Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa
File:                     af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa (raw, json)
Hash identifier:          ckATFjYfMVTieZZEjtOtxDtIjwjq5wbD3W0jhOXJTO8=
Subject key identifier:   3E:51:1D:16:B1:49:7F:27:71:87:C8:5B:61:01:FF:39:84:39:2B:1B
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       25976C
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa
Signing time:             Mon 18 Sep 2023 11:04:12 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     138915
IP address blocks:        190.98.163.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463596 (0x25976c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=af743ab4c0bc3754b1a4eb3ecd879f236de31680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:0f:f1:85:a7:62:f0:29:d7:3f:d8:e3:11:
                    cd:7a:40:81:b1:b1:f0:aa:64:37:c8:e8:a1:59:55:
                    e5:17:48:ef:98:f4:ab:e1:f9:2a:2f:29:a4:23:23:
                    25:04:5c:14:2d:d9:51:5c:fe:c1:69:4e:71:dc:15:
                    1a:6f:ab:c3:58:14:98:16:a1:16:96:14:e8:b4:4f:
                    1e:43:52:5d:01:57:66:1c:9b:8f:71:d6:c0:42:61:
                    0d:7f:43:2d:f8:4f:3e:5a:d0:74:9b:2e:8e:7a:21:
                    7f:b2:a9:01:01:33:d1:09:64:df:d1:24:cb:7b:28:
                    96:bd:72:db:30:c7:db:89:6e:fe:df:07:f7:93:76:
                    36:8e:d7:60:79:ba:de:19:43:8f:d4:e8:e8:7f:de:
                    36:0a:b4:5b:98:49:28:7d:77:81:2e:b0:0d:68:e2:
                    11:c2:04:58:0e:fd:d5:4f:77:91:5c:53:62:54:95:
                    29:7b:5f:35:01:8e:98:fb:2a:07:8f:1c:8c:ea:a3:
                    c2:a4:16:15:09:71:b9:14:72:b0:74:be:cd:ac:94:
                    81:81:c7:6c:79:d5:bc:fb:75:7b:7e:55:6f:f9:d6:
                    95:59:0c:2d:22:4c:bb:c4:cb:da:1e:60:2d:87:8f:
                    87:8a:8f:6d:7d:87:24:12:8d:83:22:b2:78:3e:4b:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:1D:16:B1:49:7F:27:71:87:C8:5B:61:01:FF:39:84:39:2B:1B
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/af743ab4c0bc3754b1a4eb3ecd879f236de31680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.163.0/25

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:6a:5d:bc:d9:5b:8b:0f:ed:c3:ad:0f:91:58:c3:b1:49:
         77:fe:79:80:0a:4b:23:1d:4c:55:48:30:ee:e2:36:fc:37:b2:
         20:8d:a4:7b:c1:ed:78:cf:9a:be:30:0c:77:bb:e3:82:07:0e:
         56:b8:27:7b:30:e7:73:5c:9d:62:0c:20:ca:b9:fa:4e:aa:a8:
         58:75:16:cb:17:45:c0:93:1f:90:28:76:44:c8:19:5a:12:e2:
         d9:f2:ce:13:0b:7e:fd:a4:a3:c9:75:33:bf:b9:e1:b7:74:2e:
         b3:e5:83:31:93:98:82:29:0c:33:76:53:e9:82:37:df:a3:e0:
         8d:43:c1:ba:3a:6a:e3:bd:c7:f1:b7:0b:fb:d1:cd:42:70:22:
         99:76:ff:60:49:a5:06:af:f4:b8:1b:07:fa:28:08:32:83:08:
         e7:a8:80:fb:a5:e8:89:54:c7:cf:8e:6e:65:c1:10:6f:b3:b2:
         a4:70:36:7a:81:6b:ed:d6:aa:c2:c0:0e:9e:87:7c:b4:c8:1c:
         6c:1c:7e:db:41:87:46:9f:b5:09:88:82:da:c6:b7:ed:94:aa:
         59:f9:8d:ca:2f:f1:29:ac:d7:88:59:d0:91:fd:ff:19:38:4c:
         b6:8f:20:3a:49:17:03:af:f0:b4:95:bd:46:ff:4c:40:a4:15:
         2a:54:08:4e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJZdsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjMwOTE3
MTEwNDExWhcNMjUwOTE4MTEwNDExWjAzMTEwLwYDVQQDEyhhZjc0M2FiNGMwYmMz
NzU0YjFhNGViM2VjZDg3OWYyMzZkZTMxNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqgcP8YWnYvAp1z/Y4xHNekCBsbHwqmQ3yOihWVXlF0jvmPSr
4fkqLymkIyMlBFwULdlRXP7BaU5x3BUab6vDWBSYFqEWlhTotE8eQ1JdAVdmHJuP
cdbAQmENf0Mt+E8+WtB0my6OeiF/sqkBATPRCWTf0STLeyiWvXLbMMfbiW7+3wf3
k3Y2jtdgebreGUOP1Ojof942CrRbmEkofXeBLrANaOIRwgRYDv3VT3eRXFNiVJUp
e181AY6Y+yoHjxyM6qPCpBYVCXG5FHKwdL7NrJSBgcdsedW8+3V7flVv+daVWQwt
Iky7xMvaHmAth4+Hio9tfYckEo2DIrJ4PkssEwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFD5RHRaxSX8ncYfIW2EB/zmEOSsbMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkL2FmNzQzYWI0YzBiYzM3NTRiMWE0ZWIzZWNkODc5ZjIzNmRlMzE2ODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFB75iowAwDQYJKoZIhvcNAQELBQADggEBABOzal282VuLD+3D
rQ+RWMOxSXf+eYAKSyMdTFVIMO7iNvw3siCNpHvB7XjPmr4wDHe744IHDla4J3sw
53NcnWIMIMq5+k6qqFh1FssXRcCTH5AodkTIGVoS4tnyzhMLfv2ko8l1M7+54bd0
LrPlgzGTmIIpDDN2U+mCN9+j4I1Dwbo6auO9x/G3C/vRzUJwIpl2/2BJpQav9Lgb
B/ooCDKDCOeogPul6IlUx8+ObmXBEG+zsqRwNnqBa+3WqsLADp6HfLTIHGwcfttB
h0aftQmIgtrGt+2Uqln5jcov8Sms14hZ0JH9/xk4TLaPIDpJFwOv8LSVvUb/TECk
FSpUCE4=
-----END CERTIFICATE-----