Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/4cafef52cd4c2b1b243c3ea37d9576e5c35a6974.roa
File:                     4cafef52cd4c2b1b243c3ea37d9576e5c35a6974.roa (raw, json)
Hash identifier:          yjLAYBZkn1h8r52Nm2Qs/XXBUUgYHW0Jb6Xb9TQL/aE=
Subject key identifier:   8B:13:43:99:38:68:15:08:DD:0F:2E:A1:FC:B9:75:C7:15:5D:E3:01
Certificate issuer:       /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial:       23FAE3
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/4cafef52cd4c2b1b243c3ea37d9576e5c35a6974.roa
Signing time:             Tue 17 Oct 2023 20:19:34 +0000
ROA not before:           Mon 16 Oct 2023 20:19:33 +0000
ROA not after:            Fri 17 Oct 2025 20:19:33 +0000
asID:                     264668
IP address blocks:        160.20.164.0/22 maxlen: 24
                          2803:59c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357987 (0x23fae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Validity
            Not Before: Oct 16 20:19:33 2023 GMT
            Not After : Oct 17 20:19:33 2025 GMT
        Subject: CN=4cafef52cd4c2b1b243c3ea37d9576e5c35a6974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:38:eb:56:55:78:94:2e:46:83:8a:22:a0:
                    fb:f6:76:02:da:52:41:4b:32:df:24:9e:79:c2:36:
                    29:a4:78:c7:1d:42:9a:21:4f:59:65:93:b8:f5:59:
                    57:82:02:04:04:f4:69:23:00:dc:af:b9:a1:13:40:
                    cd:2f:05:ea:87:20:64:ba:4b:06:11:42:84:4d:af:
                    df:40:7c:bc:d9:ed:ca:50:b8:97:93:f7:f6:4b:cc:
                    9f:31:24:dc:51:33:53:04:60:02:6f:44:4b:d5:fb:
                    d3:10:8b:cb:20:ed:ed:10:99:0d:b7:95:1c:1f:50:
                    4d:81:aa:f6:37:0d:4f:06:b6:80:e7:86:42:e1:3d:
                    da:ca:8f:69:b1:ca:81:16:06:c5:50:49:ba:48:da:
                    a1:de:a5:da:c4:5a:db:46:ca:c3:20:e2:d2:4b:a9:
                    9d:dc:ca:94:1b:a5:66:d7:f0:fd:f4:7e:e8:35:69:
                    af:4b:75:5d:60:35:6a:7e:7b:f4:c0:0d:1b:b7:6e:
                    26:43:a9:71:d6:0d:00:56:06:d8:8a:ba:34:c5:1e:
                    cc:dd:d7:96:15:c3:6e:ba:0e:b1:ab:ac:90:7a:56:
                    10:3b:3a:0e:21:09:9b:3c:85:1a:2e:ac:cc:c8:19:
                    19:8b:d4:3e:d9:a7:cb:29:83:19:57:7c:f2:73:14:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:43:99:38:68:15:08:DD:0F:2E:A1:FC:B9:75:C7:15:5D:E3:01
            X509v3 Authority Key Identifier:
                keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/4cafef52cd4c2b1b243c3ea37d9576e5c35a6974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22
                IPv6:
                  2803:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:64:e3:c4:d4:67:0e:54:67:75:bd:27:11:23:57:d3:ea:84:
         63:a8:7b:96:be:f5:c9:10:dd:af:03:61:72:7c:d7:74:cc:c6:
         b3:42:b5:b6:f8:1d:28:30:cd:59:cd:18:19:a6:29:d3:67:fd:
         32:2e:b3:b3:8d:aa:28:33:31:52:11:9b:58:4f:03:d4:27:b9:
         5f:b9:b8:58:72:a0:24:d7:18:40:3f:90:1b:2f:89:65:a9:4b:
         c6:71:f6:8f:4e:68:b6:da:36:bd:7a:78:36:68:e7:2b:53:bf:
         b6:bf:97:0e:d1:7e:4e:76:f9:dd:95:d7:37:fc:df:f1:b4:0f:
         b8:a6:44:6f:05:ee:bc:4a:9e:27:d6:ae:53:70:6c:64:15:e5:
         42:25:e7:bb:53:c6:e4:79:78:ee:4d:18:d5:68:21:d4:f6:3d:
         47:2e:9e:e4:15:25:e9:09:20:7c:32:53:e0:41:eb:04:ad:97:
         7d:68:12:53:a4:06:a0:f7:a4:ce:3e:9c:4f:82:03:1b:84:51:
         be:df:a6:dc:3a:52:b4:79:fd:fe:b5:33:13:ea:78:11:79:77:
         33:09:30:37:4b:a8:a3:84:5e:c8:e9:e9:9b:1c:3d:3a:d0:cf:
         8b:11:d5:e8:9c:e8:8e:24:e1:f6:37:20:5b:3b:98:4b:67:0d:
         a1:a4:98:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDI/rjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
ZDYzNDgyZjZmN2NkYTNmZDBjNGIyNDI3Y2NjNmNkNzAyNTRhZGIwHhcNMjMxMDE2
MjAxOTMzWhcNMjUxMDE3MjAxOTMzWjAzMTEwLwYDVQQDEyg0Y2FmZWY1MmNkNGMy
YjFiMjQzYzNlYTM3ZDk1NzZlNWMzNWE2OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgZ0461ZVeJQuRoOKIqD79nYC2lJBSzLfJJ55wjYppHjHHUKa
IU9ZZZO49VlXggIEBPRpIwDcr7mhE0DNLwXqhyBkuksGEUKETa/fQHy82e3KULiX
k/f2S8yfMSTcUTNTBGACb0RL1fvTEIvLIO3tEJkNt5UcH1BNgar2Nw1PBraA54ZC
4T3ayo9pscqBFgbFUEm6SNqh3qXaxFrbRsrDIOLSS6md3MqUG6Vm1/D99H7oNWmv
S3VdYDVqfnv0wA0bt24mQ6lx1g0AVgbYiro0xR7M3deWFcNuug6xq6yQelYQOzoO
IQmbPIUaLqzMyBkZi9Q+2afLKYMZV3zycxTNwQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIsTQ5k4aBUI3Q8uofy5dccVXeMBMB8GA1UdIwQYMBaAFIw/L8VgqwGD2C+O
+ZQiueCFZ0XdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NkNjM0
ODJmNmY3Y2RhM2ZkMGM0YjI0MjdjY2M2Y2Q3MDI1NGFkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIxZGQ4NzQtZjI5ZC00YjA2LWEyMzItZGM5ZTVi
NmJlNGI3LzRjYWZlZjUyY2Q0YzJiMWIyNDNjM2VhMzdkOTU3NmU1YzM1YTY5NzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjFkZDg3NC1mMjlkLTRiMDYtYTIzMi1kYzll
NWI2YmU0YjcvN2NkNjM0ODJmNmY3Y2RhM2ZkMGM0YjI0MjdjY2M2Y2Q3MDI1NGFk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqAUpDANBAIAAjAHAwUAKANZwDANBgkqhkiG9w0BAQsFAAOC
AQEAAmTjxNRnDlRndb0nESNX0+qEY6h7lr71yRDdrwNhcnzXdMzGs0K1tvgdKDDN
Wc0YGaYp02f9Mi6zs42qKDMxUhGbWE8D1Ce5X7m4WHKgJNcYQD+QGy+JZalLxnH2
j05otto2vXp4NmjnK1O/tr+XDtF+Tnb53ZXXN/zf8bQPuKZEbwXuvEqeJ9auU3Bs
ZBXlQiXnu1PG5Hl47k0Y1Wgh1PY9Ry6e5BUl6QkgfDJT4EHrBK2XfWgSU6QGoPek
zj6cT4IDG4RRvt+m3DpStHn9/rUzE+p4EXl3MwkwN0uoo4ReyOnpmxw9OtDPixHV
6JzojiTh9jcgWzuYS2cNoaSYBw==
-----END CERTIFICATE-----