Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/e316bb37932ff9312cb68982858da10d96d43e32.roa
File:                     e316bb37932ff9312cb68982858da10d96d43e32.roa (raw, json)
Hash identifier:          WVriRkVNhYfsaI/diyvMrzM/VQhksIXv9XY5JRjV3T0=
Subject key identifier:   2D:3D:2B:81:CA:46:74:C1:8D:00:65:FD:BD:3A:0D:BF:1E:CB:07:EC
Certificate issuer:       /CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Certificate serial:       1C0C7F
Authority key identifier: 54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/e316bb37932ff9312cb68982858da10d96d43e32.roa
Signing time:             Thu 08 Jun 2023 02:51:30 +0000
ROA not before:           Wed 07 Jun 2023 02:51:30 +0000
ROA not after:            Sun 08 Jun 2025 02:51:30 +0000
asID:                     262253
IP address blocks:        181.224.225.0/24 maxlen: 24
                          181.224.231.0/24 maxlen: 24
                          181.224.232.0/24 maxlen: 24
                          181.224.235.0/24 maxlen: 24
                          2803:2500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838207 (0x1c0c7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
        Validity
            Not Before: Jun  7 02:51:30 2023 GMT
            Not After : Jun  8 02:51:30 2025 GMT
        Subject: CN=e316bb37932ff9312cb68982858da10d96d43e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:15:95:38:e9:89:d0:94:43:65:ef:d0:ad:
                    2f:e3:ce:1e:cf:63:86:85:e8:67:3e:ce:41:12:b8:
                    68:76:49:dd:79:a9:5e:9a:84:2c:24:7b:a6:16:94:
                    20:f9:f2:5e:01:e1:90:2e:39:88:b2:bb:38:6b:c4:
                    c0:7e:fe:ee:4f:03:45:29:8f:70:51:51:b2:28:2b:
                    a0:0f:80:7f:49:5d:5b:88:b8:6e:d3:37:41:6c:37:
                    bb:b4:6b:83:5b:b6:be:16:82:3c:f7:fe:84:9f:08:
                    fa:9f:d4:be:7d:d7:c5:f6:87:f6:b1:b2:85:f6:06:
                    bd:43:54:7f:d8:b5:c0:c2:1a:27:05:e9:04:84:ea:
                    c4:17:da:90:45:68:2c:0b:28:b9:2a:e2:ce:25:1c:
                    83:12:a7:22:50:e2:c2:6a:17:ca:a4:ca:b4:c7:9a:
                    80:e0:94:88:5f:eb:ca:4e:f5:df:2a:1f:f5:62:17:
                    14:36:2b:35:fc:3f:ba:75:77:d1:48:ed:1e:4a:29:
                    62:74:ff:ed:60:fc:ac:b9:02:e0:64:86:a7:37:70:
                    ec:c7:71:1a:f6:e2:63:f8:de:67:20:4a:6e:73:ea:
                    e3:b4:b6:ef:b4:a4:f1:12:00:c9:94:34:63:ab:f4:
                    d1:18:d4:35:da:5d:69:a7:6e:cb:42:f1:af:bc:ed:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:2B:81:CA:46:74:C1:8D:00:65:FD:BD:3A:0D:BF:1E:CB:07:EC
            X509v3 Authority Key Identifier:
                keyid:54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/e316bb37932ff9312cb68982858da10d96d43e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.225.0/24
                  181.224.231.0-181.224.232.255
                  181.224.235.0/24
                IPv6:
                  2803:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:a1:ef:8b:2f:ee:fe:1b:34:6b:97:cc:8f:d6:28:eb:5b:
         30:b6:19:4a:aa:71:1f:fe:60:47:b2:5b:4c:4b:88:e1:6b:f7:
         65:f0:05:81:a0:47:8a:54:83:0e:a4:cf:89:a6:a6:6f:6b:b8:
         0a:30:8c:3b:ea:10:91:95:f6:29:a2:06:60:a8:6a:ee:2a:be:
         2c:d2:5a:b2:b5:b2:8d:f7:bd:7b:79:06:01:55:ef:37:16:e8:
         61:28:90:d4:e1:56:eb:c3:ec:fd:a8:51:77:57:d2:42:1a:e6:
         8f:97:0f:5c:e9:a6:54:ab:4b:02:1d:6a:38:e5:02:92:ee:a2:
         ed:3f:d1:38:6d:0c:a5:b2:a0:92:bb:f0:7b:9c:e8:c2:90:30:
         27:74:45:9f:68:42:b5:cb:96:b8:c4:1b:7b:67:e8:7c:33:cd:
         3e:d5:b2:6c:04:39:13:8f:21:5d:a0:d2:fc:66:ae:a6:7d:c3:
         d2:73:99:a5:8a:b8:95:af:7b:33:0c:1a:7a:5d:82:3e:30:01:
         9f:f7:1e:ee:1f:8b:49:dc:da:0c:e8:b4:83:df:b8:b4:95:fb:
         f8:27:5c:00:44:65:97:cc:77:bd:13:88:0d:0b:7a:fc:23:03:
         a2:90:e6:47:28:a3:27:27:a2:08:70:7a:ed:fa:b0:49:43:79:
         d6:2a:bb:ac
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIDHAx/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
NTNmOGJkN2IzYmJlZTllNDk0MDBkOTEzZTM3YzJmNmViMTBiZGQwHhcNMjMwNjA3
MDI1MTMwWhcNMjUwNjA4MDI1MTMwWjAzMTEwLwYDVQQDEyhlMzE2YmIzNzkzMmZm
OTMxMmNiNjg5ODI4NThkYTEwZDk2ZDQzZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs18VlTjpidCUQ2Xv0K0v484ez2OGhehnPs5BErhodkndeale
moQsJHumFpQg+fJeAeGQLjmIsrs4a8TAfv7uTwNFKY9wUVGyKCugD4B/SV1biLhu
0zdBbDe7tGuDW7a+FoI89/6Enwj6n9S+fdfF9of2sbKF9ga9Q1R/2LXAwhonBekE
hOrEF9qQRWgsCyi5KuLOJRyDEqciUOLCahfKpMq0x5qA4JSIX+vKTvXfKh/1YhcU
Nis1/D+6dXfRSO0eSilidP/tYPysuQLgZIanN3Dsx3Ea9uJj+N5nIEpuc+rjtLbv
tKTxEgDJlDRjq/TRGNQ12l1pp27LQvGvvO14VQIDAQABo4ICfjCCAnowHQYDVR0O
BBYEFC09K4HKRnTBjQBl/b06Db8eywfsMB8GA1UdIwQYMBaAFFSGoHCK6o+D3mHl
y0HHgv8ebqoyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmY1M2Y4
YmQ3YjNiYmVlOWU0OTQwMGQ5MTNlMzdjMmY2ZWIxMGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDBmYzZjZGEtZTU1ZS00NzUzLTljMWItM2Q2NWZh
MTJjMDA5L2UzMTZiYjM3OTMyZmY5MzEyY2I2ODk4Mjg1OGRhMTBkOTZkNDNlMzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMGZjNmNkYS1lNTVlLTQ3NTMtOWMxYi0zZDY1
ZmExMmMwMDkvMmY1M2Y4YmQ3YjNiYmVlOWU0OTQwMGQ5MTNlMzdjMmY2ZWIxMGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBCBggrBgEFBQcBBwEB/wQz
MDEwIAQCAAEwGgMEALXg4TAMAwQAteDnAwQAteDoAwQAteDrMA0EAgACMAcDBQAo
AyUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvVqHviy/u/hs0a5fMj9Yo61swthlKqnEf
/mBHsltMS4jha/dl8AWBoEeKVIMOpM+JpqZva7gKMIw76hCRlfYpogZgqGruKr4s
0lqytbKN9717eQYBVe83FuhhKJDU4Vbrw+z9qFF3V9JCGuaPlw9c6aZUq0sCHWo4
5QKS7qLtP9E4bQylsqCSu/B7nOjCkDAndEWfaEK1y5a4xBt7Z+h8M80+1bJsBDkT
jyFdoNL8Zq6mfcPSc5mliriVr3szDBp6XYI+MAGf9x7uH4tJ3NoM6LSD37i0lfv4
J1wARGWXzHe9E4gNC3r8IwOikOZHKKMnJ6IIcHrt+rBJQ3nWKrus
-----END CERTIFICATE-----