Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/8ae4abdb69ffe1e50f9039d2dc167b94b03fa648.roa
File:                     8ae4abdb69ffe1e50f9039d2dc167b94b03fa648.roa (raw, json)
Hash identifier:          bPX92TfN+rYtp4lBxnLpsUUw2Kuwzgsn4VVODMsk+b8=
Subject key identifier:   13:17:84:E5:38:B0:D3:CA:0B:2D:79:91:28:CF:38:4E:78:41:81:97
Certificate issuer:       /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial:       0FEAD5
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/8ae4abdb69ffe1e50f9039d2dc167b94b03fa648.roa
Signing time:             Tue 09 Jan 2024 13:48:22 +0000
ROA not before:           Tue 09 Jan 2024 13:48:22 +0000
ROA not after:            Fri 09 Jan 2026 13:48:22 +0000
asID:                     272043
IP address blocks:        131.72.136.0/22 maxlen: 24
                          2803:6d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043157 (0xfead5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Validity
            Not Before: Jan  9 13:48:22 2024 GMT
            Not After : Jan  9 13:48:22 2026 GMT
        Subject: CN=8ae4abdb69ffe1e50f9039d2dc167b94b03fa648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:26:33:9a:f6:a7:97:28:9d:34:e6:ad:b4:
                    bc:82:b3:8d:6f:c6:88:81:34:47:3d:96:c5:0c:7d:
                    66:05:57:6e:84:23:e4:e1:87:1b:30:01:fc:c9:ee:
                    4e:a3:79:31:c9:9c:37:b2:a7:9f:bf:fd:b7:7c:11:
                    8a:bf:10:4e:71:a9:3b:b4:93:55:11:a7:13:2a:29:
                    2e:93:56:82:33:d6:f6:5a:c9:9a:5b:bc:c7:21:ce:
                    6e:fe:f8:c3:59:06:47:87:9b:28:a8:af:6c:10:77:
                    77:d4:10:79:78:bf:fc:a5:a9:31:38:23:48:57:19:
                    69:51:ab:f9:89:17:71:f7:be:88:95:9d:5f:2c:5f:
                    6a:77:4c:d5:2f:c5:5b:1d:49:34:f1:bc:f0:5b:fa:
                    57:96:e1:70:aa:af:a1:52:c6:ef:10:b6:60:e8:76:
                    75:1a:b0:d6:1d:4b:0d:35:7b:45:70:64:46:d1:a0:
                    a3:a9:74:c6:fd:ca:a2:32:2e:c5:63:f2:b7:b2:13:
                    cc:0d:f2:79:29:06:47:9e:33:1a:1e:fe:b7:af:6e:
                    3e:92:7e:0a:f8:2b:f5:dd:36:1f:1b:60:f3:d6:fd:
                    68:64:84:8f:f0:c9:e1:d5:d7:25:da:84:33:48:3d:
                    9f:cf:cb:cc:ac:8a:83:5d:af:f3:ae:e7:37:ce:f8:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:17:84:E5:38:B0:D3:CA:0B:2D:79:91:28:CF:38:4E:78:41:81:97
            X509v3 Authority Key Identifier:
                keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/8ae4abdb69ffe1e50f9039d2dc167b94b03fa648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.136.0/22
                IPv6:
                  2803:6d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:74:54:1a:aa:a0:1a:e8:7f:ad:1e:77:e4:58:35:00:5d:13:
         9e:78:03:c1:43:6a:79:a0:c0:8c:3f:47:98:38:90:1e:9a:07:
         c9:44:bf:c2:ba:e5:61:5e:01:c3:87:61:79:c5:81:f3:e9:ed:
         93:8e:ad:a2:5e:71:95:85:cf:ca:83:a7:f7:10:11:e9:e9:8e:
         6c:f1:ff:e1:fa:b9:e0:4c:6a:e6:c9:00:db:ee:99:ff:e9:a6:
         bf:94:b7:79:f5:56:99:9a:58:cc:f2:36:b0:76:e6:c2:19:21:
         86:54:ae:a7:ee:33:c8:5f:48:fa:a5:34:6e:f5:5d:76:62:83:
         c2:22:27:1f:9f:e3:dd:5a:55:7c:0b:49:7c:b2:ab:7a:cb:a2:
         15:5e:01:3b:55:5c:1f:1e:56:68:5a:0d:7c:9b:25:51:48:3d:
         d9:a4:bd:44:95:00:41:e2:2b:17:01:16:49:65:ef:95:f9:07:
         5d:12:ba:18:12:a8:f9:86:c4:b4:23:3e:98:31:57:9b:2b:9a:
         f3:45:ce:a6:17:10:07:d4:b4:d3:3a:25:56:e4:28:3d:5e:f7:
         81:be:f0:d0:6b:63:3c:c8:21:ce:c3:4a:0c:cd:e6:0f:df:89:
         85:e8:07:59:16:3d:a7:32:68:8d:d1:8d:b3:76:14:92:63:72:
         26:88:35:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDD+rVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUz
YTg0MTMzZWNlYTg3OTFlMDc1YzI4MzQ4YTVjNzgwNTYxNmNjNTIwHhcNMjQwMTA5
MTM0ODIyWhcNMjYwMTA5MTM0ODIyWjAzMTEwLwYDVQQDEyg4YWU0YWJkYjY5ZmZl
MWU1MGY5MDM5ZDJkYzE2N2I5NGIwM2ZhNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnpImM5r2p5conTTmrbS8grONb8aIgTRHPZbFDH1mBVduhCPk
4YcbMAH8ye5Oo3kxyZw3sqefv/23fBGKvxBOcak7tJNVEacTKikuk1aCM9b2Wsma
W7zHIc5u/vjDWQZHh5soqK9sEHd31BB5eL/8pakxOCNIVxlpUav5iRdx976IlZ1f
LF9qd0zVL8VbHUk08bzwW/pXluFwqq+hUsbvELZg6HZ1GrDWHUsNNXtFcGRG0aCj
qXTG/cqiMi7FY/K3shPMDfJ5KQZHnjMaHv63r24+kn4K+Cv13TYfG2Dz1v1oZISP
8Mnh1dcl2oQzSD2fz8vMrIqDXa/zruc3zvis1QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBMXhOU4sNPKCy15kSjPOE54QYGXMB8GA1UdIwQYMBaAFPDOJQheC3d0fFSp
w3dZT0zXraxSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTNhODQx
MzNlY2VhODc5MWUwNzVjMjgzNDhhNWM3ODA1NjE2Y2M1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDNiM2QyMjQtOGM1MC00N2E0LTg4NmEtMDEzODA5
ZmY3MTRjLzhhZTRhYmRiNjlmZmUxZTUwZjkwMzlkMmRjMTY3Yjk0YjAzZmE2NDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kM2IzZDIyNC04YzUwLTQ3YTQtODg2YS0wMTM4
MDlmZjcxNGMvNTNhODQxMzNlY2VhODc5MWUwNzVjMjgzNDhhNWM3ODA1NjE2Y2M1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoNIiDANBAIAAjAHAwUAKANtEDANBgkqhkiG9w0BAQsFAAOC
AQEAsXRUGqqgGuh/rR535Fg1AF0TnngDwUNqeaDAjD9HmDiQHpoHyUS/wrrlYV4B
w4dhecWB8+ntk46tol5xlYXPyoOn9xAR6emObPH/4fq54Exq5skA2+6Z/+mmv5S3
efVWmZpYzPI2sHbmwhkhhlSup+4zyF9I+qU0bvVddmKDwiInH5/j3VpVfAtJfLKr
esuiFV4BO1VcHx5WaFoNfJslUUg92aS9RJUAQeIrFwEWSWXvlfkHXRK6GBKo+YbE
tCM+mDFXmyua80XOphcQB9S00zolVuQoPV73gb7w0GtjPMghzsNKDM3mD9+JhegH
WRY9pzJojdGNs3YUkmNyJog1Pg==
-----END CERTIFICATE-----