Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/c713840761011e4f042d48b657925d3b631a92c7.roa
File:                     c713840761011e4f042d48b657925d3b631a92c7.roa (raw, json)
Hash identifier:          GTuL9dbke+rM5bMfX1pii7HgI/nowdCNSojh+q8FvrQ=
Subject key identifier:   A9:24:12:8C:6D:11:E0:A3:E0:7E:EC:4A:10:72:15:15:C4:F0:DE:E3
Certificate issuer:       /CN=62a782cb41463cc649a6c52c762bea430cdc06b2
Certificate serial:       211572
Authority key identifier: B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/c713840761011e4f042d48b657925d3b631a92c7.roa
Signing time:             Fri 17 Nov 2023 07:30:01 +0000
ROA not before:           Fri 17 Nov 2023 07:30:01 +0000
ROA not after:            Sun 16 Nov 2025 07:30:01 +0000
asID:                     28036
IP address blocks:        190.143.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168178 (0x211572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Validity
            Not Before: Nov 17 07:30:01 2023 GMT
            Not After : Nov 16 07:30:01 2025 GMT
        Subject: CN=c713840761011e4f042d48b657925d3b631a92c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:f7:af:02:56:f5:f1:78:9a:a8:5e:64:02:
                    ba:57:5d:90:53:04:51:04:00:8b:20:ae:f2:91:98:
                    4f:e4:c1:a5:f7:ce:a3:49:ad:c9:3b:5b:02:d0:c0:
                    ef:8e:00:7a:ee:43:cd:47:96:5e:a9:4e:d3:91:62:
                    f6:e9:19:7d:57:fa:08:4b:aa:03:87:bb:48:45:8c:
                    4e:8b:41:28:39:31:2d:2a:f3:8e:e4:c2:a8:58:2d:
                    f4:de:6f:75:9c:8c:86:fe:51:52:24:09:3d:c6:3c:
                    63:57:24:c4:ed:6d:25:e8:a7:87:cd:43:92:e5:0d:
                    2c:79:8e:a4:6f:2f:87:f2:9f:09:63:b5:3e:ff:fd:
                    c6:b6:6a:db:5f:d4:47:08:da:fc:b5:e8:12:70:93:
                    1c:c3:4d:4d:28:5b:a8:21:4a:d2:1e:b8:0c:86:b9:
                    c5:37:07:70:ca:f9:f0:4a:fa:b8:35:35:a2:90:9c:
                    a1:46:fd:29:0c:20:ac:2a:59:ca:9f:b8:4d:e9:d8:
                    33:c1:1f:48:4a:36:4d:85:63:76:7f:61:6c:86:bd:
                    bd:20:3d:ab:a1:1a:2b:9d:2e:e3:e9:78:01:d0:39:
                    a2:96:2f:0b:c2:90:8b:c6:71:35:cd:92:c3:71:a6:
                    cb:96:dd:fe:da:4c:7c:78:fc:8d:b7:73:11:c3:e5:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:12:8C:6D:11:E0:A3:E0:7E:EC:4A:10:72:15:15:C4:F0:DE:E3
            X509v3 Authority Key Identifier:
                keyid:B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/c713840761011e4f042d48b657925d3b631a92c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:db:b4:c3:ab:24:10:72:b7:de:f6:16:a6:29:28:22:f8:
         48:f1:0b:0b:a5:05:cd:13:2b:a0:17:55:9f:16:ce:ff:40:d6:
         2e:81:00:00:5f:47:c3:6b:83:5d:cf:f8:f8:b5:c9:ec:b3:91:
         2f:33:6e:4f:2f:0f:e4:2b:ae:97:c9:30:5a:2f:f8:de:79:33:
         e2:11:78:e0:02:b9:03:de:15:41:41:d7:05:17:43:16:22:ba:
         75:d4:6e:a8:56:ab:fc:05:12:81:ab:a2:29:5f:e8:52:db:22:
         af:46:fd:68:72:69:54:e7:12:0e:88:8e:3f:c6:6c:47:e9:9f:
         18:56:50:41:f7:18:46:ff:38:6d:f3:66:95:28:0a:3d:41:e3:
         d3:3f:f1:f3:33:58:75:c2:d6:0d:5b:4c:69:e4:83:e3:ed:15:
         f6:a8:b9:da:23:fd:95:e0:64:d2:4b:62:f1:d4:59:cf:86:f7:
         79:d8:d9:a6:96:9c:71:19:ff:86:84:39:ab:18:30:07:7d:da:
         12:79:2b:e6:26:81:22:16:6c:b7:d6:7e:66:f3:2c:68:ed:14:
         73:91:c7:f7:0a:1c:67:33:e7:28:52:dd:be:89:4b:74:ac:f7:
         5a:3a:eb:59:f9:af:52:b5:04:c9:93:d1:90:fe:e5:d0:03:71:
         d9:96:37:94
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIRVyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YTc4MmNiNDE0NjNjYzY0OWE2YzUyYzc2MmJlYTQzMGNkYzA2YjIwHhcNMjMxMTE3
MDczMDAxWhcNMjUxMTE2MDczMDAxWjAzMTEwLwYDVQQDEyhjNzEzODQwNzYxMDEx
ZTRmMDQyZDQ4YjY1NzkyNWQzYjYzMWE5MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApHX3rwJW9fF4mqheZAK6V12QUwRRBACLIK7ykZhP5MGl986j
Sa3JO1sC0MDvjgB67kPNR5ZeqU7TkWL26Rl9V/oIS6oDh7tIRYxOi0EoOTEtKvOO
5MKoWC303m91nIyG/lFSJAk9xjxjVyTE7W0l6KeHzUOS5Q0seY6kby+H8p8JY7U+
//3GtmrbX9RHCNr8tegScJMcw01NKFuoIUrSHrgMhrnFNwdwyvnwSvq4NTWikJyh
Rv0pDCCsKlnKn7hN6dgzwR9ISjZNhWN2f2Fshr29ID2roRornS7j6XgB0Dmili8L
wpCLxnE1zZLDcabLlt3+2kx8ePyNt3MRw+XorwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKkkEoxtEeCj4H7sShByFRXE8N7jMB8GA1UdIwQYMBaAFLPWbUFJF3y0uJgP
eFcGu+EE/bbhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJhNzgy
Y2I0MTQ2M2NjNjQ5YTZjNTJjNzYyYmVhNDMwY2RjMDZiMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjE2YjZiNjgtY2M4Mi00OTFjLWJiN2UtZDE0Nzkz
ZWFjM2NiL2M3MTM4NDA3NjEwMTFlNGYwNDJkNDhiNjU3OTI1ZDNiNjMxYTkyYzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMTZiNmI2OC1jYzgyLTQ5MWMtYmI3ZS1kMTQ3
OTNlYWMzY2IvNjJhNzgyY2I0MTQ2M2NjNjQ5YTZjNTJjNzYyYmVhNDMwY2RjMDZi
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL6P8DANBgkqhkiG9w0BAQsFAAOCAQEAWM/btMOrJBByt972
FqYpKCL4SPELC6UFzRMroBdVnxbO/0DWLoEAAF9Hw2uDXc/4+LXJ7LORLzNuTy8P
5Cuul8kwWi/43nkz4hF44AK5A94VQUHXBRdDFiK6ddRuqFar/AUSgauiKV/oUtsi
r0b9aHJpVOcSDoiOP8ZsR+mfGFZQQfcYRv84bfNmlSgKPUHj0z/x8zNYdcLWDVtM
aeSD4+0V9qi52iP9leBk0kti8dRZz4b3edjZppaccRn/hoQ5qxgwB33aEnkr5iaB
IhZst9Z+ZvMsaO0Uc5HH9wocZzPnKFLdvolLdKz3WjrrWfmvUrUEyZPRkP7l0ANx
2ZY3lA==
-----END CERTIFICATE-----