Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/4863d4cad324307b88c44ccec3c1fba74e093706.roa
File:                     4863d4cad324307b88c44ccec3c1fba74e093706.roa (raw, json)
Hash identifier:          FjyR6O/CCwYu6TFh3T/9PhOJb8gih6mAOqpwC0NKX2Q=
Subject key identifier:   6E:01:4E:D3:77:92:1D:4F:7F:7F:CE:4C:03:1D:CB:4B:94:D1:BF:2C
Certificate issuer:       /CN=e9a783da1aeb3cae7aede602a40423c90e2036c2
Certificate serial:       11C1DE
Authority key identifier: EC:B9:87:2D:66:22:F7:0B:84:27:A8:9B:15:84:A3:D0:68:14:0D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9a783da1aeb3cae7aede602a40423c90e2036c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/4863d4cad324307b88c44ccec3c1fba74e093706.roa
Signing time:             Sun 25 Jun 2023 08:30:00 +0000
ROA not before:           Sat 24 Jun 2023 08:30:00 +0000
ROA not after:            Mon 23 Jun 2025 08:30:00 +0000
asID:                     271793
IP address blocks:        201.131.65.0/24 maxlen: 24
                          2803:10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163742 (0x11c1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9a783da1aeb3cae7aede602a40423c90e2036c2
        Validity
            Not Before: Jun 24 08:30:00 2023 GMT
            Not After : Jun 23 08:30:00 2025 GMT
        Subject: CN=4863d4cad324307b88c44ccec3c1fba74e093706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:5f:b9:c7:bb:f9:60:f3:ed:d4:ea:dd:fc:
                    0b:2e:97:8e:c4:05:ab:fb:35:24:5e:b6:0f:0d:1e:
                    09:8c:f9:4e:f8:20:a4:d1:09:20:60:b5:62:1b:ad:
                    de:69:ad:50:cb:57:94:c0:1f:b9:80:84:9f:63:51:
                    4b:f0:bd:99:cc:6b:b8:a6:02:43:1b:97:79:1c:f7:
                    4f:9e:4c:cf:d8:4c:12:c0:30:00:d4:1b:e5:44:8f:
                    40:c5:26:f9:ae:e5:54:73:76:73:8c:67:ad:e2:b0:
                    b0:cf:56:66:ac:1b:82:30:28:8b:8b:5d:74:88:13:
                    04:22:f5:30:aa:cb:cf:55:5c:0e:09:03:f7:5e:43:
                    b7:e2:af:7e:4f:1b:b9:59:cc:c4:d4:9f:9e:a1:c9:
                    b2:fb:77:8f:70:b2:b0:90:af:6b:30:ad:0b:c3:87:
                    06:3f:cc:aa:93:ed:a2:e4:ef:7b:91:a1:f8:11:ec:
                    a7:68:fd:06:da:e0:e7:52:37:3c:af:03:05:a7:e2:
                    cb:20:a2:5a:d5:8d:b3:4b:71:c0:3e:03:68:61:18:
                    04:cd:61:6b:0f:2e:99:4b:7d:0f:4c:a3:a3:fd:9e:
                    e2:df:7a:39:92:ef:22:ae:94:20:26:6b:63:a4:b9:
                    50:ee:d3:6f:24:14:68:66:87:74:61:71:3a:1c:fd:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:01:4E:D3:77:92:1D:4F:7F:7F:CE:4C:03:1D:CB:4B:94:D1:BF:2C
            X509v3 Authority Key Identifier:
                keyid:EC:B9:87:2D:66:22:F7:0B:84:27:A8:9B:15:84:A3:D0:68:14:0D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9a783da1aeb3cae7aede602a40423c90e2036c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/4863d4cad324307b88c44ccec3c1fba74e093706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/e9a783da1aeb3cae7aede602a40423c90e2036c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.65.0/24
                IPv6:
                  2803:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:95:d5:84:69:ff:4c:29:40:43:ba:7f:00:2b:75:b7:67:
         a9:32:2b:2c:40:b8:50:5e:05:c6:5e:32:3a:68:84:c7:67:e4:
         b2:d6:97:7d:52:93:5f:a1:a3:c4:05:9b:35:9a:fb:a0:ee:83:
         3e:93:dd:c4:b2:d7:24:f4:aa:fd:25:76:73:65:2a:c3:c0:44:
         9f:59:24:01:5b:9f:3a:15:46:dc:fb:6c:fc:2a:f9:44:13:9b:
         96:02:9a:50:df:d5:c5:ac:87:00:ba:4c:e0:1a:64:ca:40:80:
         b6:a7:e6:57:9a:d5:38:c6:99:6a:a0:2b:9e:45:88:60:c6:5f:
         91:3c:32:18:4b:6b:f4:51:e8:8f:ec:91:ff:45:7f:cf:40:39:
         80:c2:ff:ca:e5:06:a9:ce:a2:6d:cb:04:3c:5a:11:04:51:d4:
         de:54:c8:b7:58:57:f3:d3:99:4c:ab:c7:0f:4a:1e:63:44:ac:
         28:59:89:35:21:3f:e0:24:7f:3d:91:c3:f1:57:1f:58:b9:c0:
         3b:d5:9a:76:2e:40:89:f6:08:3e:38:74:b4:1f:7f:25:54:f3:
         98:9d:1f:1f:3f:37:e2:89:b4:be:53:0f:a4:4e:f5:e7:51:28:
         1d:3c:13:21:97:d1:e2:1c:50:2c:4d:17:9b:31:62:06:c7:0c:
         b9:58:6c:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEcHeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
YTc4M2RhMWFlYjNjYWU3YWVkZTYwMmE0MDQyM2M5MGUyMDM2YzIwHhcNMjMwNjI0
MDgzMDAwWhcNMjUwNjIzMDgzMDAwWjAzMTEwLwYDVQQDEyg0ODYzZDRjYWQzMjQz
MDdiODhjNDRjY2VjM2MxZmJhNzRlMDkzNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq8xfuce7+WDz7dTq3fwLLpeOxAWr+zUkXrYPDR4JjPlO+CCk
0QkgYLViG63eaa1Qy1eUwB+5gISfY1FL8L2ZzGu4pgJDG5d5HPdPnkzP2EwSwDAA
1BvlRI9AxSb5ruVUc3ZzjGet4rCwz1ZmrBuCMCiLi110iBMEIvUwqsvPVVwOCQP3
XkO34q9+Txu5WczE1J+eocmy+3ePcLKwkK9rMK0Lw4cGP8yqk+2i5O97kaH4Eeyn
aP0G2uDnUjc8rwMFp+LLIKJa1Y2zS3HAPgNoYRgEzWFrDy6ZS30PTKOj/Z7i33o5
ku8irpQgJmtjpLlQ7tNvJBRoZod0YXE6HP1v3wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFG4BTtN3kh1Pf3/OTAMdy0uU0b8sMB8GA1UdIwQYMBaAFOy5hy1mIvcLhCeo
mxWEo9BoFA1cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTlhNzgz
ZGExYWViM2NhZTdhZWRlNjAyYTQwNDIzYzkwZTIwMzZjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDRhOWM4OGQtYWFlMC00NzdlLTkxZDgtOGI1NzI5
NmEwNTQ3LzQ4NjNkNGNhZDMyNDMwN2I4OGM0NGNjZWMzYzFmYmE3NGUwOTM3MDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNGE5Yzg4ZC1hYWUwLTQ3N2UtOTFkOC04YjU3
Mjk2YTA1NDcvZTlhNzgzZGExYWViM2NhZTdhZWRlNjAyYTQwNDIzYzkwZTIwMzZj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAMmDQTANBAIAAjAHAwUAKAMAEDANBgkqhkiG9w0BAQsFAAOC
AQEAjEKV1YRp/0wpQEO6fwArdbdnqTIrLEC4UF4Fxl4yOmiEx2fkstaXfVKTX6Gj
xAWbNZr7oO6DPpPdxLLXJPSq/SV2c2Uqw8BEn1kkAVufOhVG3Pts/Cr5RBOblgKa
UN/VxayHALpM4BpkykCAtqfmV5rVOMaZaqArnkWIYMZfkTwyGEtr9FHoj+yR/0V/
z0A5gML/yuUGqc6ibcsEPFoRBFHU3lTIt1hX89OZTKvHD0oeY0SsKFmJNSE/4CR/
PZHD8VcfWLnAO9Wadi5AifYIPjh0tB9/JVTzmJ0fHz834om0vlMPpE7151EoHTwT
IZfR4hxQLE0XmzFiBscMuVhsdQ==
-----END CERTIFICATE-----