b:57:
         33:21:bc:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIurHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjMwNjE5
MTU0NTIxWhcNMjUwNjIwMTU0NTIxWjAzMTEwLwYDVQQDEyhiY2UwZGNjNDNkYzNi
N2I3NWIzNTdiMzg0NTA2MWQzZGRhNGNkMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArZQsiQ79QgwcCOagss51uKacBqhU6ntKMLT7ZTKrQaNv1Xus
ywT1F0QaAVTQPBJ4P+r10Y7Fq3rT7C1nLjFr+pKK3flYZARWzJITb/zMIKN0+F3G
SwVGyk6wYYALij/Xc6AG9JvpPQU2J4YNQXAYFnfVCq4FezQTmOe6oIHEC8CWqkEw
sx3rVUMF2o8KTK6AOftRj8fFcGqaV4jQ9lnJOqH+mQaFNEfcPn/dI2J6vzDnqI+g
l4z1RIuaXg6otFYO+x/9ZrGlsXbQdw/GJnvfwroAohSdpWuH4+dLkm/5tWCAogdi
nfkpqZQW5DR2WwSqy5nxaaBAzMm7E88S/p/NeQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNl4TGeYqRM6sN0VZt+F5ZBb71aXMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjL2JjZTBkY2M0M2RjM2I3Yjc1YjM1N2IzODQ1MDYxZDNkZGE0Y2QwODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEBL4PgDANBAIAAjAHAwUAKAAAaDANBgkqhkiG9w0BAQsFAAOC
AQEAL6GvDWMnRUSofldOTiVMnQS4dB9QeABOMkiPFhzvtmuPeHYckRivtcGy0SFo
1fZwzJ9lm/fJuNX3ADX57kGQGgfJlu/kFwsViI+yYSn0iz07jSosv9Nn2oVBIpgv
xPF9rHLLoG2p1TXwAp2T2oCtI4OWDBQpHoOY65CciI0IVXKEtA+NAezCeh1QR12T
z+W6j4t0mhFQ2fFPcObJ1CJcgMIvyp5bfqH3r3An5gfZlq5Cr3MANTDZCIifdslI
3D5a5K3oobw8KW0vMPv2fEi6hzxIu2kN8FWNfFfrfjHym5l1SK3gfuQi9g8o/8QG
+vxv0S0qLiW7+WP95BtXMyG8sg==
-----END CERTIFICATE-----