Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/0877c26e589530a88b037b0e19ed5c2ae3d55fe1.roa
File:                     0877c26e589530a88b037b0e19ed5c2ae3d55fe1.roa (raw, json)
Hash identifier:          YuraPS4Q4eLQ24F/DKjcE+dBJ7shE6wf/lJV4JJklpw=
Subject key identifier:   57:BE:96:4F:3D:85:E3:D1:10:F4:E3:54:73:56:F2:8E:5A:8F:2B:41
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       10CE5C
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/0877c26e589530a88b037b0e19ed5c2ae3d55fe1.roa
Signing time:             Mon 29 May 2023 23:19:00 +0000
ROA not before:           Sun 28 May 2023 23:19:00 +0000
ROA not after:            Thu 29 May 2025 23:19:00 +0000
asID:                     273741
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101404 (0x10ce5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: May 28 23:19:00 2023 GMT
            Not After : May 29 23:19:00 2025 GMT
        Subject: CN=0877c26e589530a88b037b0e19ed5c2ae3d55fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:a5:0e:dd:32:0f:fe:12:75:59:ba:ae:6a:
                    57:3a:70:6c:8c:ee:4c:93:7e:24:20:e0:9e:37:bc:
                    38:44:b7:d0:0e:42:c2:f2:7c:d7:6f:83:f3:9a:28:
                    85:99:00:e2:cc:a3:b6:f6:78:61:8c:c0:fd:dc:48:
                    bb:5b:b1:09:ba:f0:6a:a8:5f:c7:23:5b:ea:a4:d6:
                    bb:1d:99:3e:aa:a3:25:33:22:3c:b4:70:8c:f0:b6:
                    9c:af:a7:f3:8d:fd:6d:d3:ca:76:e9:aa:90:1a:58:
                    f4:b8:58:04:de:6c:b4:92:90:fa:eb:cc:81:14:e1:
                    7a:06:df:94:e0:f0:25:0b:5b:4a:62:cb:4e:8a:07:
                    45:ca:49:9e:34:42:95:33:6e:cb:17:a9:63:72:3d:
                    2d:3a:7c:1d:d4:1e:71:93:50:f9:40:26:ca:70:43:
                    1a:51:08:38:7d:08:82:12:1e:a3:a1:e7:86:f5:46:
                    81:2f:19:0b:e5:55:56:f4:4d:e4:29:00:aa:ec:58:
                    b5:2d:cc:14:d1:ca:d0:67:6a:26:d3:9a:a4:31:13:
                    65:f1:2c:05:b1:93:bb:47:d3:bb:e6:70:01:ac:66:
                    7f:47:39:49:e9:b9:54:03:04:2e:a6:56:9f:17:c3:
                    d4:45:05:93:98:da:77:0a:70:17:90:da:b7:5b:3b:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:96:4F:3D:85:E3:D1:10:F4:E3:54:73:56:F2:8E:5A:8F:2B:41
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/0877c26e589530a88b037b0e19ed5c2ae3d55fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:6e:11:7b:57:c2:fb:ab:82:e5:b7:93:5f:24:bd:07:62:
         11:b2:e9:62:62:fd:06:69:e6:67:b2:0b:47:e5:a1:eb:ab:94:
         a2:13:00:31:4d:c2:aa:30:38:d3:a4:2a:fa:a2:f5:ef:84:2e:
         82:59:4a:ba:4c:b2:c1:91:b2:1a:1a:db:86:0b:b7:67:a2:f9:
         95:12:10:e9:be:a3:08:4f:be:a9:a3:46:40:8f:d0:96:74:b5:
         ef:2a:d2:8f:bd:7e:d0:7d:9f:f5:8a:cd:bd:ff:1c:2a:2d:dd:
         02:11:b4:cf:41:e9:51:2b:a5:be:56:39:b4:f5:eb:bb:eb:e6:
         d6:58:fc:87:78:96:58:4e:c7:dd:28:dc:21:46:b4:1f:8f:1d:
         da:a9:36:43:10:e0:76:fc:9b:0a:4f:a5:83:cd:12:1d:e7:f5:
         4a:2e:85:9d:6b:bf:fe:a3:3f:ec:29:e9:72:6c:4d:98:02:4c:
         90:06:24:af:f2:9b:8e:17:87:2d:5c:cf:81:6a:40:c8:b1:39:
         77:20:66:b1:33:6c:78:dc:0b:91:ac:39:16:e6:ea:c1:d8:a3:
         8f:ad:49:45:d9:dc:9d:b9:10:39:b2:64:52:71:46:eb:3c:bf:
         8b:26:9b:56:1a:3f:d4:3f:65:35:23:80:82:a1:0d:5d:2e:b3:
         06:d4:9f:0a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEM5cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
OGM5NDQ3NzFkMjNiYjg5OWVkMDdkMTcxMjExYmFhZjBjOWU5N2UwHhcNMjMwNTI4
MjMxOTAwWhcNMjUwNTI5MjMxOTAwWjAzMTEwLwYDVQQDEygwODc3YzI2ZTU4OTUz
MGE4OGIwMzdiMGUxOWVkNWMyYWUzZDU1ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm4+lDt0yD/4SdVm6rmpXOnBsjO5Mk34kIOCeN7w4RLfQDkLC
8nzXb4PzmiiFmQDizKO29nhhjMD93Ei7W7EJuvBqqF/HI1vqpNa7HZk+qqMlMyI8
tHCM8Lacr6fzjf1t08p26aqQGlj0uFgE3my0kpD668yBFOF6Bt+U4PAlC1tKYstO
igdFykmeNEKVM27LF6ljcj0tOnwd1B5xk1D5QCbKcEMaUQg4fQiCEh6joeeG9UaB
LxkL5VVW9E3kKQCq7Fi1LcwU0crQZ2om05qkMRNl8SwFsZO7R9O75nABrGZ/RzlJ
6blUAwQuplafF8PURQWTmNp3CnAXkNq3WzuVVwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFe+lk89hePREPTjVHNW8o5ajytBMB8GA1UdIwQYMBaAFOC3pzxFtXZjUxgw
K5D9v0UWSl4ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjQ4Yzk0
NDc3MWQyM2JiODk5ZWQwN2QxNzEyMTFiYWFmMGM5ZTk3ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjcxMjMwY2UtYTk1MC00YTBiLWI4Y2QtMGY0Y2Q4
ZWIzMjE5LzA4NzdjMjZlNTg5NTMwYTg4YjAzN2IwZTE5ZWQ1YzJhZTNkNTVmZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNzEyMzBjZS1hOTUwLTRhMGItYjhjZC0wZjRj
ZDhlYjMyMTkvYjQ4Yzk0NDc3MWQyM2JiODk5ZWQwN2QxNzEyMTFiYWFmMGM5ZTk3
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgavDANBgkqhkiG9w0BAQsFAAOCAQEAYX5uEXtXwvurguW3
k18kvQdiEbLpYmL9BmnmZ7ILR+Wh66uUohMAMU3CqjA406Qq+qL174QugllKukyy
wZGyGhrbhgu3Z6L5lRIQ6b6jCE++qaNGQI/QlnS17yrSj71+0H2f9YrNvf8cKi3d
AhG0z0HpUSulvlY5tPXru+vm1lj8h3iWWE7H3SjcIUa0H48d2qk2QxDgdvybCk+l
g80SHef1Si6FnWu//qM/7CnpcmxNmAJMkAYkr/KbjheHLVzPgWpAyLE5dyBmsTNs
eNwLkaw5Fubqwdijj61JRdncnbkQObJkUnFG6zy/iyabVho/1D9lNSOAgqENXS6z
BtSfCg==
-----END CERTIFICATE-----