Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a72a7c18faf344151ab935bcd41278c9b3b18594.roa
File:                     a72a7c18faf344151ab935bcd41278c9b3b18594.roa (raw, json)
Hash identifier:          O3150vL0spgORSE0OXtaU77PySWn+gfOvXgeVcHebko=
Subject key identifier:   A1:F2:DE:A5:57:9A:2F:6E:09:0D:A9:D6:6B:72:5A:D7:0E:32:FD:7B
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       029102
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a72a7c18faf344151ab935bcd41278c9b3b18594.roa
Signing time:             Tue 11 Jul 2023 17:45:20 +0000
ROA not before:           Mon 10 Jul 2023 17:45:20 +0000
ROA not after:            Fri 11 Jul 2025 17:45:20 +0000
asID:                     7418
IP address blocks:        200.42.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168194 (0x29102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:45:20 2023 GMT
            Not After : Jul 11 17:45:20 2025 GMT
        Subject: CN=a72a7c18faf344151ab935bcd41278c9b3b18594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:02:55:cb:32:70:0e:59:17:5c:07:7b:94:
                    ff:14:b4:5c:b7:aa:d9:9e:9b:9b:67:38:86:6f:f0:
                    44:33:28:7c:f5:c7:7c:37:8b:01:8f:2f:d0:c8:bf:
                    2a:0d:c5:3b:ce:c8:b8:72:44:ed:e2:71:b0:1c:01:
                    4b:68:24:02:b5:65:ff:05:9a:58:df:23:91:ca:f1:
                    18:33:a6:8c:b1:f2:1d:7a:d6:3a:31:01:01:75:96:
                    c6:32:b6:31:25:f1:bb:9c:1c:25:12:57:6c:62:d2:
                    76:f6:2e:6e:67:4a:a6:af:0b:65:a7:ee:26:ab:ec:
                    d0:f5:40:68:05:98:94:82:5d:45:c1:2c:1b:02:c1:
                    91:96:54:64:2b:18:20:74:54:9b:eb:50:4a:ef:a5:
                    b4:18:4a:36:8c:ff:38:ca:4e:50:b6:b6:3a:87:13:
                    82:9e:78:d0:16:ca:8e:23:d4:ae:98:b0:42:2b:a3:
                    aa:d0:f9:cf:49:14:d5:80:0a:24:57:fc:dd:cc:56:
                    a8:ce:d4:d1:9b:6f:e4:91:22:af:db:0d:42:61:6f:
                    94:c4:8a:6d:da:d2:74:cd:2c:76:b1:5e:72:d0:d9:
                    80:8b:48:74:42:28:12:29:e9:13:f5:9d:68:b4:59:
                    a6:86:2c:4b:fd:cb:24:19:3a:64:40:3e:8e:b6:01:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F2:DE:A5:57:9A:2F:6E:09:0D:A9:D6:6B:72:5A:D7:0E:32:FD:7B
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a72a7c18faf344151ab935bcd41278c9b3b18594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:56:99:fa:3a:fc:29:fc:b4:98:30:ca:5d:1e:df:cf:45:
         c4:7e:76:02:15:57:aa:67:1a:66:7f:5b:73:9b:de:85:16:32:
         99:70:4a:10:a5:a3:77:1a:4f:0d:45:34:04:90:4e:ae:b0:25:
         d0:52:52:89:0f:15:64:97:d6:26:14:d3:1c:19:7c:1e:2b:17:
         0b:ec:6d:70:28:55:e7:81:43:69:5a:d1:23:97:da:84:a4:7f:
         05:43:74:34:3c:2b:e5:96:ad:8a:a2:bb:d2:73:c0:25:a9:c3:
         cc:2f:8e:86:2e:cc:a6:6b:8b:ff:b4:d7:7a:d9:7a:c5:f4:0f:
         0c:cb:33:b7:5b:bf:7a:00:12:dc:13:da:8a:c3:74:98:42:f5:
         94:87:9f:c8:f7:65:b2:00:51:07:8f:95:76:53:c1:e0:19:70:
         e0:96:bd:26:39:09:51:32:2e:df:39:f7:e8:76:fd:f4:18:46:
         29:ca:d1:9c:e5:a6:ce:b7:4c:91:a5:47:ba:ff:4d:47:2a:f2:
         b2:ba:48:e3:75:f0:14:2b:46:0e:8f:41:83:d1:10:36:9e:3f:
         f5:76:2d:16:49:bb:2a:97:e1:82:e8:aa:cc:46:19:e3:3b:a7:
         4b:89:28:21:09:c2:fe:82:d1:e1:4d:12:b6:34:8f:ad:29:b9:
         39:84:78:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDApECMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEw
MTc0NTIwWhcNMjUwNzExMTc0NTIwWjAzMTEwLwYDVQQDEyhhNzJhN2MxOGZhZjM0
NDE1MWFiOTM1YmNkNDEyNzhjOWIzYjE4NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwu0CVcsycA5ZF1wHe5T/FLRct6rZnpubZziGb/BEMyh89cd8
N4sBjy/QyL8qDcU7zsi4ckTt4nGwHAFLaCQCtWX/BZpY3yORyvEYM6aMsfIdetY6
MQEBdZbGMrYxJfG7nBwlEldsYtJ29i5uZ0qmrwtlp+4mq+zQ9UBoBZiUgl1FwSwb
AsGRllRkKxggdFSb61BK76W0GEo2jP84yk5QtrY6hxOCnnjQFsqOI9SumLBCK6Oq
0PnPSRTVgAokV/zdzFaoztTRm2/kkSKv2w1CYW+UxIpt2tJ0zSx2sV5y0NmAi0h0
QigSKekT9Z1otFmmhixL/cskGTpkQD6OtgF7/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKHy3qVXmi9uCQ2p1mtyWtcOMv17MB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkL2E3MmE3YzE4ZmFmMzQ0MTUxYWI5MzViY2Q0MTI3OGM5YjNiMTg1OTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsgqtDANBgkqhkiG9w0BAQsFAAOCAQEAHuhWmfo6/Cn8tJgw
yl0e389FxH52AhVXqmcaZn9bc5vehRYymXBKEKWjdxpPDUU0BJBOrrAl0FJSiQ8V
ZJfWJhTTHBl8HisXC+xtcChV54FDaVrRI5fahKR/BUN0NDwr5ZatiqK70nPAJanD
zC+Ohi7MpmuL/7TXetl6xfQPDMszt1u/egAS3BPaisN0mEL1lIefyPdlsgBRB4+V
dlPB4Blw4Ja9JjkJUTIu3zn36Hb99BhGKcrRnOWmzrdMkaVHuv9NRyrysrpI43Xw
FCtGDo9Bg9EQNp4/9XYtFkm7KpfhguiqzEYZ4zunS4koIQnC/oLR4U0StjSPrSm5
OYR4gQ==
-----END CERTIFICATE-----