Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/e5e27abf217eb93c43c16b93cec233345ded1742.roa
File:                     e5e27abf217eb93c43c16b93cec233345ded1742.roa (raw, json)
Hash identifier:          9KyajFU6gSVJ1h5M7lIQsoYFgme4oy3/T/UcmRkDa/8=
Subject key identifier:   A6:21:09:81:0E:1B:D4:DC:A6:56:7F:E2:D7:7E:70:39:EC:31:DD:AD
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       245B35
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/e5e27abf217eb93c43c16b93cec233345ded1742.roa
Signing time:             Sat 14 Oct 2023 08:30:00 +0000
ROA not before:           Fri 13 Oct 2023 08:30:00 +0000
ROA not after:            Sun 12 Oct 2025 08:30:00 +0000
asID:                     270009
IP address blocks:        201.182.240.0/23 maxlen: 24
                          201.182.242.0/24 maxlen: 24
                          2803:8420::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382645 (0x245b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Oct 13 08:30:00 2023 GMT
            Not After : Oct 12 08:30:00 2025 GMT
        Subject: CN=e5e27abf217eb93c43c16b93cec233345ded1742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:90:10:90:15:6c:a0:37:57:9f:5f:be:61:
                    04:cd:a8:69:ef:26:7d:b8:fd:f0:3a:80:9c:a1:7d:
                    0b:cc:0c:57:bb:07:16:99:a7:31:af:58:ce:93:6f:
                    fd:44:8e:1b:cf:9c:c1:6f:ac:9c:c7:97:c9:28:58:
                    23:ca:cc:1e:32:6a:1b:4b:14:15:cd:75:42:ce:22:
                    57:2c:eb:09:53:f7:2d:71:da:0e:03:80:ba:c7:a9:
                    2b:f4:ef:be:15:2d:81:48:80:c1:64:62:6a:2c:c7:
                    57:84:2a:31:bf:08:1a:57:3e:7f:70:9e:b7:e0:04:
                    2e:0a:69:0f:c7:55:78:c8:3d:52:36:ff:de:f8:83:
                    82:b5:04:07:9c:ef:fe:fc:ca:49:f6:72:4e:2a:a6:
                    68:16:01:19:c0:62:73:9c:af:a7:29:24:bb:1f:2d:
                    85:f6:a3:da:e8:4f:e6:07:ce:3f:15:c3:0e:f3:c8:
                    41:0c:c6:3e:84:e0:87:a2:cc:53:34:60:2b:be:ae:
                    53:91:12:e9:a0:6c:aa:ea:fa:e0:8e:0a:30:ae:dc:
                    d2:f8:4d:ae:ba:9d:08:af:23:85:81:99:ee:6b:2f:
                    45:60:d4:db:4d:04:67:ef:40:16:ac:0a:9e:43:ca:
                    c8:75:a9:c1:12:a0:a9:05:55:b4:c7:84:8b:2e:ea:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:21:09:81:0E:1B:D4:DC:A6:56:7F:E2:D7:7E:70:39:EC:31:DD:AD
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/e5e27abf217eb93c43c16b93cec233345ded1742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.240.0-201.182.242.255
                IPv6:
                  2803:8420::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:08:cc:75:92:f3:21:f5:eb:1f:db:2a:49:bb:ac:2b:4a:
         52:30:b9:c7:e3:a6:76:7c:e0:57:ce:20:74:fe:e0:e0:56:ea:
         79:75:e0:02:f0:b7:a9:88:04:ec:e4:5f:c1:4c:86:d0:10:07:
         54:e9:f1:74:e2:71:70:26:f3:eb:0e:48:7e:e7:ab:30:f1:22:
         24:41:0c:0a:f8:b0:c4:50:47:57:e9:46:e7:5f:00:c1:d3:34:
         0c:7c:bc:f5:59:a7:b0:bf:41:5b:0c:47:e7:dd:98:a7:ef:52:
         6d:9e:e5:8d:68:dd:13:93:e7:1f:02:9b:60:b3:e4:8b:6d:90:
         a3:4d:61:5f:ef:9d:d7:61:92:95:4e:a6:3a:96:e9:be:12:4e:
         66:44:bb:39:a5:73:9f:53:63:df:d4:95:1a:70:72:97:01:cc:
         04:69:22:c0:d0:f7:1a:af:d7:15:ac:71:07:c4:5b:bd:cb:94:
         e2:e4:29:b1:3d:ad:8d:ba:65:ca:13:2d:2f:07:34:df:79:63:
         85:1d:8b:7c:b5:16:83:d8:71:f3:85:0d:b3:0b:58:f3:7e:ab:
         cd:9e:77:06:e9:1e:e4:4b:a9:2d:c8:7c:74:09:89:6a:41:53:
         58:a2:a8:03:a1:17:c6:b6:a0:e0:ba:1a:e8:cc:b1:5b:56:76:
         58:6b:e5:40
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDJFs1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
NmNhNDEwZTlkNGQ2NjA5YTk2NjgwOTc2MzEzM2QzNmE5MjJiODIwHhcNMjMxMDEz
MDgzMDAwWhcNMjUxMDEyMDgzMDAwWjAzMTEwLwYDVQQDEyhlNWUyN2FiZjIxN2Vi
OTNjNDNjMTZiOTNjZWMyMzMzNDVkZWQxNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxaKQEJAVbKA3V59fvmEEzahp7yZ9uP3wOoCcoX0LzAxXuwcW
macxr1jOk2/9RI4bz5zBb6ycx5fJKFgjysweMmobSxQVzXVCziJXLOsJU/ctcdoO
A4C6x6kr9O++FS2BSIDBZGJqLMdXhCoxvwgaVz5/cJ634AQuCmkPx1V4yD1SNv/e
+IOCtQQHnO/+/MpJ9nJOKqZoFgEZwGJznK+nKSS7Hy2F9qPa6E/mB84/FcMO88hB
DMY+hOCHosxTNGArvq5TkRLpoGyq6vrgjgowrtzS+E2uup0IryOFgZnuay9FYNTb
TQRn70AWrAqeQ8rIdanBEqCpBVW0x4SLLur8zwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFKYhCYEOG9TcplZ/4td+cDnsMd2tMB8GA1UdIwQYMBaAFGHJZcaafzMxVG7p
0Egpgt9FnHY5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE2Y2E0
MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI4YmU2ODItZWE1Ni00NzQ3LWExMzItOGI1MDUw
OWY4MDhhL2U1ZTI3YWJmMjE3ZWI5M2M0M2MxNmI5M2NlYzIzMzM0NWRlZDE3NDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjhiZTY4Mi1lYTU2LTQ3NDctYTEzMi04YjUw
NTA5ZjgwOGEvMGE2Y2E0MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQEybbwAwQAybbyMA0EAgACMAcDBQAoA4QgMA0GCSqGSIb3
DQEBCwUAA4IBAQCb9wjMdZLzIfXrH9sqSbusK0pSMLnH46Z2fOBXziB0/uDgVup5
deAC8LepiATs5F/BTIbQEAdU6fF04nFwJvPrDkh+56sw8SIkQQwK+LDEUEdX6Ubn
XwDB0zQMfLz1Waewv0FbDEfn3Zin71JtnuWNaN0Tk+cfAptgs+SLbZCjTWFf753X
YZKVTqY6lum+Ek5mRLs5pXOfU2Pf1JUacHKXAcwEaSLA0Pcar9cVrHEHxFu9y5Ti
5CmxPa2NumXKEy0vBzTfeWOFHYt8tRaD2HHzhQ2zC1jzfqvNnncG6R7kS6ktyHx0
CYlqQVNYoqgDoRfGtqDguhrozLFbVnZYa+VA
-----END CERTIFICATE-----