Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/e102dd9b7a2f2e19ce457ce402c7a058caa7c954.roa
File:                     e102dd9b7a2f2e19ce457ce402c7a058caa7c954.roa (raw, json)
Hash identifier:          eRtud0vHRwn28G//KgnYk97/kzwwssV4x9u1OJJ+oUM=
Subject key identifier:   AB:02:5E:6D:34:3A:C8:62:9D:9B:4F:AD:60:35:1E:7C:88:91:A1:ED
Certificate issuer:       /CN=a798f5148d06edd6bd46714a3ea83faee3385634
Certificate serial:       19807B
Authority key identifier: DA:98:11:22:62:87:27:58:78:70:5B:3F:BE:B7:3B:2C:59:3A:E9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a798f5148d06edd6bd46714a3ea83faee3385634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/e102dd9b7a2f2e19ce457ce402c7a058caa7c954.roa
Signing time:             Tue 12 Jul 2022 15:26:24 +0000
ROA not before:           Tue 12 Jul 2022 03:00:00 +0000
ROA not after:            Fri 12 Jul 2024 03:00:00 +0000
asID:                     264614
IP address blocks:        200.9.169.0/24 maxlen: 24
                          2801:1f:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671291 (0x19807b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a798f5148d06edd6bd46714a3ea83faee3385634
        Validity
            Not Before: Jul 12 03:00:00 2022 GMT
            Not After : Jul 12 03:00:00 2024 GMT
        Subject: CN=e102dd9b7a2f2e19ce457ce402c7a058caa7c954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:27:00:d8:3c:50:78:2a:27:e4:37:54:8d:
                    ce:92:58:a6:31:91:04:19:ad:c6:f5:0e:e3:cd:85:
                    9a:b2:a4:7c:ad:58:17:04:d9:d4:88:60:18:77:1c:
                    2a:0b:2e:b2:41:57:03:a0:82:50:99:d7:7d:73:37:
                    74:e8:53:a1:4e:a8:35:03:8e:a7:42:55:22:91:7f:
                    16:40:16:3c:be:68:dc:23:79:90:37:b9:3b:75:a5:
                    81:c6:86:d9:16:be:47:ab:de:d9:62:f1:34:59:a2:
                    7e:e1:a2:0e:2d:dc:03:da:cc:16:f8:60:40:dd:14:
                    94:30:20:1a:4d:a7:d1:67:4f:c2:3c:aa:db:28:de:
                    82:d6:cf:16:d2:ac:b3:84:2b:c0:87:08:8e:e8:20:
                    f3:41:03:47:aa:7f:87:85:ee:9b:59:92:e7:d9:22:
                    9c:b3:54:6c:75:8d:8c:c2:8a:71:05:56:4e:43:cf:
                    c3:55:f2:6e:18:94:27:d8:b9:42:7f:3e:7c:b4:11:
                    58:18:34:10:1f:d2:e6:d8:0a:da:1c:3e:c7:11:e4:
                    0a:f3:85:31:c9:38:57:06:5f:31:e8:05:f6:73:2c:
                    39:51:66:68:ca:45:dc:ec:c1:0d:99:35:ab:0a:42:
                    dd:d6:af:66:26:17:73:90:eb:9c:84:16:49:7a:de:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:02:5E:6D:34:3A:C8:62:9D:9B:4F:AD:60:35:1E:7C:88:91:A1:ED
            X509v3 Authority Key Identifier:
                keyid:DA:98:11:22:62:87:27:58:78:70:5B:3F:BE:B7:3B:2C:59:3A:E9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a798f5148d06edd6bd46714a3ea83faee3385634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/e102dd9b7a2f2e19ce457ce402c7a058caa7c954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd2e07fd-e0c9-4c78-b16f-bb8de8c97806/a798f5148d06edd6bd46714a3ea83faee3385634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.169.0/24
                IPv6:
                  2801:1f:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:93:9c:c4:a3:9a:f9:18:ef:99:f3:b7:4e:c8:47:50:9b:
         28:62:ce:3b:58:f0:ba:ed:c8:c5:fe:1c:d2:90:17:98:b9:50:
         2d:1d:16:7f:91:53:4a:84:c0:c5:86:ff:a3:d6:26:51:36:6d:
         dd:7e:57:09:e7:c7:d0:03:db:29:1b:b3:57:78:f8:1b:27:cc:
         8c:d9:da:74:31:60:fd:b6:1b:07:14:13:4e:6a:35:44:20:df:
         0b:1c:08:6c:8c:6f:9d:c9:37:fe:1c:f3:e4:b1:5a:26:95:b8:
         5b:11:4e:a3:1a:ab:f0:88:b9:f4:62:6c:a5:99:37:87:04:64:
         0a:e7:2c:e9:c1:3c:85:41:d7:78:42:1b:fd:70:64:78:34:ee:
         2f:03:18:57:5c:eb:e3:6e:ff:64:3e:9a:80:eb:ec:bf:89:82:
         20:c8:8e:de:04:25:06:0e:47:80:92:3f:14:ed:4e:75:48:47:
         b1:b1:27:c7:6e:51:4b:69:11:98:26:d4:ed:c6:7a:eb:59:66:
         cc:0f:1f:25:02:47:d3:8b:13:1d:4a:af:b3:ce:38:b8:d4:56:
         38:a5:30:42:80:cc:ec:0f:5f:33:f8:36:c2:89:e6:aa:3d:cb:
         c5:62:6b:fc:72:73:9f:ac:27:82:c6:f2:36:cc:31:71:0d:86:
         cd:11:30:e8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDGYB7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
OThmNTE0OGQwNmVkZDZiZDQ2NzE0YTNlYTgzZmFlZTMzODU2MzQwHhcNMjIwNzEy
MDMwMDAwWhcNMjQwNzEyMDMwMDAwWjAzMTEwLwYDVQQDEyhlMTAyZGQ5YjdhMmYy
ZTE5Y2U0NTdjZTQwMmM3YTA1OGNhYTdjOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo8YnANg8UHgqJ+Q3VI3OklimMZEEGa3G9Q7jzYWasqR8rVgX
BNnUiGAYdxwqCy6yQVcDoIJQmdd9czd06FOhTqg1A46nQlUikX8WQBY8vmjcI3mQ
N7k7daWBxobZFr5Hq97ZYvE0WaJ+4aIOLdwD2swW+GBA3RSUMCAaTafRZ0/CPKrb
KN6C1s8W0qyzhCvAhwiO6CDzQQNHqn+Hhe6bWZLn2SKcs1RsdY2MwopxBVZOQ8/D
VfJuGJQn2LlCfz58tBFYGDQQH9Lm2AraHD7HEeQK84UxyThXBl8x6AX2cyw5UWZo
ykXc7MENmTWrCkLd1q9mJhdzkOuchBZJet742wIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFKsCXm00OshinZtPrWA1HnyIkaHtMB8GA1UdIwQYMBaAFNqYESJihydYeHBb
P763OyxZOumuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc5OGY1
MTQ4ZDA2ZWRkNmJkNDY3MTRhM2VhODNmYWVlMzM4NTYzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmQyZTA3ZmQtZTBjOS00Yzc4LWIxNmYtYmI4ZGU4
Yzk3ODA2L2UxMDJkZDliN2EyZjJlMTljZTQ1N2NlNDAyYzdhMDU4Y2FhN2M5NTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZDJlMDdmZC1lMGM5LTRjNzgtYjE2Zi1iYjhk
ZThjOTc4MDYvYTc5OGY1MTQ4ZDA2ZWRkNmJkNDY3MTRhM2VhODNmYWVlMzM4NTYz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMgJqTAPBAIAAjAJAwcAKAEAH+AAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwyZOcxKOa+RjvmfO3TshHUJsoYs47WPC67cjF/hzSkBeYuVAtHRZ/kVNK
hMDFhv+j1iZRNm3dflcJ58fQA9spG7NXePgbJ8yM2dp0MWD9thsHFBNOajVEIN8L
HAhsjG+dyTf+HPPksVomlbhbEU6jGqvwiLn0YmylmTeHBGQK5yzpwTyFQdd4Qhv9
cGR4NO4vAxhXXOvjbv9kPpqA6+y/iYIgyI7eBCUGDkeAkj8U7U51SEexsSfHblFL
aRGYJtTtxnrrWWbMDx8lAkfTixMdSq+zzji41FY4pTBCgMzsD18z+DbCieaqPcvF
Ymv8cnOfrCeCxvI2zDFxDYbNETDo
-----END CERTIFICATE-----