Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/c4ec3cc04192dad5fda2e481ea8cdaffe8ffb393.roa
File:                     c4ec3cc04192dad5fda2e481ea8cdaffe8ffb393.roa (raw, json)
Hash identifier:          BC/TTwdPabr/Kr152X54ExiWIRKmsfuLIM68VdFCa/8=
Subject key identifier:   F5:51:E6:CC:0B:37:BF:BC:A6:FD:3F:60:92:0E:24:7C:58:DE:88:66
Certificate issuer:       /CN=acd0b51210b784be64102a9286473d3c176ced3a
Certificate serial:       E840
Authority key identifier: 35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/c4ec3cc04192dad5fda2e481ea8cdaffe8ffb393.roa
Signing time:             Sun 14 May 2023 15:31:53 +0000
ROA not before:           Sat 13 May 2023 15:31:53 +0000
ROA not after:            Wed 14 May 2025 15:31:53 +0000
asID:                     269931
IP address blocks:        200.125.168.0/22 maxlen: 24
                          2803:f2e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59456 (0xe840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd0b51210b784be64102a9286473d3c176ced3a
        Validity
            Not Before: May 13 15:31:53 2023 GMT
            Not After : May 14 15:31:53 2025 GMT
        Subject: CN=c4ec3cc04192dad5fda2e481ea8cdaffe8ffb393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:de:2f:2c:7b:a4:cf:d8:ba:3c:57:7e:6f:
                    86:ca:69:10:60:80:2d:68:22:e7:b5:39:5c:05:6a:
                    3e:dd:d3:a2:5c:3b:2d:2c:e0:04:20:0b:a5:98:90:
                    75:f0:9a:90:a9:af:e2:89:9a:8e:22:86:64:c4:0f:
                    da:3f:3e:fb:1b:0f:57:6f:d9:99:cb:05:2a:08:1b:
                    bc:b6:0b:e8:e8:93:d2:2e:a6:d4:ae:fa:32:d3:4b:
                    87:d0:2d:a2:5b:5f:dc:7c:a2:c3:d3:87:6b:40:19:
                    04:c1:01:67:a8:2b:9c:0b:49:85:f9:5c:20:ca:83:
                    97:b8:19:2c:55:89:41:f3:03:46:ed:b0:ef:ee:f6:
                    d0:aa:0c:1a:1f:b5:09:54:88:01:7d:0b:0a:48:63:
                    ce:77:08:21:80:7f:7e:33:1d:ac:be:dd:7e:26:7a:
                    31:6b:de:74:19:2e:fb:36:e3:38:47:d2:9d:ec:a2:
                    a0:f2:44:88:f5:0a:28:87:32:6b:88:56:bb:ef:08:
                    4a:bf:b0:f2:ab:95:f1:d6:e5:5f:8e:93:1c:9b:c0:
                    81:76:85:45:d8:81:9e:9b:05:1f:e6:24:c6:29:64:
                    9d:21:6d:4a:0a:16:e3:84:99:3a:89:5d:5e:c3:d7:
                    60:42:9d:d8:e6:24:30:e5:13:91:27:45:c2:2d:a9:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:E6:CC:0B:37:BF:BC:A6:FD:3F:60:92:0E:24:7C:58:DE:88:66
            X509v3 Authority Key Identifier:
                keyid:35:6B:6C:7E:E5:7E:0D:4E:91:CD:DD:0B:C5:DF:EB:83:EC:22:D9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd0b51210b784be64102a9286473d3c176ced3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/c4ec3cc04192dad5fda2e481ea8cdaffe8ffb393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d86f860-4040-4985-8548-e2c265c56cbe/acd0b51210b784be64102a9286473d3c176ced3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.168.0/22
                IPv6:
                  2803:f2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:08:21:9b:4d:9a:28:e8:d4:44:bc:1e:bb:ca:47:65:b7:
         33:99:a6:ab:53:e4:0d:2a:be:33:e2:a3:61:be:09:1c:80:8c:
         43:71:c1:4a:a5:16:23:07:a7:e3:25:20:36:84:7b:f6:e0:b4:
         63:26:bf:2a:c7:d3:e7:c0:49:57:75:4c:d6:30:0d:95:69:84:
         50:8a:08:c3:d7:6e:ca:6c:73:b6:e2:65:d7:aa:c8:7b:f8:c4:
         b0:2d:fd:e1:7b:4e:51:de:cd:9a:e6:74:2d:68:af:14:91:ae:
         52:ed:55:b9:72:4e:47:9c:ee:68:78:bd:a1:40:b7:1c:97:c4:
         a0:c9:24:bf:e6:72:a2:2e:2a:3f:ab:cd:5d:0d:44:f8:a8:7c:
         8b:d5:b5:05:49:2e:4f:b9:0f:82:0c:0e:c0:97:3b:94:98:d7:
         dd:3c:d1:03:ec:26:c1:48:a6:d5:ae:60:9a:8d:e9:b8:19:27:
         67:18:cd:d0:a4:02:10:73:b3:5e:64:34:26:2d:3f:8a:0d:5e:
         fb:07:67:db:69:bd:ef:6b:14:6c:86:4b:65:60:e0:73:d3:a8:
         d0:ba:9a:7c:79:6a:06:05:2b:15:f3:07:dd:93:52:a9:f3:fb:
         22:04:38:a7:52:d1:97:6e:75:0b:f6:05:40:7a:8e:99:6a:0f:
         0e:c7:a5:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAOhAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
ZDBiNTEyMTBiNzg0YmU2NDEwMmE5Mjg2NDczZDNjMTc2Y2VkM2EwHhcNMjMwNTEz
MTUzMTUzWhcNMjUwNTE0MTUzMTUzWjAzMTEwLwYDVQQDEyhjNGVjM2NjMDQxOTJk
YWQ1ZmRhMmU0ODFlYThjZGFmZmU4ZmZiMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhd7eLyx7pM/YujxXfm+GymkQYIAtaCLntTlcBWo+3dOiXDst
LOAEIAulmJB18JqQqa/iiZqOIoZkxA/aPz77Gw9Xb9mZywUqCBu8tgvo6JPSLqbU
rvoy00uH0C2iW1/cfKLD04drQBkEwQFnqCucC0mF+VwgyoOXuBksVYlB8wNG7bDv
7vbQqgwaH7UJVIgBfQsKSGPOdwghgH9+Mx2svt1+Jnoxa950GS77NuM4R9Kd7KKg
8kSI9QoohzJriFa77whKv7Dyq5Xx1uVfjpMcm8CBdoVF2IGemwUf5iTGKWSdIW1K
ChbjhJk6iV1ew9dgQp3Y5iQw5RORJ0XCLalI1QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPVR5swLN7+8pv0/YJIOJHxY3ohmMB8GA1UdIwQYMBaAFDVrbH7lfg1Okc3d
C8Xf64PsItmyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNkMGI1
MTIxMGI3ODRiZTY0MTAyYTkyODY0NzNkM2MxNzZjZWQzYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGQ4NmY4NjAtNDA0MC00OTg1LTg1NDgtZTJjMjY1
YzU2Y2JlL2M0ZWMzY2MwNDE5MmRhZDVmZGEyZTQ4MWVhOGNkYWZmZThmZmIzOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZDg2Zjg2MC00MDQwLTQ5ODUtODU0OC1lMmMy
NjVjNTZjYmUvYWNkMGI1MTIxMGI3ODRiZTY0MTAyYTkyODY0NzNkM2MxNzZjZWQz
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAsh9qDANBAIAAjAHAwUAKAPy4DANBgkqhkiG9w0BAQsFAAOC
AQEADRgIIZtNmijo1ES8HrvKR2W3M5mmq1PkDSq+M+KjYb4JHICMQ3HBSqUWIwen
4yUgNoR79uC0Yya/KsfT58BJV3VM1jANlWmEUIoIw9duymxztuJl16rIe/jEsC39
4XtOUd7NmuZ0LWivFJGuUu1VuXJOR5zuaHi9oUC3HJfEoMkkv+Zyoi4qP6vNXQ1E
+Kh8i9W1BUkuT7kPggwOwJc7lJjX3TzRA+wmwUim1a5gmo3puBknZxjN0KQCEHOz
XmQ0Ji0/ig1e+wdn22m972sUbIZLZWDgc9Oo0LqafHlqBgUrFfMH3ZNSqfP7IgQ4
p1LRl251C/YFQHqOmWoPDselGQ==
-----END CERTIFICATE-----