Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/de427f5c0c26ee3cc17e915503d5eb629fd64615.roa
File:                     de427f5c0c26ee3cc17e915503d5eb629fd64615.roa (raw, json)
Hash identifier:          t6Ug08TKarKFrv+/YRrqF0rxe67BZwBSJW1PFZOoofQ=
Subject key identifier:   CC:47:68:B1:68:4C:02:3B:0A:A4:57:2B:76:9E:3A:71:CA:32:95:E7
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       16F26F
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/de427f5c0c26ee3cc17e915503d5eb629fd64615.roa
Signing time:             Thu 25 May 2023 19:16:11 +0000
ROA not before:           Wed 24 May 2023 19:16:11 +0000
ROA not after:            Sun 25 May 2025 19:16:11 +0000
asID:                     28000
IP address blocks:        201.219.252.0/22 maxlen: 22
                          2800:700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503855 (0x16f26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: May 24 19:16:11 2023 GMT
            Not After : May 25 19:16:11 2025 GMT
        Subject: CN=de427f5c0c26ee3cc17e915503d5eb629fd64615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:f5:8a:8a:2c:6e:ea:0f:95:e6:4a:7f:dd:
                    3c:6a:aa:e5:ef:fc:6b:ef:be:cd:a6:03:9e:60:a3:
                    c6:fc:0b:e1:3f:13:30:94:61:87:c3:79:f3:6c:00:
                    86:31:40:7f:e6:50:5a:f0:2f:6f:e7:a0:07:9e:4c:
                    83:a8:d1:d6:29:ab:1f:b5:58:ff:37:f9:1b:54:4b:
                    91:27:a3:3e:6f:87:5a:c1:d5:c0:b6:5b:28:61:77:
                    62:e6:7e:19:15:55:3f:3e:ad:d0:39:52:eb:36:67:
                    21:10:c0:b3:35:2b:ae:b3:6c:b3:15:ca:77:15:08:
                    54:ef:aa:93:3b:8f:55:81:f7:de:55:8d:13:b0:57:
                    09:d8:1f:54:1d:bd:32:e9:80:6a:bf:51:ce:27:ab:
                    fd:62:7b:8b:88:53:64:f3:11:ef:19:04:35:b7:56:
                    c7:6f:91:ff:45:0c:ee:f5:0d:4d:24:c2:db:53:e8:
                    59:bc:9a:c7:ae:f9:3c:20:7c:22:73:d2:9b:2f:ee:
                    8d:2c:00:09:4c:fb:0c:df:b3:da:36:4b:2b:77:23:
                    bb:4f:6a:d7:33:6d:2d:12:cf:30:fd:47:9d:e7:c5:
                    12:37:e1:97:b2:5e:fa:6e:d8:3b:ad:1d:f3:62:e6:
                    1f:70:c9:c1:f0:61:ed:14:1f:f3:cd:0a:f5:07:fe:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:47:68:B1:68:4C:02:3B:0A:A4:57:2B:76:9E:3A:71:CA:32:95:E7
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/de427f5c0c26ee3cc17e915503d5eb629fd64615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:12:a8:41:f9:3c:45:bf:d1:c8:f8:7e:57:27:39:ab:6c:
         a8:89:be:91:28:46:8b:b0:a8:04:b4:b1:07:59:88:e8:89:59:
         5f:4e:f4:75:34:af:1b:e1:db:68:cb:a1:99:2a:28:70:59:62:
         3c:8a:b6:90:40:ae:67:3e:8d:8d:7d:40:04:b4:04:8d:25:33:
         0e:c3:56:d4:6a:b2:9c:7d:13:ae:d5:a3:a9:4e:75:5d:2d:cc:
         9a:24:ea:c5:03:41:bf:86:ca:a3:d9:1f:98:4f:af:dc:e3:d1:
         44:f8:17:86:1f:1e:38:8f:5d:23:7c:3f:a2:0b:58:71:64:ef:
         33:46:fe:e4:8b:4b:77:5e:cd:42:9d:d8:28:2e:07:20:77:7a:
         01:46:81:3f:73:3d:ef:11:10:b8:f3:66:be:9d:a4:3c:ec:0d:
         4b:a9:f2:ab:97:90:a9:60:5a:b6:eb:74:03:4b:7d:8c:e4:4c:
         b2:c6:33:bc:ae:49:4a:37:24:32:2d:67:16:21:27:ad:42:2a:
         44:3d:ef:94:67:14:a3:39:7c:37:45:38:65:f4:67:0b:b0:f7:
         45:52:e3:00:d6:b8:2a:99:3c:b1:2f:32:de:49:29:eb:be:40:
         12:41:66:44:8d:e4:ba:09:ac:d8:22:55:43:be:56:24:26:8e:
         cc:d0:a3:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFvJvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YWI3NTA0YWRhMzQ5ZTRlZDU4MTZjZmIyNTMxMjkzYmY0MzMxYjcwHhcNMjMwNTI0
MTkxNjExWhcNMjUwNTI1MTkxNjExWjAzMTEwLwYDVQQDEyhkZTQyN2Y1YzBjMjZl
ZTNjYzE3ZTkxNTUwM2Q1ZWI2MjlmZDY0NjE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1JX1ioosbuoPleZKf908aqrl7/xr777NpgOeYKPG/AvhPxMw
lGGHw3nzbACGMUB/5lBa8C9v56AHnkyDqNHWKasftVj/N/kbVEuRJ6M+b4dawdXA
tlsoYXdi5n4ZFVU/Pq3QOVLrNmchEMCzNSuus2yzFcp3FQhU76qTO49VgffeVY0T
sFcJ2B9UHb0y6YBqv1HOJ6v9YnuLiFNk8xHvGQQ1t1bHb5H/RQzu9Q1NJMLbU+hZ
vJrHrvk8IHwic9KbL+6NLAAJTPsM37PaNksrdyO7T2rXM20tEs8w/Ued58USN+GX
sl76btg7rR3zYuYfcMnB8GHtFB/zzQr1B/7uQQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFMxHaLFoTAI7CqRXK3aeOnHKMpXnMB8GA1UdIwQYMBaAFGSGDU9swPmh2wvJ
RbSZ5gHyEydxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVhYjc1
MDRhZGEzNDllNGVkNTgxNmNmYjI1MzEyOTNiZjQzMzFiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3L2RlNDI3ZjVjMGMyNmVlM2NjMTdlOTE1NTAzZDVlYjYyOWZkNjQ2MTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMTVhYjc1MDRhZGEzNDllNGVkNTgxNmNmYjI1MzEyOTNiZjQzMzFi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAsnb/DANBAIAAjAHAwUAKAAHADANBgkqhkiG9w0BAQsFAAOC
AQEAfhISqEH5PEW/0cj4flcnOatsqIm+kShGi7CoBLSxB1mI6IlZX070dTSvG+Hb
aMuhmSoocFliPIq2kECuZz6NjX1ABLQEjSUzDsNW1GqynH0TrtWjqU51XS3MmiTq
xQNBv4bKo9kfmE+v3OPRRPgXhh8eOI9dI3w/ogtYcWTvM0b+5ItLd17NQp3YKC4H
IHd6AUaBP3M97xEQuPNmvp2kPOwNS6nyq5eQqWBatut0A0t9jORMssYzvK5JSjck
Mi1nFiEnrUIqRD3vlGcUozl8N0U4ZfRnC7D3RVLjANa4Kpk8sS8y3kkp675AEkFm
RI3kugms2CJVQ75WJCaOzNCjXQ==
-----END CERTIFICATE-----