Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/348efc58b1ae643f7934b3d6bfa4a3984093d544.roa
File:                     348efc58b1ae643f7934b3d6bfa4a3984093d544.roa (raw, json)
Hash identifier:          t1xQ1pq8CpyoUyLMwVsdg5xLYIWD7aqUYwBstnafrDQ=
Subject key identifier:   7F:36:D5:AB:BD:11:35:E9:63:1C:B8:CB:8A:46:72:07:6E:FA:1F:53
Certificate issuer:       /CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Certificate serial:       1DD376
Authority key identifier: 12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/348efc58b1ae643f7934b3d6bfa4a3984093d544.roa
Signing time:             Wed 07 Jun 2023 12:39:24 +0000
ROA not before:           Tue 06 Jun 2023 12:39:24 +0000
ROA not after:            Sat 07 Jun 2025 12:39:24 +0000
asID:                     264795
IP address blocks:        170.238.40.0/22 maxlen: 24
                          2803:a4c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954678 (0x1dd376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
        Validity
            Not Before: Jun  6 12:39:24 2023 GMT
            Not After : Jun  7 12:39:24 2025 GMT
        Subject: CN=348efc58b1ae643f7934b3d6bfa4a3984093d544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:a8:9d:7a:94:18:91:ee:b9:ee:46:5a:27:
                    87:03:10:ef:9e:b2:28:1a:69:02:8a:c5:5c:85:27:
                    9d:90:a8:50:e1:1c:d3:f1:02:6e:a2:38:b5:3e:8f:
                    4e:da:86:96:56:71:8a:92:e4:61:35:dd:3b:fa:a1:
                    91:c2:81:04:f4:04:0e:62:0d:2c:ab:29:52:cf:35:
                    b2:d0:f1:65:d2:82:d0:8e:e3:0d:5c:8e:3e:59:12:
                    c0:1b:cd:a2:b4:a9:5f:2d:c9:a6:2c:2a:75:5e:bc:
                    eb:97:61:51:b2:df:a8:e1:50:b7:c1:fa:8a:69:a9:
                    f7:37:d9:91:39:27:01:da:2c:ba:81:ff:e7:4a:96:
                    12:48:f8:9b:7d:36:0c:94:a4:f5:44:49:51:14:3e:
                    6e:dd:79:fc:a0:a3:be:c9:7e:94:c7:92:67:31:b6:
                    bc:1a:45:aa:d0:4b:be:b9:6c:33:17:d2:c0:86:4b:
                    00:e8:9c:02:a6:be:fd:b3:66:ec:68:75:da:82:c0:
                    41:ad:e2:ec:db:7c:40:e5:d9:fe:55:60:3a:1a:75:
                    e8:84:f6:b6:ff:a6:81:74:3b:1b:29:c2:b8:36:a6:
                    07:d8:f1:62:41:4d:b0:e2:11:d9:b6:8a:62:fb:c9:
                    7e:fb:99:d6:c6:8e:45:ab:21:ff:10:0d:a3:b0:62:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:36:D5:AB:BD:11:35:E9:63:1C:B8:CB:8A:46:72:07:6E:FA:1F:53
            X509v3 Authority Key Identifier:
                keyid:12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/348efc58b1ae643f7934b3d6bfa4a3984093d544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.40.0/22
                IPv6:
                  2803:a4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:67:d3:41:9c:23:60:ae:27:05:3a:da:10:9f:4e:9e:00:d0:
         16:74:c6:39:8c:89:f1:63:a1:db:ab:e1:95:41:89:55:f1:2c:
         0b:b2:9d:6d:0e:89:41:75:4e:77:c5:a4:62:48:f0:1b:57:7a:
         a1:c4:f8:e0:fd:23:71:37:f5:bb:14:b8:f9:30:18:c3:d6:e8:
         16:73:10:38:41:b6:8f:c9:09:90:98:fb:cd:e4:a7:ad:18:37:
         a2:d5:97:51:97:68:ff:d6:8c:8b:c9:b4:82:c5:16:76:91:bf:
         5b:4d:70:c0:c9:b5:e8:0b:06:de:4d:0d:6f:1b:15:e3:33:13:
         fd:48:9f:89:a6:21:53:ad:a9:a2:de:f5:cf:26:b5:c8:db:45:
         90:cb:db:15:c8:09:41:7f:76:ad:c9:b0:d1:bd:93:c7:91:f3:
         a8:20:d3:38:fc:e7:31:23:d9:05:60:49:43:f0:0f:f4:ad:3e:
         93:fb:52:d0:a8:9c:57:d5:04:e9:e9:b5:4f:5c:e0:08:06:17:
         b6:75:8b:db:14:9a:f5:c5:bd:d6:ca:a6:27:ff:8e:e0:d0:af:
         fb:b4:fd:57:6f:d9:e3:59:38:5f:44:08:d6:fa:93:4d:69:aa:
         3a:15:95:5d:e3:3e:d9:16:79:68:39:45:e2:45:6e:fc:7d:9b:
         2a:e5:fa:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHdN2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhl
Yzc1ZDBjYTU5ZTM2NWE1YzBhNjhjN2Y0ZWEzNzA5YjgwNWE0NDEwHhcNMjMwNjA2
MTIzOTI0WhcNMjUwNjA3MTIzOTI0WjAzMTEwLwYDVQQDEygzNDhlZmM1OGIxYWU2
NDNmNzkzNGIzZDZiZmE0YTM5ODQwOTNkNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt3ConXqUGJHuue5GWieHAxDvnrIoGmkCisVchSedkKhQ4RzT
8QJuoji1Po9O2oaWVnGKkuRhNd07+qGRwoEE9AQOYg0sqylSzzWy0PFl0oLQjuMN
XI4+WRLAG82itKlfLcmmLCp1Xrzrl2FRst+o4VC3wfqKaan3N9mROScB2iy6gf/n
SpYSSPibfTYMlKT1RElRFD5u3Xn8oKO+yX6Ux5JnMba8GkWq0Eu+uWwzF9LAhksA
6JwCpr79s2bsaHXagsBBreLs23xA5dn+VWA6GnXohPa2/6aBdDsbKcK4NqYH2PFi
QU2w4hHZtopi+8l++5nWxo5FqyH/EA2jsGKftwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFH821au9ETXpYxy4y4pGcgdu+h9TMB8GA1UdIwQYMBaAFBKWKNhJPMZLfkTA
IyRYYsrm+JeSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGVjNzVk
MGNhNTllMzY1YTVjMGE2OGM3ZjRlYTM3MDliODA1YTQ0MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmEzNzE5ZWYtZTMyNy00ODljLWE1NDUtNTRmNWFl
NWMwYThkLzM0OGVmYzU4YjFhZTY0M2Y3OTM0YjNkNmJmYTRhMzk4NDA5M2Q1NDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTM3MTllZi1lMzI3LTQ4OWMtYTU0NS01NGY1
YWU1YzBhOGQvOGVjNzVkMGNhNTllMzY1YTVjMGE2OGM3ZjRlYTM3MDliODA1YTQ0
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqruKDANBAIAAjAHAwUAKAOkwDANBgkqhkiG9w0BAQsFAAOC
AQEAWWfTQZwjYK4nBTraEJ9OngDQFnTGOYyJ8WOh26vhlUGJVfEsC7KdbQ6JQXVO
d8WkYkjwG1d6ocT44P0jcTf1uxS4+TAYw9boFnMQOEG2j8kJkJj7zeSnrRg3otWX
UZdo/9aMi8m0gsUWdpG/W01wwMm16AsG3k0NbxsV4zMT/UifiaYhU62pot71zya1
yNtFkMvbFcgJQX92rcmw0b2Tx5HzqCDTOPznMSPZBWBJQ/AP9K0+k/tS0KicV9UE
6em1T1zgCAYXtnWL2xSa9cW91sqmJ/+O4NCv+7T9V2/Z41k4X0QI1vqTTWmqOhWV
XeM+2RZ5aDlF4kVu/H2bKuX6Tg==
-----END CERTIFICATE-----