Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/a6cff19890f523e6eb60d820d8bf76991ae8158e.roa
File:                     a6cff19890f523e6eb60d820d8bf76991ae8158e.roa (raw, json)
Hash identifier:          mr4ySqFC2AUmNXeVGivj12xsPt4SKXdwIrD1FCmw1as=
Subject key identifier:   09:92:B8:52:6A:BA:B0:6C:87:BC:B2:83:5C:7E:E5:B3:60:6E:82:CF
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       232067
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/a6cff19890f523e6eb60d820d8bf76991ae8158e.roa
Signing time:             Sat 12 Aug 2023 18:30:10 +0000
ROA not before:           Fri 11 Aug 2023 18:30:10 +0000
ROA not after:            Tue 12 Aug 2025 18:30:10 +0000
asID:                     269918
IP address blocks:        131.72.168.0/23 maxlen: 23
                          131.72.168.0/24 maxlen: 24
                          131.72.169.0/24 maxlen: 24
                          131.72.170.0/23 maxlen: 23
                          131.72.170.0/24 maxlen: 24
                          131.72.171.0/24 maxlen: 24
                          2803:dd80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302055 (0x232067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Aug 11 18:30:10 2023 GMT
            Not After : Aug 12 18:30:10 2025 GMT
        Subject: CN=a6cff19890f523e6eb60d820d8bf76991ae8158e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:0b:3e:da:6e:7f:ef:c5:01:dc:a5:06:ce:
                    c2:d8:2f:04:75:85:e5:6b:b6:86:9c:1d:74:84:1c:
                    4e:95:28:76:6e:18:8b:14:0a:8f:88:92:b3:9b:8b:
                    8c:ae:5e:59:c0:72:74:08:74:8c:48:0b:57:72:dc:
                    a2:13:a2:39:92:f4:1b:49:ff:45:fb:59:e8:f1:ba:
                    90:59:b3:13:a7:ea:e6:bd:be:d9:33:aa:83:3e:cc:
                    e6:50:78:cc:5a:e4:06:e3:31:98:d0:a1:cb:2f:56:
                    ce:25:b0:ac:bf:98:87:77:6d:73:c7:a8:f8:37:8a:
                    44:b0:7b:81:97:d0:e1:97:c8:77:ca:f8:09:ad:c2:
                    25:72:1b:64:11:c5:55:90:77:06:7f:a4:f9:d9:e8:
                    6e:0b:eb:f1:a4:43:5c:f3:c8:b0:6c:c2:24:ca:9f:
                    6f:ea:71:0d:af:28:8f:56:68:4b:08:fe:8f:68:e0:
                    82:5a:ea:1a:c2:b5:a8:c0:6e:82:a5:d3:a2:4b:0a:
                    39:4a:fc:0d:63:1d:c6:6d:de:b9:72:65:6b:5a:63:
                    8f:5a:0c:db:71:73:9c:2f:cf:21:14:06:6d:bd:c0:
                    b3:ba:e7:d4:22:48:d7:6a:b6:e2:ff:b8:60:6a:b5:
                    1b:6f:d5:6e:da:5d:ec:df:39:b0:03:57:39:6e:12:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:92:B8:52:6A:BA:B0:6C:87:BC:B2:83:5C:7E:E5:B3:60:6E:82:CF
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/a6cff19890f523e6eb60d820d8bf76991ae8158e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:88:d8:89:91:a1:1c:40:c0:87:ab:87:6d:9a:cb:5b:94:
         ee:d8:e1:c6:e2:20:54:52:c4:13:e7:07:1c:ba:be:5d:10:a9:
         f7:a0:ba:9d:18:cb:0a:58:7f:e4:12:af:75:bc:c4:1b:2b:f0:
         1f:06:57:aa:cf:c0:de:1b:91:fd:ca:52:b4:32:0f:d8:26:c4:
         0d:2d:28:f8:ff:70:ef:47:ee:f5:7e:79:68:a4:40:49:8d:d2:
         bb:0c:89:95:2c:f6:ad:38:2e:2b:e4:54:1b:b8:0e:1c:64:36:
         23:13:55:1c:d5:0b:c2:bb:2a:20:f2:5e:56:7f:c9:87:f7:e6:
         c5:b1:99:ee:80:16:43:82:a0:b5:bb:c9:52:81:0e:95:af:79:
         92:94:3a:d5:4a:3d:42:7f:f7:b6:37:15:9d:7c:c8:ba:76:a4:
         28:9c:c9:4a:74:5f:32:8c:8e:82:a5:ad:72:66:ca:c4:81:b3:
         11:a5:86:56:0b:34:5b:7b:b8:52:fe:dd:e3:f5:05:23:18:1a:
         40:01:d4:7f:e8:28:94:f1:56:af:f9:85:20:d3:18:ba:60:67:
         56:f8:7d:ab:d0:bb:06:ed:09:1f:15:39:2e:bc:34:6c:fe:24:
         c6:94:9f:a2:f8:3a:82:97:f2:ce:97:15:60:ce:c3:b6:d4:4c:
         e9:92:a6:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIyBnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwODEx
MTgzMDEwWhcNMjUwODEyMTgzMDEwWjAzMTEwLwYDVQQDEyhhNmNmZjE5ODkwZjUy
M2U2ZWI2MGQ4MjBkOGJmNzY5OTFhZTgxNThlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg5ELPtpuf+/FAdylBs7C2C8EdYXla7aGnB10hBxOlSh2bhiL
FAqPiJKzm4uMrl5ZwHJ0CHSMSAtXctyiE6I5kvQbSf9F+1no8bqQWbMTp+rmvb7Z
M6qDPszmUHjMWuQG4zGY0KHLL1bOJbCsv5iHd21zx6j4N4pEsHuBl9Dhl8h3yvgJ
rcIlchtkEcVVkHcGf6T52ehuC+vxpENc88iwbMIkyp9v6nENryiPVmhLCP6PaOCC
WuoawrWowG6CpdOiSwo5SvwNYx3Gbd65cmVrWmOPWgzbcXOcL88hFAZtvcCzuufU
IkjXarbi/7hgarUbb9Vu2l3s3zmwA1c5bhKy/wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAmSuFJqurBsh7yyg1x+5bNgboLPMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlL2E2Y2ZmMTk4OTBmNTIzZTZlYjYwZDgyMGQ4YmY3Njk5MWFlODE1OGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoNIqDANBAIAAjAHAwUAKAPdgDANBgkqhkiG9w0BAQsFAAOC
AQEAhJyI2ImRoRxAwIerh22ay1uU7tjhxuIgVFLEE+cHHLq+XRCp96C6nRjLClh/
5BKvdbzEGyvwHwZXqs/A3huR/cpStDIP2CbEDS0o+P9w70fu9X55aKRASY3SuwyJ
lSz2rTguK+RUG7gOHGQ2IxNVHNULwrsqIPJeVn/Jh/fmxbGZ7oAWQ4KgtbvJUoEO
la95kpQ61Uo9Qn/3tjcVnXzIunakKJzJSnRfMoyOgqWtcmbKxIGzEaWGVgs0W3u4
Uv7d4/UFIxgaQAHUf+golPFWr/mFINMYumBnVvh9q9C7Bu0JHxU5Lrw0bP4kxpSf
ovg6gpfyzpcVYM7DttRM6ZKm1g==
-----END CERTIFICATE-----