Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/ff287a289074f46739d24d5553aba7cd9b4442aa.roa
File:                     ff287a289074f46739d24d5553aba7cd9b4442aa.roa (raw, json)
Hash identifier:          AUu8V3wiI06IxRu3lS6K3/FaFvgwFUiQqglRzp9F+h0=
Subject key identifier:   BA:FC:DE:A5:AF:32:84:01:4C:5A:3E:B6:F0:15:C5:7B:75:BE:50:BB
Certificate issuer:       /CN=513aff20d0cdcc2d2629f1e5e517572eb944dba2
Certificate serial:       265400
Authority key identifier: 9A:2F:48:B1:87:04:85:99:98:9C:94:B5:F9:E6:F7:68:CD:30:F5:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513aff20d0cdcc2d2629f1e5e517572eb944dba2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/ff287a289074f46739d24d5553aba7cd9b4442aa.roa
Signing time:             Mon 15 Jan 2024 03:32:15 +0000
ROA not before:           Mon 15 Jan 2024 03:32:14 +0000
ROA not after:            Mon 15 Jan 2029 03:32:14 +0000
asID:                     265696
IP address blocks:        131.196.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511872 (0x265400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513aff20d0cdcc2d2629f1e5e517572eb944dba2
        Validity
            Not Before: Jan 15 03:32:14 2024 GMT
            Not After : Jan 15 03:32:14 2029 GMT
        Subject: CN=ff287a289074f46739d24d5553aba7cd9b4442aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:02:4f:96:0e:5e:4d:0c:18:a4:94:e8:18:
                    d0:0d:44:3b:ff:66:11:4b:80:6d:18:b0:14:e9:e0:
                    b2:7d:dc:63:bf:d3:89:c1:45:fa:92:1c:0f:d2:31:
                    bc:74:f4:3e:c0:0b:c7:22:12:3e:34:05:7a:aa:fe:
                    1c:e1:95:4f:74:25:a2:eb:f1:8e:ff:5e:53:5e:d9:
                    5d:02:5f:ae:db:d3:91:54:90:d0:fa:82:e7:12:3e:
                    4f:17:10:20:e2:78:3e:37:57:98:3a:33:2a:f1:b2:
                    67:4c:40:d4:aa:8d:ca:0f:ed:6e:a5:c9:75:c4:dd:
                    43:fb:35:ca:3c:f8:8f:7d:c0:c1:0a:79:94:10:64:
                    22:36:27:39:75:c6:b1:a1:75:87:a8:52:ef:aa:20:
                    61:f5:cd:94:1c:f1:ce:cd:d4:52:7d:27:f3:be:ad:
                    95:ab:85:5c:04:3a:5a:7c:32:ec:ec:13:84:4c:52:
                    83:23:28:8e:a3:55:3f:cb:34:ed:39:e9:b1:ff:c3:
                    01:12:ad:f9:c6:9e:75:1b:86:c2:d0:9f:cd:9e:db:
                    34:ac:c2:e8:80:7f:c4:46:5c:84:6e:6a:c2:50:f8:
                    64:be:7a:25:be:ce:d7:52:96:99:fe:d4:db:e4:39:
                    81:58:31:a1:da:7b:b8:3d:d2:b7:87:4b:06:83:6c:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:DE:A5:AF:32:84:01:4C:5A:3E:B6:F0:15:C5:7B:75:BE:50:BB
            X509v3 Authority Key Identifier:
                keyid:9A:2F:48:B1:87:04:85:99:98:9C:94:B5:F9:E6:F7:68:CD:30:F5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513aff20d0cdcc2d2629f1e5e517572eb944dba2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/ff287a289074f46739d24d5553aba7cd9b4442aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/513aff20d0cdcc2d2629f1e5e517572eb944dba2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:90:76:bd:ea:29:ee:06:ce:d4:72:59:8a:88:ce:70:97:42:
         e0:05:7e:f1:21:cb:75:da:d6:e6:c7:78:84:ea:7d:f8:b8:20:
         9e:3f:cc:03:3d:0a:1c:52:74:01:76:57:2f:93:15:37:a7:91:
         8c:5a:7b:ec:dd:b4:d0:6f:90:0e:a7:9d:74:e2:dd:82:0b:32:
         d6:83:91:9c:4c:cd:3f:a4:c6:08:ce:5b:7d:6b:4a:7f:a7:b0:
         82:e2:0a:f0:ea:91:e1:73:23:2c:de:fc:2e:34:c2:2c:0d:08:
         9e:f1:c2:60:06:ed:bf:ac:a7:3d:3a:c5:29:23:c5:9f:cb:11:
         7f:2e:a9:9e:39:96:ff:c5:fc:f7:2e:70:9d:04:cc:10:b6:54:
         aa:28:6f:f7:bc:8d:16:1a:44:2a:7e:36:33:d1:42:a3:76:5f:
         18:22:f4:23:fd:3d:58:f3:2f:23:ed:cc:38:7a:91:2a:dc:c2:
         eb:df:40:23:a6:12:9d:0a:a8:72:3d:11:de:97:87:bb:56:a7:
         30:c1:02:04:fe:4a:7a:03:9c:59:22:0e:1e:dd:7e:4c:74:d7:
         1c:f2:3e:de:a4:05:a4:7b:aa:ea:cf:2c:15:19:54:f2:a3:34:
         bc:c4:2f:4e:c8:96:c9:fb:9d:f9:fc:98:37:dc:a2:3b:00:2c:
         ea:dc:57:84
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJlQAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2FmZjIwZDBjZGNjMmQyNjI5ZjFlNWU1MTc1NzJlYjk0NGRiYTIwHhcNMjQwMTE1
MDMzMjE0WhcNMjkwMTE1MDMzMjE0WjAzMTEwLwYDVQQDEyhmZjI4N2EyODkwNzRm
NDY3MzlkMjRkNTU1M2FiYTdjZDliNDQ0MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvYcCT5YOXk0MGKSU6BjQDUQ7/2YRS4BtGLAU6eCyfdxjv9OJ
wUX6khwP0jG8dPQ+wAvHIhI+NAV6qv4c4ZVPdCWi6/GO/15TXtldAl+u29ORVJDQ
+oLnEj5PFxAg4ng+N1eYOjMq8bJnTEDUqo3KD+1upcl1xN1D+zXKPPiPfcDBCnmU
EGQiNic5dcaxoXWHqFLvqiBh9c2UHPHOzdRSfSfzvq2Vq4VcBDpafDLs7BOETFKD
IyiOo1U/yzTtOemx/8MBEq35xp51G4bC0J/Nnts0rMLogH/ERlyEbmrCUPhkvnol
vs7XUpaZ/tTb5DmBWDGh2nu4PdK3h0sGg2yGkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLr83qWvMoQBTFo+tvAVxXt1vlC7MB8GA1UdIwQYMBaAFJovSLGHBIWZmJyU
tfnm92jNMPVPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzYWZm
MjBkMGNkY2MyZDI2MjlmMWU1ZTUxNzU3MmViOTQ0ZGJhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmQ3ZTM2NmQtNzI1Zi00YWIzLTk2NTItODU3ZTRh
MzlmNGQ2L2ZmMjg3YTI4OTA3NGY0NjczOWQyNGQ1NTUzYWJhN2NkOWI0NDQyYWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZDdlMzY2ZC03MjVmLTRhYjMtOTY1Mi04NTdl
NGEzOWY0ZDYvNTEzYWZmMjBkMGNkY2MyZDI2MjlmMWU1ZTUxNzU3MmViOTQ0ZGJh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYPE1jANBgkqhkiG9w0BAQsFAAOCAQEAEZB2veop7gbO1HJZ
iojOcJdC4AV+8SHLddrW5sd4hOp9+Lggnj/MAz0KHFJ0AXZXL5MVN6eRjFp77N20
0G+QDqeddOLdggsy1oORnEzNP6TGCM5bfWtKf6ewguIK8OqR4XMjLN78LjTCLA0I
nvHCYAbtv6ynPTrFKSPFn8sRfy6pnjmW/8X89y5wnQTMELZUqihv97yNFhpEKn42
M9FCo3ZfGCL0I/09WPMvI+3MOHqRKtzC699AI6YSnQqocj0R3peHu1anMMECBP5K
egOcWSIOHt1+THTXHPI+3qQFpHuq6s8sFRlU8qM0vMQvTsiWyfud+fyYN9yiOwAs
6txXhA==
-----END CERTIFICATE-----