Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa
File:                     687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa (raw, json)
Hash identifier:          etIUc1H1utuU+L5H24UNi1OfFHeCNhfktdqp/vkmE6A=
Subject key identifier:   76:FB:88:CF:E4:33:FB:13:97:A3:72:BF:E5:25:A3:81:18:2B:19:7E
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A472B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa
Signing time:             Wed 14 Feb 2024 13:39:39 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     393629
IP address blocks:        201.221.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2770731 (0x2a472b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=687e49926cc5601ef90f46c9cc64c2e9b43f512c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:78:cc:1c:e4:9f:27:2d:72:b6:06:65:26:
                    bd:ba:2b:e1:78:16:7b:de:a8:7f:92:ee:eb:f7:dd:
                    6b:b7:a6:dd:a0:44:bd:fc:f4:e1:d4:74:9e:b5:72:
                    69:6e:86:b6:b7:15:5d:ee:4d:11:ec:5f:86:c5:3e:
                    9a:5a:8e:d0:5a:2a:fa:cb:ea:46:61:6f:6d:c6:d5:
                    43:be:32:bc:e5:23:10:3e:85:51:75:34:ec:d2:85:
                    45:ac:50:f6:30:e4:7b:0b:4b:81:60:a2:5b:13:fc:
                    8b:df:0a:97:bf:95:9d:35:97:1c:82:aa:a5:24:6b:
                    08:a5:d1:1f:1b:7e:3f:94:93:39:29:0b:75:6b:92:
                    b1:c8:ef:fe:f1:79:67:21:d1:d2:3a:5d:aa:e2:fc:
                    76:40:c9:e8:78:96:f6:eb:93:f2:84:c1:8e:a1:4b:
                    2d:c1:fe:31:f3:ae:20:ab:f7:04:e7:7c:2a:d7:02:
                    51:b0:fe:08:78:b8:c8:de:fb:ee:a0:53:7f:50:e8:
                    62:68:4c:61:b3:4c:f0:85:cd:d7:7f:08:c5:28:18:
                    0d:80:7f:f2:2b:3a:b1:81:20:58:7b:e2:57:c8:0b:
                    5d:54:ec:35:78:70:1f:b8:85:8c:5c:1f:8d:86:4d:
                    5d:cf:81:f0:18:bf:66:42:b4:56:1d:0f:88:99:43:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:88:CF:E4:33:FB:13:97:A3:72:BF:E5:25:A3:81:18:2B:19:7E
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/687e49926cc5601ef90f46c9cc64c2e9b43f512c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:10:d3:78:82:8a:62:9e:b0:ac:18:3f:e4:01:ce:59:51:
         93:f7:11:ee:c1:36:7a:89:72:16:f8:4a:5a:b8:39:a9:60:77:
         34:ef:5e:0e:d8:c4:c6:ec:30:0d:31:2e:7a:3e:4f:8d:fe:15:
         93:71:77:ce:2c:03:9d:fd:7a:68:2a:b3:e9:eb:72:23:9a:ea:
         fc:4d:8d:ac:ee:3d:45:0d:a6:a5:ab:9e:7b:5b:49:3b:1c:9f:
         99:d2:16:25:df:ac:8a:3c:5c:d3:59:74:ca:dc:c1:b1:4f:56:
         4c:ac:ae:a2:28:79:e4:0a:ff:f9:f0:a5:ec:3c:47:1d:90:b7:
         fc:69:9a:c6:54:66:de:d3:9c:bb:90:4c:e7:3f:ed:30:3f:a1:
         03:42:7b:37:55:66:45:14:70:28:52:87:4a:61:3c:5f:20:e1:
         32:06:67:7f:24:c0:4b:e7:9a:9f:c2:ae:78:52:53:fe:7b:06:
         3c:01:06:7c:db:c5:06:06:31:08:a1:2e:1c:50:8e:c5:8e:e6:
         5e:db:6a:df:7c:3c:0d:11:19:dd:58:c3:49:85:fa:22:02:e0:
         50:06:e6:d0:ce:7b:e4:41:34:4b:44:0f:e6:4b:31:95:a4:d1:
         a1:8f:9a:e8:4e:6d:3c:fb:bd:5e:ae:d6:7f:b9:2d:28:ec:46:
         6b:a4:17:7e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKkcrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
ZmI1Y2Q5OTNkMzQ4MjVkY2ExYWZjNGNhZGVhZjg0OTNkYmRiZGQwHhcNMjQwMjE0
MTMzOTM0WhcNMjkwMjE0MTMzOTM0WjAzMTEwLwYDVQQDEyg2ODdlNDk5MjZjYzU2
MDFlZjkwZjQ2YzljYzY0YzJlOWI0M2Y1MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqOZ4zBzknyctcrYGZSa9uivheBZ73qh/ku7r991rt6bdoES9
/PTh1HSetXJpboa2txVd7k0R7F+GxT6aWo7QWir6y+pGYW9txtVDvjK85SMQPoVR
dTTs0oVFrFD2MOR7C0uBYKJbE/yL3wqXv5WdNZccgqqlJGsIpdEfG34/lJM5KQt1
a5KxyO/+8XlnIdHSOl2q4vx2QMnoeJb265PyhMGOoUstwf4x864gq/cE53wq1wJR
sP4IeLjI3vvuoFN/UOhiaExhs0zwhc3XfwjFKBgNgH/yKzqxgSBYe+JXyAtdVOw1
eHAfuIWMXB+Nhk1dz4HwGL9mQrRWHQ+ImUMBZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHb7iM/kM/sTl6Nyv+Ulo4EYKxl+MB8GA1UdIwQYMBaAFPt84Eo2/gXQEbvk
w1q2h+jw4qG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlmYjVj
ZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzY4N2U0OTkyNmNjNTYwMWVmOTBmNDZjOWNjNjRjMmU5YjQzZjUxMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvYTlmYjVjZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsndWDANBgkqhkiG9w0BAQsFAAOCAQEAcKUQ03iCimKesKwY
P+QBzllRk/cR7sE2eolyFvhKWrg5qWB3NO9eDtjExuwwDTEuej5Pjf4Vk3F3ziwD
nf16aCqz6etyI5rq/E2NrO49RQ2mpauee1tJOxyfmdIWJd+sijxc01l0ytzBsU9W
TKyuoih55Ar/+fCl7DxHHZC3/GmaxlRm3tOcu5BM5z/tMD+hA0J7N1VmRRRwKFKH
SmE8XyDhMgZnfyTAS+ean8KueFJT/nsGPAEGfNvFBgYxCKEuHFCOxY7mXttq33w8
DREZ3VjDSYX6IgLgUAbm0M575EE0S0QP5ksxlaTRoY+a6E5tPPu9Xq7Wf7ktKOxG
a6QXfg==
-----END CERTIFICATE-----