Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/6a455c88418a02685212c5feee493d7e520d01d6.roa
File:                     6a455c88418a02685212c5feee493d7e520d01d6.roa (raw, json)
Hash identifier:          cf7XmibAkoFg4hERQH1irZNKaG17aRgkcfOC0uICG0k=
Subject key identifier:   DB:07:69:C7:8C:30:CF:86:DA:70:E7:81:AA:88:A0:BA:17:EB:76:0E
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       23B538
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/6a455c88418a02685212c5feee493d7e520d01d6.roa
Signing time:             Mon 25 Sep 2023 15:28:14 +0000
ROA not before:           Sun 24 Sep 2023 15:28:11 +0000
ROA not after:            Thu 25 Sep 2025 15:28:11 +0000
asID:                     27686
IP address blocks:        150.186.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340152 (0x23b538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Sep 24 15:28:11 2023 GMT
            Not After : Sep 25 15:28:11 2025 GMT
        Subject: CN=6a455c88418a02685212c5feee493d7e520d01d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:42:d0:f7:85:01:7e:50:83:8a:06:15:b9:
                    9e:fa:95:6f:2a:ab:d5:10:f3:05:91:da:91:21:1f:
                    9c:0e:08:b8:01:50:cd:7c:11:38:cf:a4:2b:5a:db:
                    ae:8d:92:fe:54:84:8f:70:d9:d4:47:34:d5:d6:3b:
                    ca:81:df:51:8b:ab:d8:f2:f6:f3:5f:54:ac:41:c8:
                    8c:e6:e3:30:80:18:95:86:80:14:1d:f3:fa:ec:d2:
                    db:d0:77:b8:d5:b0:9b:ff:8a:cd:bb:29:bf:49:da:
                    8e:9c:fd:c5:ef:2b:35:dd:b8:0d:3a:61:32:5f:6e:
                    0f:58:48:df:b5:66:05:a9:ec:d9:e0:a8:5b:45:3e:
                    5b:94:4b:72:77:ff:17:6d:97:d1:25:b3:08:c5:7a:
                    ba:27:ab:83:b9:95:67:10:fd:38:30:47:1d:aa:84:
                    a3:08:21:f7:e2:b0:44:07:d1:21:7b:f2:21:3a:0a:
                    6a:2c:d3:15:43:be:81:a0:0b:ee:89:67:58:d2:84:
                    15:55:7e:78:c4:83:8c:3a:65:48:90:a6:f7:a3:17:
                    a2:7f:7d:79:bc:3c:90:08:84:ad:c2:8b:a9:a5:a1:
                    d5:4e:98:7a:47:fc:0d:65:44:ae:d1:15:f3:88:1e:
                    9d:a6:50:88:9e:f8:b4:f4:8c:31:07:5f:94:dd:6d:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:07:69:C7:8C:30:CF:86:DA:70:E7:81:AA:88:A0:BA:17:EB:76:0E
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/6a455c88418a02685212c5feee493d7e520d01d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:ec:04:53:3d:df:98:1c:51:7c:14:fb:49:de:82:a5:0e:
         1d:08:2d:be:34:29:9e:b9:62:31:56:34:60:b7:0f:ab:92:97:
         4f:3c:01:fa:1f:90:14:84:19:6a:4e:5d:b7:c7:2a:e7:68:c1:
         55:6b:3f:bd:6f:35:52:48:de:bf:50:58:d4:ec:ab:1a:16:b3:
         42:93:55:da:69:f2:33:09:3d:45:7f:06:02:86:90:35:05:9b:
         96:83:7c:fa:29:e0:40:6c:9a:f5:62:43:28:97:58:5b:01:f9:
         0b:db:9d:c4:86:8c:0d:60:e6:2b:d3:2a:04:be:64:4a:94:8d:
         f1:bf:79:81:9e:a5:6f:2e:2b:ab:b7:10:75:01:6a:11:4c:46:
         00:c0:cf:d5:71:8b:82:33:08:61:6e:ca:08:21:b5:50:52:25:
         09:63:10:df:03:36:e9:68:16:66:a4:2b:af:08:2f:1d:30:d6:
         51:55:d8:4f:c1:35:e6:f2:75:cf:f2:81:27:3b:ca:6f:fc:1b:
         60:1d:cb:cb:9a:22:3a:d0:13:62:6b:68:f8:52:54:a8:91:b6:
         fb:6a:41:e0:96:98:52:ef:12:1b:50:8f:53:aa:4f:4f:ed:4d:
         73:f3:30:80:10:8b:b5:90:5e:17:d0:86:1b:96:8c:04:77:77:
         cf:21:11:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI7U4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
M2JlZGUxNTllZmRmM2ZkODVlNmI0OWJkZWQ2Yzc5ZGM1MjUzMDcwHhcNMjMwOTI0
MTUyODExWhcNMjUwOTI1MTUyODExWjAzMTEwLwYDVQQDEyg2YTQ1NWM4ODQxOGEw
MjY4NTIxMmM1ZmVlZTQ5M2Q3ZTUyMGQwMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkZ5C0PeFAX5Qg4oGFbme+pVvKqvVEPMFkdqRIR+cDgi4AVDN
fBE4z6QrWtuujZL+VISPcNnURzTV1jvKgd9Ri6vY8vbzX1SsQciM5uMwgBiVhoAU
HfP67NLb0He41bCb/4rNuym/SdqOnP3F7ys13bgNOmEyX24PWEjftWYFqezZ4Khb
RT5blEtyd/8XbZfRJbMIxXq6J6uDuZVnEP04MEcdqoSjCCH34rBEB9Ehe/IhOgpq
LNMVQ76BoAvuiWdY0oQVVX54xIOMOmVIkKb3oxeif315vDyQCIStwouppaHVTph6
R/wNZUSu0RXziB6dplCInvi09IwxB1+U3W2rSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNsHaceMMM+G2nDngaqIoLoX63YOMB8GA1UdIwQYMBaAFHmsn71HO0C8BtDw
US5CTe1rKogpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAzYmVk
ZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWI2YmMxNTAtZGVmYi00MTlhLWFhYTEtYTVhMzU5
NTQyYTg1LzZhNDU1Yzg4NDE4YTAyNjg1MjEyYzVmZWVlNDkzZDdlNTIwZDAxZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjZiYzE1MC1kZWZiLTQxOWEtYWFhMS1hNWEz
NTk1NDJhODUvNzAzYmVkZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBJa6cDANBgkqhkiG9w0BAQsFAAOCAQEAGqfsBFM935gcUXwU
+0negqUOHQgtvjQpnrliMVY0YLcPq5KXTzwB+h+QFIQZak5dt8cq52jBVWs/vW81
Ukjev1BY1OyrGhazQpNV2mnyMwk9RX8GAoaQNQWbloN8+ingQGya9WJDKJdYWwH5
C9udxIaMDWDmK9MqBL5kSpSN8b95gZ6lby4rq7cQdQFqEUxGAMDP1XGLgjMIYW7K
CCG1UFIlCWMQ3wM26WgWZqQrrwgvHTDWUVXYT8E15vJ1z/KBJzvKb/wbYB3Ly5oi
OtATYmto+FJUqJG2+2pB4JaYUu8SG1CPU6pPT+1Nc/MwgBCLtZBeF9CGG5aMBHd3
zyEROA==
-----END CERTIFICATE-----