Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/97a29b1e8920947701c37565fccce55fa847c387.roa
File:                     97a29b1e8920947701c37565fccce55fa847c387.roa (raw, json)
Hash identifier:          SL+UZJoDJWYrRdtyVqYhg/t4f0NRIeaYW0fWy9p/KVw=
Subject key identifier:   DF:A2:10:39:52:71:92:B1:57:0E:AB:32:11:EB:71:32:AA:C7:79:F1
Certificate issuer:       /CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
Certificate serial:       1260F6
Authority key identifier: E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/97a29b1e8920947701c37565fccce55fa847c387.roa
Signing time:             Wed 03 May 2023 01:38:13 +0000
ROA not before:           Tue 02 May 2023 01:38:13 +0000
ROA not after:            Sat 03 May 2025 01:38:13 +0000
asID:                     271779
IP address blocks:        200.106.184.0/22 maxlen: 24
                          2803:6fe0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204470 (0x1260f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
        Validity
            Not Before: May  2 01:38:13 2023 GMT
            Not After : May  3 01:38:13 2025 GMT
        Subject: CN=97a29b1e8920947701c37565fccce55fa847c387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:33:d8:d8:e5:1b:4d:2a:b2:ed:f8:5d:e3:
                    dd:46:67:ba:66:65:8a:82:24:b2:e3:e2:46:de:14:
                    9e:3f:d7:f0:c3:02:c1:f6:f9:0f:df:6d:5d:10:e7:
                    c3:fb:93:4d:dd:a2:70:17:eb:cd:7b:ea:91:db:54:
                    d5:63:24:fd:6d:c4:7e:54:10:02:5a:58:13:95:36:
                    38:38:64:dc:a0:c9:7a:e3:7c:d4:23:3a:7d:03:49:
                    f7:ed:e2:f6:ee:ff:0a:d2:52:76:e7:37:d2:ea:d7:
                    05:15:f5:3c:c7:40:28:a1:94:ab:00:a0:0f:a3:c5:
                    b0:fd:f5:9a:ef:98:14:18:fe:37:75:10:42:ca:f2:
                    ef:67:a5:cc:98:4a:34:4c:ac:eb:44:16:62:83:90:
                    e5:33:6d:76:f6:a1:30:d8:9a:1a:fa:7e:21:09:1e:
                    db:ae:78:96:19:ae:6b:1a:1e:cf:99:61:ea:c8:78:
                    53:e5:32:91:c7:43:9d:b8:ed:70:85:7e:11:58:65:
                    93:64:0f:ca:9f:46:c3:5e:e7:6e:72:a2:38:da:01:
                    d1:f1:c0:b9:1e:29:a3:9a:7d:92:9a:a9:99:61:9d:
                    2a:3e:85:fa:e3:26:3c:72:5e:46:a3:67:ca:df:24:
                    2b:d1:49:bd:5f:17:b7:7c:74:fc:1a:c5:a0:18:c3:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A2:10:39:52:71:92:B1:57:0E:AB:32:11:EB:71:32:AA:C7:79:F1
            X509v3 Authority Key Identifier:
                keyid:E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/97a29b1e8920947701c37565fccce55fa847c387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.184.0/22
                IPv6:
                  2803:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:05:85:6c:6c:b5:e6:c0:29:82:39:8e:58:f7:81:27:4e:
         e0:c0:19:76:ad:0d:4b:50:b3:0c:f1:7f:bb:ad:24:5b:33:e6:
         93:46:5b:36:e4:95:0e:ff:54:b5:3e:7e:33:63:b8:d7:38:4a:
         e5:23:9c:36:63:d5:af:f4:07:55:9f:e7:5d:30:1a:28:05:25:
         15:f6:a1:cc:e3:4e:d4:70:8f:d8:b6:ee:b8:65:62:5e:78:df:
         3d:a7:64:e0:90:f8:b3:a1:d4:e7:c6:ac:a1:e8:de:8f:0f:e5:
         6e:3b:a8:f0:bb:2b:11:a6:01:04:73:2f:33:5f:66:8e:8f:16:
         32:c1:53:eb:02:1b:55:bc:8b:6a:5c:97:b2:d1:c6:93:b1:9f:
         67:40:2c:c5:ca:8d:41:c1:de:ec:e1:5b:3d:c8:d8:c0:0d:d1:
         36:22:8f:e2:be:35:37:b9:35:c1:27:a0:dc:32:6e:ae:f8:36:
         3e:67:15:5f:6e:4d:d9:ff:87:27:b3:55:06:e0:a4:0a:44:37:
         d5:7b:4c:be:e0:e7:ca:f4:06:b6:19:7c:81:c2:49:7b:b7:0d:
         4d:31:02:d0:ff:0a:f8:56:b6:aa:41:3b:b7:e0:b5:1c:f9:78:
         ac:67:6b:ee:8e:67:38:c5:94:62:8f:6b:f9:47:41:a8:7a:35:
         2c:b2:b5:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEmD2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
Njk4YWQ2M2QyYjM2MDVjMTJlODdhYzA3YzBiZDhiNzM1YmM5Y2UwHhcNMjMwNTAy
MDEzODEzWhcNMjUwNTAzMDEzODEzWjAzMTEwLwYDVQQDEyg5N2EyOWIxZTg5MjA5
NDc3MDFjMzc1NjVmY2NjZTU1ZmE4NDdjMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmmQz2NjlG00qsu34XePdRme6ZmWKgiSy4+JG3hSeP9fwwwLB
9vkP321dEOfD+5NN3aJwF+vNe+qR21TVYyT9bcR+VBACWlgTlTY4OGTcoMl643zU
Izp9A0n37eL27v8K0lJ25zfS6tcFFfU8x0AooZSrAKAPo8Ww/fWa75gUGP43dRBC
yvLvZ6XMmEo0TKzrRBZig5DlM2129qEw2Joa+n4hCR7brniWGa5rGh7PmWHqyHhT
5TKRx0OduO1whX4RWGWTZA/Kn0bDXuducqI42gHR8cC5Himjmn2SmqmZYZ0qPoX6
4yY8cl5Go2fK3yQr0Um9Xxe3fHT8GsWgGMMvUQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFN+iEDlScZKxVw6rMhHrcTKqx3nxMB8GA1UdIwQYMBaAFOFWG9YFI+suGPPk
LlXgDgMMeQ8zMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE2OThh
ZDYzZDJiMzYwNWMxMmU4N2FjMDdjMGJkOGI3MzViYzljZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQxZjg0MjEtZDMxOS00ZjgwLTg5NzQtYjE3ZDgw
NTk1M2MyLzk3YTI5YjFlODkyMDk0NzcwMWMzNzU2NWZjY2NlNTVmYTg0N2MzODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDFmODQyMS1kMzE5LTRmODAtODk3NC1iMTdk
ODA1OTUzYzIvYjE2OThhZDYzZDJiMzYwNWMxMmU4N2FjMDdjMGJkOGI3MzViYzlj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAshquDANBAIAAjAHAwUAKANv4DANBgkqhkiG9w0BAQsFAAOC
AQEAeA8FhWxstebAKYI5jlj3gSdO4MAZdq0NS1CzDPF/u60kWzPmk0ZbNuSVDv9U
tT5+M2O41zhK5SOcNmPVr/QHVZ/nXTAaKAUlFfahzONO1HCP2LbuuGViXnjfPadk
4JD4s6HU58asoejejw/lbjuo8LsrEaYBBHMvM19mjo8WMsFT6wIbVbyLalyXstHG
k7GfZ0AsxcqNQcHe7OFbPcjYwA3RNiKP4r41N7k1wSeg3DJurvg2PmcVX25N2f+H
J7NVBuCkCkQ31XtMvuDnyvQGthl8gcJJe7cNTTEC0P8K+Fa2qkE7t+C1HPl4rGdr
7o5nOMWUYo9r+UdBqHo1LLK1ug==
-----END CERTIFICATE-----