Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/4f4943ea782232a9432c6ad00da28aa6a91002ee.roa
File:                     4f4943ea782232a9432c6ad00da28aa6a91002ee.roa (raw, json)
Hash identifier:          jH25kekSz2ZOIiyy5xzY5Z/HKI+z94TpX3q8c6V/njY=
Subject key identifier:   20:87:C1:11:30:6A:DB:16:AB:A6:0D:60:AE:25:0E:BC:33:F0:00:E0
Certificate issuer:       /CN=75efa7e220921478f459230041e65a4f7dc20ea6
Certificate serial:       26F850
Authority key identifier: 6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/4f4943ea782232a9432c6ad00da28aa6a91002ee.roa
Signing time:             Thu 15 Feb 2024 11:38:29 +0000
ROA not before:           Thu 15 Feb 2024 11:38:29 +0000
ROA not after:            Sun 15 Feb 2026 11:38:29 +0000
asID:                     10269
IP address blocks:        200.32.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553936 (0x26f850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75efa7e220921478f459230041e65a4f7dc20ea6
        Validity
            Not Before: Feb 15 11:38:29 2024 GMT
            Not After : Feb 15 11:38:29 2026 GMT
        Subject: CN=4f4943ea782232a9432c6ad00da28aa6a91002ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:c5:57:8d:6f:08:d8:a9:fe:0e:00:f1:73:
                    cb:eb:3c:ac:6c:1c:1b:0f:5d:04:7b:50:84:c6:4d:
                    5b:82:3f:98:9b:30:66:96:ff:58:b5:66:15:ea:0d:
                    9e:d2:3f:f9:40:06:1e:ba:24:ac:7d:fd:60:d3:19:
                    42:bc:b7:b4:d4:ba:a2:0b:ed:0a:1c:db:7d:81:b8:
                    3e:b4:7b:80:d5:7b:a0:cb:13:4d:cc:bf:de:46:61:
                    f9:6f:06:92:a7:c4:a6:a1:df:3d:13:b3:cb:c6:19:
                    53:b8:ae:07:dc:7d:4c:1a:55:cf:21:78:57:ea:8c:
                    a1:83:f2:8f:52:77:12:ee:c4:7b:d1:67:00:30:b1:
                    61:63:c6:25:62:94:e9:b7:af:bf:dc:a3:b0:96:0a:
                    89:48:36:56:fc:56:dc:3e:24:9f:2a:cc:0f:f3:cb:
                    2e:5b:17:ed:6b:9f:0a:8b:06:39:6a:65:4a:7f:79:
                    4d:ce:b7:58:aa:cf:5e:f2:71:85:40:36:3e:88:df:
                    31:f6:81:db:b0:6c:96:3a:90:84:28:92:4f:ba:37:
                    5a:8e:8b:55:3e:22:c1:64:c1:63:23:43:6c:d2:e0:
                    f4:a2:24:ec:86:d3:78:42:3c:45:ec:92:fa:c1:bd:
                    76:5b:7f:78:1a:af:f2:d1:e6:8c:31:1e:66:ac:d5:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:87:C1:11:30:6A:DB:16:AB:A6:0D:60:AE:25:0E:BC:33:F0:00:E0
            X509v3 Authority Key Identifier:
                keyid:6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/4f4943ea782232a9432c6ad00da28aa6a91002ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/75efa7e220921478f459230041e65a4f7dc20ea6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:63:f7:48:0f:a3:dc:79:b8:f8:66:1f:3c:79:89:d5:74:33:
         35:bd:b5:05:13:e5:2c:1a:f3:09:be:06:60:d5:f1:b0:bd:34:
         c1:9c:f1:91:e8:38:ea:06:2b:ad:53:0b:47:8e:65:a5:93:04:
         6b:a7:e9:a3:29:52:c2:59:f8:de:4f:37:3d:40:2b:29:b4:78:
         e0:ec:98:9c:c8:d1:38:df:36:ab:7c:29:cf:d6:e6:29:ce:7a:
         87:ca:3a:d6:f7:c5:07:e3:a3:1d:e1:a4:bc:33:fd:c8:77:06:
         3a:93:8e:63:92:8d:a6:a6:16:93:29:f6:17:d8:2d:7d:1c:63:
         d3:74:70:7a:c9:0b:a7:1c:3d:13:db:84:2c:5d:d4:96:f8:4d:
         f5:5d:b5:d4:01:3b:a4:9d:2c:fb:db:1b:a3:32:ca:98:45:db:
         cb:90:26:52:43:7b:50:eb:9d:0a:cd:c2:97:7b:e1:4a:00:d8:
         a2:46:1a:0d:5a:f3:fc:68:6b:0c:c9:7a:8c:f7:ce:72:9e:f7:
         79:f0:86:1a:05:3b:75:69:b8:fb:37:c2:1e:68:ac:c4:43:ad:
         b4:2a:3d:db:fd:06:38:a6:61:8d:41:77:a2:cd:ce:28:fa:30:
         53:59:7c:d9:31:a4:46:5f:e9:54:a2:a6:07:5c:89:98:aa:0d:
         35:ab:0c:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJvhQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc1
ZWZhN2UyMjA5MjE0NzhmNDU5MjMwMDQxZTY1YTRmN2RjMjBlYTYwHhcNMjQwMjE1
MTEzODI5WhcNMjYwMjE1MTEzODI5WjAzMTEwLwYDVQQDEyg0ZjQ5NDNlYTc4MjIz
MmE5NDMyYzZhZDAwZGEyOGFhNmE5MTAwMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtk7FV41vCNip/g4A8XPL6zysbBwbD10Ee1CExk1bgj+YmzBm
lv9YtWYV6g2e0j/5QAYeuiSsff1g0xlCvLe01LqiC+0KHNt9gbg+tHuA1XugyxNN
zL/eRmH5bwaSp8Smod89E7PLxhlTuK4H3H1MGlXPIXhX6oyhg/KPUncS7sR70WcA
MLFhY8YlYpTpt6+/3KOwlgqJSDZW/FbcPiSfKswP88suWxfta58KiwY5amVKf3lN
zrdYqs9e8nGFQDY+iN8x9oHbsGyWOpCEKJJPujdajotVPiLBZMFjI0Ns0uD0oiTs
htN4QjxF7JL6wb12W394Gq/y0eaMMR5mrNUYgwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCCHwREwatsWq6YNYK4lDrwz8ADgMB8GA1UdIwQYMBaAFGrwR9/X888xeZjG
JxB5fiEy5AsRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzVlZmE3
ZTIyMDkyMTQ3OGY0NTkyMzAwNDFlNjVhNGY3ZGMyMGVhNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzk0NGVmZjItYzAxYS00M2FjLWIyM2MtNzFhYjMx
MTVkMjE5LzRmNDk0M2VhNzgyMjMyYTk0MzJjNmFkMDBkYTI4YWE2YTkxMDAyZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jOTQ0ZWZmMi1jMDFhLTQzYWMtYjIzYy03MWFi
MzExNWQyMTkvNzVlZmE3ZTIyMDkyMTQ3OGY0NTkyMzAwNDFlNjVhNGY3ZGMyMGVh
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8ggwDANBgkqhkiG9w0BAQsFAAOCAQEAHmP3SA+j3Hm4+GYf
PHmJ1XQzNb21BRPlLBrzCb4GYNXxsL00wZzxkeg46gYrrVMLR45lpZMEa6fpoylS
wln43k83PUArKbR44OyYnMjRON82q3wpz9bmKc56h8o61vfFB+OjHeGkvDP9yHcG
OpOOY5KNpqYWkyn2F9gtfRxj03RweskLpxw9E9uELF3UlvhN9V211AE7pJ0s+9sb
ozLKmEXby5AmUkN7UOudCs3Cl3vhSgDYokYaDVrz/GhrDMl6jPfOcp73efCGGgU7
dWm4+zfCHmisxEOttCo92/0GOKZhjUF3os3OKPowU1l82TGkRl/pVKKmB1yJmKoN
NasMwA==
-----END CERTIFICATE-----