Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/67330ecbcddd0bd1156b38c9a6bddb87fb1f9d22.roa
File:                     67330ecbcddd0bd1156b38c9a6bddb87fb1f9d22.roa (raw, json)
Hash identifier:          sLA3qq8oo2gOv7HEZWIKis0V1dhcOCeQWWPSA8+ezwg=
Subject key identifier:   35:47:30:B9:2A:EC:67:99:BE:12:8C:F9:D3:B8:99:F4:46:E4:1C:09
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       27B30C
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/67330ecbcddd0bd1156b38c9a6bddb87fb1f9d22.roa
Signing time:             Mon 19 Feb 2024 15:25:41 +0000
ROA not before:           Mon 19 Feb 2024 15:25:41 +0000
ROA not after:            Thu 19 Feb 2026 15:25:41 +0000
asID:                     27925
IP address blocks:        200.63.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601740 (0x27b30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 19 15:25:41 2024 GMT
            Not After : Feb 19 15:25:41 2026 GMT
        Subject: CN=67330ecbcddd0bd1156b38c9a6bddb87fb1f9d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:0a:69:9d:a6:7b:ad:82:85:90:72:7f:6c:
                    1a:1f:81:b3:4e:5d:0e:2c:bb:23:d9:ab:a6:55:fe:
                    12:83:7a:eb:c0:c2:58:e8:14:1e:a9:d8:03:04:5d:
                    58:cc:6e:9d:09:27:ef:7d:af:c3:0f:f0:42:2e:a4:
                    61:c4:dd:01:1c:2f:19:50:79:cc:45:2c:a1:d5:56:
                    a8:4f:36:b9:f4:66:0d:2d:98:4e:11:7f:88:37:99:
                    b5:13:e5:e5:f7:49:37:2b:7b:1c:7c:17:37:b6:08:
                    93:1e:71:dd:dd:ec:28:15:dd:6c:63:7f:c7:27:aa:
                    f9:0a:6a:99:8e:56:3a:24:9e:eb:b1:28:60:72:4f:
                    0f:28:37:e4:2b:c3:ea:bc:d2:24:db:a4:56:ac:3c:
                    37:eb:1a:5f:8f:fd:58:7f:23:e6:71:f3:e6:86:7c:
                    e5:89:cf:a8:03:43:a9:bd:1d:fc:2e:ad:e3:ad:07:
                    a8:ec:54:35:37:78:65:eb:01:14:c9:0f:d4:4c:26:
                    7f:b8:be:f5:fc:93:dc:cb:92:b0:d3:fa:77:e2:af:
                    fc:43:2d:79:88:62:35:bd:7f:fd:1c:ac:cf:04:73:
                    07:eb:da:5b:c8:5b:62:8e:51:85:84:89:5a:56:9c:
                    f7:82:a6:eb:58:ac:eb:70:95:2c:cf:98:00:c0:06:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:30:B9:2A:EC:67:99:BE:12:8C:F9:D3:B8:99:F4:46:E4:1C:09
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/67330ecbcddd0bd1156b38c9a6bddb87fb1f9d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:85:df:e9:4e:e3:66:32:4e:a4:40:19:17:be:fd:a1:ac:
         a2:3e:bb:68:ec:37:a0:06:d1:5b:31:41:70:4a:7e:00:de:ea:
         b4:07:1d:a2:25:22:93:6f:1d:b4:89:ad:c4:9e:18:34:b3:31:
         0e:7d:f9:71:e3:4e:f9:71:d5:29:b2:37:1d:77:3d:0a:48:7e:
         d1:5c:af:a1:77:5e:76:7f:71:5d:b0:1b:02:20:ca:05:0f:e5:
         fa:ba:70:26:ed:c3:e5:be:48:05:fc:d1:7c:a7:d6:52:74:73:
         41:1b:bc:3d:de:e8:f9:3a:6a:87:13:18:6b:54:ff:81:ca:d0:
         7a:70:cf:b5:61:18:07:fc:38:4e:59:c1:57:a1:a6:d4:d6:ea:
         0e:07:b3:c3:d4:e2:9a:25:ec:de:18:46:e9:4d:7a:79:ff:8c:
         88:c4:e5:76:61:82:f4:d9:25:e8:bc:0f:48:bc:b1:61:0b:c8:
         67:a4:e0:f0:43:24:d7:c8:89:4a:b4:2f:dd:f2:b3:a7:16:a4:
         91:6a:af:c8:b5:89:1a:04:61:57:f8:64:2b:37:49:0f:bf:7d:
         21:62:c9:ee:f1:5f:bf:d3:c1:14:c7:1e:7e:1d:4f:a5:26:81:
         2f:30:3d:a0:e5:70:67:05:9c:5f:f1:de:b6:54:7e:21:7b:2b:
         0f:36:fa:49
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ7MMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
OWFkYzcxMTdiNWZiNmM5YmUxYTdjZjRmYTMxM2UzN2VlMTg1YmYwHhcNMjQwMjE5
MTUyNTQxWhcNMjYwMjE5MTUyNTQxWjAzMTEwLwYDVQQDEyg2NzMzMGVjYmNkZGQw
YmQxMTU2YjM4YzlhNmJkZGI4N2ZiMWY5ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAytcKaZ2me62ChZByf2waH4GzTl0OLLsj2aumVf4Sg3rrwMJY
6BQeqdgDBF1YzG6dCSfvfa/DD/BCLqRhxN0BHC8ZUHnMRSyh1VaoTza59GYNLZhO
EX+IN5m1E+Xl90k3K3scfBc3tgiTHnHd3ewoFd1sY3/HJ6r5CmqZjlY6JJ7rsShg
ck8PKDfkK8PqvNIk26RWrDw36xpfj/1YfyPmcfPmhnzlic+oA0OpvR38Lq3jrQeo
7FQ1N3hl6wEUyQ/UTCZ/uL71/JPcy5Kw0/p34q/8Qy15iGI1vX/9HKzPBHMH69pb
yFtijlGFhIlaVpz3gqbrWKzrcJUsz5gAwAbuEQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDVHMLkq7GeZvhKM+dO4mfRG5BwJMB8GA1UdIwQYMBaAFKDorY9rLW0fPScQ
taDa78ZWBxerMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDI5YWRj
NzExN2I1ZmI2YzliZTFhN2NmNGZhMzEzZTM3ZWUxODViZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjg2NDhhMWMtN2ViOS00NjllLWJmMjgtZTE4ODhh
ZDg5ZWZiLzY3MzMwZWNiY2RkZDBiZDExNTZiMzhjOWE2YmRkYjg3ZmIxZjlkMjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iODY0OGExYy03ZWI5LTQ2OWUtYmYyOC1lMTg4
OGFkODllZmIvNDI5YWRjNzExN2I1ZmI2YzliZTFhN2NmNGZhMzEzZTM3ZWUxODVi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8g/ODANBgkqhkiG9w0BAQsFAAOCAQEAQk6F3+lO42YyTqRA
GRe+/aGsoj67aOw3oAbRWzFBcEp+AN7qtAcdoiUik28dtImtxJ4YNLMxDn35ceNO
+XHVKbI3HXc9Ckh+0VyvoXdedn9xXbAbAiDKBQ/l+rpwJu3D5b5IBfzRfKfWUnRz
QRu8Pd7o+TpqhxMYa1T/gcrQenDPtWEYB/w4TlnBV6Gm1NbqDgezw9TimiXs3hhG
6U16ef+MiMTldmGC9Nkl6LwPSLyxYQvIZ6Tg8EMk18iJSrQv3fKzpxakkWqvyLWJ
GgRhV/hkKzdJD799IWLJ7vFfv9PBFMcefh1PpSaBLzA9oOVwZwWcX/HetlR+IXsr
Dzb6SQ==
-----END CERTIFICATE-----