Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/93f1817d9fc752746394a45aec0ea32270d0fd30.roa
File:                     93f1817d9fc752746394a45aec0ea32270d0fd30.roa (raw, json)
Hash identifier:          TrifLbmh3EZt8OSl0AUck4Q9UB+y4VSPHIRhGyqDcfU=
Subject key identifier:   7D:6E:E9:CC:B1:DF:22:F4:87:DF:A3:9A:66:84:6F:0F:14:A8:B7:D8
Certificate issuer:       /CN=548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c
Certificate serial:       260B18
Authority key identifier: 63:E5:E6:23:3C:CB:BD:E4:C1:C5:3D:77:C7:93:6E:B2:9E:FB:A3:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/93f1817d9fc752746394a45aec0ea32270d0fd30.roa
Signing time:             Thu 30 Nov 2023 18:09:40 +0000
ROA not before:           Thu 30 Nov 2023 18:09:40 +0000
ROA not after:            Sun 30 Nov 2025 18:09:40 +0000
asID:                     14970
IP address blocks:        206.223.124.0/24 maxlen: 25
                          2001:13c7:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493208 (0x260b18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c
        Validity
            Not Before: Nov 30 18:09:40 2023 GMT
            Not After : Nov 30 18:09:40 2025 GMT
        Subject: CN=93f1817d9fc752746394a45aec0ea32270d0fd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:ec:47:32:d8:69:ef:ec:d3:dd:7f:69:a0:
                    37:c9:47:8a:64:8a:cc:46:74:5f:8a:54:3d:ae:84:
                    de:38:da:86:9d:7a:d3:06:0d:f9:e1:c6:7d:f4:f8:
                    16:ac:3f:16:2e:fc:8a:0f:55:69:67:1f:7e:a3:d8:
                    91:56:c6:4f:84:40:ba:f7:65:49:14:83:75:4d:9d:
                    45:60:38:6e:3c:2d:24:50:f6:be:61:46:f0:f7:08:
                    4c:21:98:18:c8:9d:dc:d6:fb:be:00:f6:69:a0:7e:
                    e3:d9:cd:9b:b2:06:61:1c:43:d7:c8:ef:31:3d:1e:
                    ed:11:f4:99:ee:0b:83:51:79:34:3f:18:d7:3c:64:
                    fa:14:3c:3d:a8:09:a9:57:e0:d5:a9:d0:9c:5b:dc:
                    71:fb:dd:58:4e:48:05:99:75:26:70:73:01:d0:84:
                    1d:36:61:d2:dc:f4:94:10:f3:ff:60:03:86:a4:9c:
                    17:0b:96:8f:c7:43:af:57:67:e2:b0:fe:2f:64:a6:
                    a8:df:b8:27:89:6b:3f:3d:94:2c:af:a5:da:d2:ac:
                    4c:86:0c:83:d3:45:c5:48:42:5d:5f:86:51:77:20:
                    97:9c:fd:85:c5:88:15:c8:e3:80:67:13:e5:ff:46:
                    bd:2d:8c:23:5b:c7:72:43:51:cc:10:32:da:ad:92:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:E9:CC:B1:DF:22:F4:87:DF:A3:9A:66:84:6F:0F:14:A8:B7:D8
            X509v3 Authority Key Identifier:
                keyid:63:E5:E6:23:3C:CB:BD:E4:C1:C5:3D:77:C7:93:6E:B2:9E:FB:A3:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/93f1817d9fc752746394a45aec0ea32270d0fd30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.124.0/24
                IPv6:
                  2001:13c7:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:68:5f:06:25:ea:c8:42:38:c1:89:35:5b:41:4a:54:e2:
         32:68:e1:45:0b:cc:10:de:a6:fc:18:77:e7:3c:db:a0:2f:f4:
         d9:12:57:90:b8:f5:c9:88:9c:e0:a7:16:c3:9b:af:9a:08:c3:
         66:01:36:3a:23:e1:da:57:f4:74:2a:9c:8c:ea:d1:09:97:5d:
         aa:dd:d0:2e:b8:5c:39:14:12:3c:8d:8a:27:c3:5d:54:8f:40:
         2f:be:4e:59:2c:01:b0:b5:c3:f9:29:f8:4e:0f:b0:3f:a7:2a:
         9e:3f:ce:27:6e:b6:79:0a:36:0a:7a:e7:3f:66:81:7c:cb:9b:
         c0:f6:8e:13:44:71:6e:a0:56:ae:4b:ae:88:37:c6:d9:76:85:
         4d:1e:ad:70:66:9f:58:2f:18:37:fb:21:c5:2f:43:dc:76:3c:
         f8:75:59:64:22:f4:10:63:48:c7:bd:dd:bc:7a:9a:3e:94:dd:
         81:58:d9:c4:1e:a9:03:13:d1:71:71:2e:fa:ef:7d:bb:9e:82:
         f2:a4:28:f6:e8:f6:86:67:89:29:1d:de:2e:29:81:91:34:a8:
         f9:37:9e:b7:1f:48:43:c6:ed:dc:1e:2a:28:5f:eb:88:ff:9a:
         8f:62:af:57:69:fc:08:38:76:45:a7:2c:f1:b7:5c:42:db:54:
         7a:b8:1b:bc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDJgsYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0
OGFhNWQ2YjkyYmY0N2YyM2ExZDJiM2I5MWY3YzgwYjBkMjgzMGMwHhcNMjMxMTMw
MTgwOTQwWhcNMjUxMTMwMTgwOTQwWjAzMTEwLwYDVQQDEyg5M2YxODE3ZDlmYzc1
Mjc0NjM5NGE0NWFlYzBlYTMyMjcwZDBmZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAozPsRzLYae/s091/aaA3yUeKZIrMRnRfilQ9roTeONqGnXrT
Bg354cZ99PgWrD8WLvyKD1VpZx9+o9iRVsZPhEC692VJFIN1TZ1FYDhuPC0kUPa+
YUbw9whMIZgYyJ3c1vu+APZpoH7j2c2bsgZhHEPXyO8xPR7tEfSZ7guDUXk0PxjX
PGT6FDw9qAmpV+DVqdCcW9xx+91YTkgFmXUmcHMB0IQdNmHS3PSUEPP/YAOGpJwX
C5aPx0OvV2fisP4vZKao37gniWs/PZQsr6Xa0qxMhgyD00XFSEJdX4ZRdyCXnP2F
xYgVyOOAZxPl/0a9LYwjW8dyQ1HMEDLarZKaxQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFH1u6cyx3yL0h9+jmmaEbw8UqLfYMB8GA1UdIwQYMBaAFGPl5iM8y73kwcU9
d8eTbrKe+6OOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTQ4YWE1
ZDZiOTJiZjQ3ZjIzYTFkMmIzYjkxZjdjODBiMGQyODMwYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGY4MTUyMDYtYzRkNC00ZGQxLWE3ODUtNTlmOWZj
NDlmYTcwLzkzZjE4MTdkOWZjNzUyNzQ2Mzk0YTQ1YWVjMGVhMzIyNzBkMGZkMzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZjgxNTIwNi1jNGQ0LTRkZDEtYTc4NS01OWY5
ZmM0OWZhNzAvNTQ4YWE1ZDZiOTJiZjQ3ZjIzYTFkMmIzYjkxZjdjODBiMGQyODMw
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAM7ffDAPBAIAAjAJAwcAIAETx2AAMA0GCSqGSIb3DQEBCwUA
A4IBAQANm2hfBiXqyEI4wYk1W0FKVOIyaOFFC8wQ3qb8GHfnPNugL/TZEleQuPXJ
iJzgpxbDm6+aCMNmATY6I+HaV/R0KpyM6tEJl12q3dAuuFw5FBI8jYonw11Uj0Av
vk5ZLAGwtcP5KfhOD7A/pyqeP84nbrZ5CjYKeuc/ZoF8y5vA9o4TRHFuoFauS66I
N8bZdoVNHq1wZp9YLxg3+yHFL0Pcdjz4dVlkIvQQY0jHvd28epo+lN2BWNnEHqkD
E9FxcS767327noLypCj26PaGZ4kpHd4uKYGRNKj5N563H0hDxu3cHiooX+uI/5qP
Yq9XafwIOHZFpyzxt1xC21R6uBu8
-----END CERTIFICATE-----