Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eb8d047d0544cf3f4206b014df158c3953927532.roa
File:                     eb8d047d0544cf3f4206b014df158c3953927532.roa (raw, json)
Hash identifier:          QhlGuloJkdtYJHtIAsy+8CBTWuj6pEPuyydhAzcgu7Y=
Subject key identifier:   A8:D0:8E:E9:0C:2E:E1:8B:A0:19:52:E4:81:90:FA:A9:FA:34:55:0E
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       223EDA
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eb8d047d0544cf3f4206b014df158c3953927532.roa
Signing time:             Mon 31 Jul 2023 13:59:35 +0000
ROA not before:           Sun 30 Jul 2023 13:59:35 +0000
ROA not after:            Thu 31 Jul 2025 13:59:35 +0000
asID:                     135027
IP address blocks:        190.93.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244314 (0x223eda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Jul 30 13:59:35 2023 GMT
            Not After : Jul 31 13:59:35 2025 GMT
        Subject: CN=eb8d047d0544cf3f4206b014df158c3953927532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:68:4f:08:78:59:81:2a:a8:b5:41:f8:97:
                    17:c7:6e:56:98:2f:76:60:36:52:8e:a2:fb:f0:06:
                    74:8c:1c:f6:a5:e0:d3:3f:a0:79:a6:79:4d:ce:ed:
                    84:b8:6a:cb:be:75:4d:c8:ff:8a:59:90:c1:18:b8:
                    30:af:db:29:c0:23:9e:fe:a0:c9:98:25:89:01:fd:
                    f3:42:b9:1f:8d:b6:fe:7d:9a:8f:45:4c:0b:86:24:
                    0b:3c:48:fc:6d:50:f0:3e:9e:0f:1e:3f:03:0e:1b:
                    77:b0:26:0e:d9:30:60:4b:84:a9:45:ac:2d:1a:81:
                    a4:15:31:b4:9b:ed:c7:f5:c7:b5:76:fd:bb:bb:16:
                    b7:96:df:e5:38:44:bb:2a:2a:c6:e0:64:e9:61:da:
                    31:99:da:7f:38:4a:43:e2:49:f6:f3:c3:7c:ed:a8:
                    29:91:93:cb:59:37:d0:31:c8:ae:cc:ca:17:25:18:
                    0e:5d:e0:00:8b:03:37:3f:d0:88:82:bd:e3:2c:29:
                    48:ea:b5:d8:91:be:da:41:3d:13:34:b5:e7:c0:66:
                    ee:fb:99:2f:a9:12:3f:15:a4:ef:ed:ca:3d:ff:01:
                    d9:92:45:ca:7f:08:3c:50:2b:84:84:0c:4e:d1:44:
                    a3:3a:89:62:28:ae:d7:6e:7b:d6:03:c6:ac:da:f1:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D0:8E:E9:0C:2E:E1:8B:A0:19:52:E4:81:90:FA:A9:FA:34:55:0E
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/eb8d047d0544cf3f4206b014df158c3953927532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:20:79:8a:3e:3c:40:91:f0:fc:06:1e:b4:5f:03:ad:e9:
         32:e9:d7:7a:35:de:f2:98:c6:97:2b:02:be:43:c5:81:92:97:
         92:02:13:c1:66:3a:eb:0a:70:b9:e2:e7:9e:c2:76:f1:00:e1:
         66:21:cf:af:9f:41:23:73:f9:08:41:01:3c:7d:7c:9d:78:07:
         df:b3:49:46:ab:e6:79:ff:2c:d1:aa:76:7b:7f:c3:f1:49:73:
         a2:b9:c9:c0:be:4d:50:96:95:20:70:72:c4:6a:62:5c:3c:24:
         f3:f0:c1:77:ea:a1:00:d7:ec:f7:a9:56:1b:f1:8b:5a:28:fe:
         26:e1:42:c6:58:a8:d0:fa:6f:b9:a0:b3:a8:26:eb:ac:5a:fa:
         7a:c6:ec:14:dc:15:45:cb:2a:8c:45:02:46:65:d4:63:cd:41:
         f3:1e:84:b6:4e:24:97:b2:0a:fc:c9:83:5d:de:6f:fa:2d:94:
         21:72:f1:92:8c:62:c3:39:22:0c:ce:a1:47:f0:d3:68:a9:cd:
         0a:eb:e0:8d:06:36:dd:13:32:13:15:c1:cc:d2:6c:a6:83:0b:
         f4:2e:a3:51:1e:6c:fa:08:9a:c6:4f:56:70:15:c0:c9:d7:60:
         e0:94:ed:7a:8a:4a:12:64:38:4e:8d:e0:f9:be:dc:5f:71:c2:
         50:d2:ac:4d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIj7aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
MmMzM2ZhMDE5MDFmNzAzZTM3MzBlMjhlOTllYjhiYzRjYmE2MmEwHhcNMjMwNzMw
MTM1OTM1WhcNMjUwNzMxMTM1OTM1WjAzMTEwLwYDVQQDEyhlYjhkMDQ3ZDA1NDRj
ZjNmNDIwNmIwMTRkZjE1OGMzOTUzOTI3NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn1xoTwh4WYEqqLVB+JcXx25WmC92YDZSjqL78AZ0jBz2peDT
P6B5pnlNzu2EuGrLvnVNyP+KWZDBGLgwr9spwCOe/qDJmCWJAf3zQrkfjbb+fZqP
RUwLhiQLPEj8bVDwPp4PHj8DDht3sCYO2TBgS4SpRawtGoGkFTG0m+3H9ce1dv27
uxa3lt/lOES7KirG4GTpYdoxmdp/OEpD4kn288N87agpkZPLWTfQMciuzMoXJRgO
XeAAiwM3P9CIgr3jLClI6rXYkb7aQT0TNLXnwGbu+5kvqRI/FaTv7co9/wHZkkXK
fwg8UCuEhAxO0USjOoliKK7XbnvWA8as2vEfdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKjQjukMLuGLoBlS5IGQ+qn6NFUOMB8GA1UdIwQYMBaAFH4HMs9XSoQiKTbT
qOxlLvM30lKkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmIyYzMz
ZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2L2ViOGQwNDdkMDU0NGNmM2Y0MjA2YjAxNGRmMTU4YzM5NTM5Mjc1MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvNmIyYzMzZmEwMTkwMWY3MDNlMzczMGUyOGU5OWViOGJjNGNiYTYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dUDANBgkqhkiG9w0BAQsFAAOCAQEAensgeYo+PECR8PwG
HrRfA63pMunXejXe8pjGlysCvkPFgZKXkgITwWY66wpwueLnnsJ28QDhZiHPr59B
I3P5CEEBPH18nXgH37NJRqvmef8s0ap2e3/D8UlzornJwL5NUJaVIHByxGpiXDwk
8/DBd+qhANfs96lWG/GLWij+JuFCxlio0PpvuaCzqCbrrFr6esbsFNwVRcsqjEUC
RmXUY81B8x6Etk4kl7IK/MmDXd5v+i2UIXLxkoxiwzkiDM6hR/DTaKnNCuvgjQY2
3RMyExXBzNJspoML9C6jUR5s+giaxk9WcBXAyddg4JTteopKEmQ4To3g+b7cX3HC
UNKsTQ==
-----END CERTIFICATE-----