Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/5e72f5dab8fd0c5ea98b6d3e4413763301ca9721.roa
File:                     5e72f5dab8fd0c5ea98b6d3e4413763301ca9721.roa (raw, json)
Hash identifier:          BHek5soFc4uT97KPrNPey0zbDwHQGnzZwR7NF+jO/OQ=
Subject key identifier:   35:26:D2:CF:ED:7A:29:9F:EC:7C:4C:90:22:2D:78:D6:CD:A2:31:42
Certificate issuer:       /CN=bf38729659b3ab84a635f8b5534cde56fe622a7b
Certificate serial:       2896D7
Authority key identifier: A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/5e72f5dab8fd0c5ea98b6d3e4413763301ca9721.roa
Signing time:             Fri 12 Apr 2024 13:35:43 +0000
ROA not before:           Fri 12 Apr 2024 13:35:43 +0000
ROA not after:            Sun 12 Apr 2026 13:35:43 +0000
asID:                     14232
IP address blocks:        201.219.64.0/19 maxlen: 24
                          179.51.80.0/20 maxlen: 22
                          201.219.96.0/20 maxlen: 24
                          138.219.4.0/22 maxlen: 22
                          170.78.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660055 (0x2896d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf38729659b3ab84a635f8b5534cde56fe622a7b
        Validity
            Not Before: Apr 12 13:35:43 2024 GMT
            Not After : Apr 12 13:35:43 2026 GMT
        Subject: CN=5e72f5dab8fd0c5ea98b6d3e4413763301ca9721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:8e:5f:cd:96:f5:83:fb:d4:4b:7c:f6:64:
                    a5:13:36:1c:c0:4f:3a:42:4a:ff:09:99:bf:24:69:
                    e1:b7:40:a8:dc:b3:df:fd:35:08:82:c2:37:67:08:
                    c1:85:18:6b:98:62:c0:01:71:9f:63:63:02:e6:10:
                    b5:1d:fb:10:d6:65:24:15:56:e4:d6:51:48:42:21:
                    76:0e:ab:df:08:d9:f2:a2:8b:4c:26:12:7d:ca:4d:
                    e8:70:bf:75:0a:f6:29:6b:0b:ed:0e:0d:07:bf:13:
                    ea:d0:e1:c6:32:0b:fd:18:3d:d0:a4:59:a4:83:c1:
                    3f:96:27:0d:4b:a5:ff:de:67:d0:d2:73:80:2d:91:
                    95:da:8a:e7:ee:8a:6c:df:95:c8:c1:c2:bf:dc:94:
                    9d:02:87:57:0b:dc:e3:0e:cd:68:42:a9:f4:5e:85:
                    51:cc:ac:30:fd:bf:25:bd:74:bf:16:97:11:4d:b8:
                    ac:40:39:90:ba:d2:4c:3f:0e:91:f3:15:7b:9f:2d:
                    68:32:c1:47:13:84:3a:d2:ab:94:6c:bf:f9:cc:9d:
                    13:86:b4:c4:2f:01:9e:a0:16:32:f2:e5:ce:ab:f3:
                    68:c0:45:91:b3:74:e3:a7:8e:23:e2:7a:19:7d:6d:
                    4c:ff:ca:d1:58:79:3e:6b:5b:13:2f:2e:c4:3b:43:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:26:D2:CF:ED:7A:29:9F:EC:7C:4C:90:22:2D:78:D6:CD:A2:31:42
            X509v3 Authority Key Identifier:
                keyid:A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/5e72f5dab8fd0c5ea98b6d3e4413763301ca9721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.4.0/22
                  170.78.200.0/22
                  179.51.80.0/20
                  201.219.64.0-201.219.111.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:40:f1:66:26:62:20:f3:2e:49:3d:e7:e3:04:17:b1:5a:
         aa:9c:9d:02:91:41:1d:cd:0f:60:95:cf:f2:2c:5a:36:70:bc:
         6f:1f:0d:a9:f4:14:4d:7b:d8:fc:31:ae:1e:bc:90:f9:1c:90:
         6a:f1:f7:6a:e9:cb:f2:13:1f:4d:a7:c3:09:c7:1d:d9:ec:89:
         53:e3:bc:f1:c9:9d:50:6d:77:c6:15:ea:2c:56:4e:05:29:e0:
         e9:8b:d2:18:7c:95:df:d3:39:16:5e:54:b1:a7:51:e4:b3:40:
         bb:bb:25:36:28:1a:f9:17:bc:58:eb:96:e1:d7:12:a2:37:38:
         0c:8a:95:0b:2d:45:83:7f:c8:9d:09:69:f9:d7:dc:9b:b4:d8:
         23:17:dc:ff:af:87:98:f3:33:85:48:1a:88:11:27:00:c5:f3:
         88:75:60:2d:0f:4c:fe:20:79:aa:ab:94:75:5f:f6:2a:55:d0:
         a8:cb:50:2d:93:a2:2a:13:c6:b0:7d:cd:9c:3b:77:75:02:f9:
         d7:f9:46:1f:74:3e:4b:26:39:82:3d:97:64:b5:c5:6a:e6:0c:
         e6:a9:0e:aa:ed:45:04:72:1a:91:61:f7:79:ff:dd:f6:b4:00:
         01:3d:07:48:01:79:5c:8e:db:d8:47:c5:6b:b7:79:ce:22:7e:
         e1:d4:1d:20
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDKJbXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
Mzg3Mjk2NTliM2FiODRhNjM1ZjhiNTUzNGNkZTU2ZmU2MjJhN2IwHhcNMjQwNDEy
MTMzNTQzWhcNMjYwNDEyMTMzNTQzWjAzMTEwLwYDVQQDEyg1ZTcyZjVkYWI4ZmQw
YzVlYTk4YjZkM2U0NDEzNzYzMzAxY2E5NzIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwjSOX82W9YP71Et89mSlEzYcwE86Qkr/CZm/JGnht0Co3LPf
/TUIgsI3ZwjBhRhrmGLAAXGfY2MC5hC1HfsQ1mUkFVbk1lFIQiF2DqvfCNnyootM
JhJ9yk3ocL91CvYpawvtDg0HvxPq0OHGMgv9GD3QpFmkg8E/licNS6X/3mfQ0nOA
LZGV2orn7ops35XIwcK/3JSdAodXC9zjDs1oQqn0XoVRzKww/b8lvXS/FpcRTbis
QDmQutJMPw6R8xV7ny1oMsFHE4Q60quUbL/5zJ0ThrTELwGeoBYy8uXOq/NowEWR
s3Tjp44j4noZfW1M/8rRWHk+a1sTLy7EO0PSPwIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFDUm0s/teimf7HxMkCIteNbNojFCMB8GA1UdIwQYMBaAFKVdzxlyi+O4oqkc
ajjrtT6GFgwOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmYzODcy
OTY1OWIzYWI4NGE2MzVmOGI1NTM0Y2RlNTZmZTYyMmE3Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWFjZjU4YzMtZjdmNi00NDM4LTliYzctNDk1MTIx
MzMyNTk0LzVlNzJmNWRhYjhmZDBjNWVhOThiNmQzZTQ0MTM3NjMzMDFjYTk3MjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYWNmNThjMy1mN2Y2LTQ0MzgtOWJjNy00OTUx
MjEzMzI1OTQvYmYzODcyOTY1OWIzYWI4NGE2MzVmOGI1NTM0Y2RlNTZmZTYyMmE3
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIAMEAorbBAMEAqpOyAMEBLMzUDAMAwQGydtAAwQEydtgMA0GCSqG
SIb3DQEBCwUAA4IBAQBcX0DxZiZiIPMuST3n4wQXsVqqnJ0CkUEdzQ9glc/yLFo2
cLxvHw2p9BRNe9j8Ma4evJD5HJBq8fdq6cvyEx9Np8MJxx3Z7IlT47zxyZ1QbXfG
FeosVk4FKeDpi9IYfJXf0zkWXlSxp1Hks0C7uyU2KBr5F7xY65bh1xKiNzgMipUL
LUWDf8idCWn519ybtNgjF9z/r4eY8zOFSBqIEScAxfOIdWAtD0z+IHmqq5R1X/Yq
VdCoy1Atk6IqE8awfc2cO3d1AvnX+UYfdD5LJjmCPZdktcVq5gzmqQ6q7UUEchqR
Yfd5/932tAABPQdIAXlcjtvYR8Vrt3nOIn7h1B0g
-----END CERTIFICATE-----