Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/e57f3ce1d63a7b12f5cbb21aa0d5a6a1cffc84fe.roa
File:                     e57f3ce1d63a7b12f5cbb21aa0d5a6a1cffc84fe.roa (raw, json)
Hash identifier:          JS572+lZP1SqBX7z1496dhPlfm1b5l7lsgPF4B7/gjc=
Subject key identifier:   72:E3:6C:B6:4A:B1:99:4D:64:57:E9:E6:7D:FD:26:7E:64:BA:D3:E3
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       232774
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/e57f3ce1d63a7b12f5cbb21aa0d5a6a1cffc84fe.roa
Signing time:             Thu 31 Aug 2023 13:53:29 +0000
ROA not before:           Wed 30 Aug 2023 13:53:29 +0000
ROA not after:            Sun 31 Aug 2025 13:53:29 +0000
asID:                     263242
IP address blocks:        200.12.248.0/24 maxlen: 24
                          200.12.254.0/24 maxlen: 24
                          2803:1180::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2303860 (0x232774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Aug 30 13:53:29 2023 GMT
            Not After : Aug 31 13:53:29 2025 GMT
        Subject: CN=e57f3ce1d63a7b12f5cbb21aa0d5a6a1cffc84fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:74:d5:a6:38:ab:bd:0e:e5:c9:95:af:81:
                    52:4f:86:36:cd:3b:8d:b5:5c:ae:57:a8:1a:3c:bf:
                    fa:0e:88:21:30:4a:e7:1f:5c:2a:5d:ca:46:43:be:
                    41:ac:a5:4b:ed:54:2a:5d:45:99:34:10:51:b4:f1:
                    88:6a:25:f2:dd:10:10:ca:ba:3b:5a:b3:57:ab:49:
                    b9:32:1d:26:3f:9e:b6:b3:26:88:a2:27:b0:c3:b6:
                    1c:fb:0d:c4:04:a8:78:b0:8b:dd:a6:c3:47:64:53:
                    1c:a0:5b:e1:02:ef:29:50:6a:59:12:fe:45:6e:84:
                    51:94:1a:b3:a3:0f:eb:bf:16:a5:89:80:bf:1a:bb:
                    56:37:1d:5f:3f:35:4b:83:47:94:a2:4d:da:72:4e:
                    ca:5d:e0:3b:89:79:67:ca:f2:10:7f:3d:04:e9:01:
                    db:20:19:ab:75:c1:75:f0:dd:9e:11:49:41:a7:44:
                    2c:18:7a:27:40:da:b2:d6:f3:a6:be:ee:4b:79:d7:
                    ba:be:a7:aa:df:6f:d9:7e:ed:f7:44:48:f2:87:e4:
                    cc:26:9f:5c:b3:bf:26:b7:a8:d8:a4:76:b0:33:3d:
                    6e:23:d2:aa:ff:56:50:c0:64:99:1a:b9:0d:c5:f9:
                    56:4f:72:8b:3a:0b:35:c6:0c:ec:0d:3c:10:37:6c:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E3:6C:B6:4A:B1:99:4D:64:57:E9:E6:7D:FD:26:7E:64:BA:D3:E3
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/e57f3ce1d63a7b12f5cbb21aa0d5a6a1cffc84fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.248.0/24
                  200.12.254.0/24
                IPv6:
                  2803:1180::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:88:08:d0:d8:86:d9:f1:c5:ff:e6:a4:a3:e2:b7:b9:40:00:
         c9:9f:c4:a9:a1:34:20:50:22:4f:05:a0:8c:b5:95:ea:3c:78:
         b4:f9:00:d8:40:25:32:e7:7e:78:9c:ae:c2:b3:06:d1:3d:ae:
         df:78:29:2f:9c:2c:24:37:f1:e8:5b:8b:a8:ec:08:1a:05:ee:
         ee:8d:03:68:7a:61:03:32:8a:41:ec:84:5d:23:12:8f:d3:93:
         d7:d7:f5:02:e9:02:a2:5d:9e:30:7d:ce:8f:ea:8e:cf:4e:1d:
         a8:a3:6f:23:17:d5:69:dc:3a:54:aa:e7:1c:ee:a0:71:27:34:
         78:f9:b4:b7:5f:bd:f2:27:b2:2e:4d:4f:67:f9:50:fe:89:64:
         7e:b0:0e:25:ca:7e:54:b3:7b:1d:47:fd:7e:ba:3e:2d:a4:93:
         95:08:52:ec:59:9b:d2:89:95:ec:c3:87:dd:27:40:e1:c3:45:
         d3:f7:aa:7c:e5:07:d4:f9:a9:f6:72:2c:5d:67:a7:79:70:26:
         05:7e:83:60:00:94:7f:df:23:58:d7:e4:a2:6e:93:8c:c4:12:
         22:ff:93:a6:ce:7c:cd:e1:24:29:5c:ae:f4:ba:91:fa:cb:20:
         2f:ca:86:d8:70:99:a8:1e:28:12:48:d8:b5:69:71:02:d6:bc:
         d9:8b:6b:ae
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDIyd0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NjUxNGQ4OTk0OGU2ZDQxOTg4YjYwYzEyMjg3NjVhMjRmZDc1MzYwHhcNMjMwODMw
MTM1MzI5WhcNMjUwODMxMTM1MzI5WjAzMTEwLwYDVQQDEyhlNTdmM2NlMWQ2M2E3
YjEyZjVjYmIyMWFhMGQ1YTZhMWNmZmM4NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5qd01aY4q70O5cmVr4FST4Y2zTuNtVyuV6gaPL/6DoghMErn
H1wqXcpGQ75BrKVL7VQqXUWZNBBRtPGIaiXy3RAQyro7WrNXq0m5Mh0mP562syaI
oieww7Yc+w3EBKh4sIvdpsNHZFMcoFvhAu8pUGpZEv5FboRRlBqzow/rvxaliYC/
GrtWNx1fPzVLg0eUok3ack7KXeA7iXlnyvIQfz0E6QHbIBmrdcF18N2eEUlBp0Qs
GHonQNqy1vOmvu5Lede6vqeq32/Zfu33REjyh+TMJp9cs78mt6jYpHawMz1uI9Kq
/1ZQwGSZGrkNxflWT3KLOgs1xgzsDTwQN2zCfQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFHLjbLZKsZlNZFfp5n39Jn5kutPjMB8GA1UdIwQYMBaAFLvMThKAHApZs7+j
7pqyKKvzM9B9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ2NTE0
ZDg5OTQ4ZTZkNDE5ODhiNjBjMTIyODc2NWEyNGZkNzUzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDE4YmExMzgtZmVhOS00OWExLWI0Y2YtMmY5OTg4
YWNlMWM4L2U1N2YzY2UxZDYzYTdiMTJmNWNiYjIxYWEwZDVhNmExY2ZmYzg0ZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMThiYTEzOC1mZWE5LTQ5YTEtYjRjZi0yZjk5
ODhhY2UxYzgvNGQ2NTE0ZDg5OTQ4ZTZkNDE5ODhiNjBjMTIyODc2NWEyNGZkNzUz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAMgM+AMEAMgM/jANBAIAAjAHAwUAKAMRgDANBgkqhkiG9w0B
AQsFAAOCAQEAE4gI0NiG2fHF/+ako+K3uUAAyZ/EqaE0IFAiTwWgjLWV6jx4tPkA
2EAlMud+eJyuwrMG0T2u33gpL5wsJDfx6FuLqOwIGgXu7o0DaHphAzKKQeyEXSMS
j9OT19f1AukCol2eMH3Oj+qOz04dqKNvIxfVadw6VKrnHO6gcSc0ePm0t1+98iey
Lk1PZ/lQ/olkfrAOJcp+VLN7HUf9fro+LaSTlQhS7Fmb0omV7MOH3SdA4cNF0/eq
fOUH1Pmp9nIsXWeneXAmBX6DYACUf98jWNfkom6TjMQSIv+Tps58zeEkKVyu9LqR
+ssgL8qG2HCZqB4oEkjYtWlxAta82Ytrrg==
-----END CERTIFICATE-----