Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/bed163f6049afc0f68f3b31ae25561bb0da92ecb.roa
File:                     bed163f6049afc0f68f3b31ae25561bb0da92ecb.roa (raw, json)
Hash identifier:          wQ9ionqTNw7PdYyGSxKdAIU9YX1BhdTMsnZ+fceTDnA=
Subject key identifier:   A1:2F:1B:79:27:C2:8A:CF:4B:DE:21:12:19:B7:8D:D0:D0:B5:51:DF
Certificate issuer:       /CN=1c34aa1623d42a0b6186e98309cecbae27a9189f
Certificate serial:       11EAEF
Authority key identifier: ED:52:7F:D5:40:DC:6E:5F:89:99:F1:21:C0:D8:26:60:41:56:DF:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c34aa1623d42a0b6186e98309cecbae27a9189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/bed163f6049afc0f68f3b31ae25561bb0da92ecb.roa
Signing time:             Thu 26 Oct 2023 07:30:00 +0000
ROA not before:           Thu 26 Oct 2023 07:30:00 +0000
ROA not after:            Sat 25 Oct 2025 07:30:00 +0000
asID:                     263777
IP address blocks:        138.204.4.0/22 maxlen: 24
                          168.227.252.0/22 maxlen: 24
                          170.239.32.0/22 maxlen: 24
                          2803:2240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174255 (0x11eaef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c34aa1623d42a0b6186e98309cecbae27a9189f
        Validity
            Not Before: Oct 26 07:30:00 2023 GMT
            Not After : Oct 25 07:30:00 2025 GMT
        Subject: CN=bed163f6049afc0f68f3b31ae25561bb0da92ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:f3:d2:0a:3b:f7:8c:37:dc:11:eb:77:47:
                    8b:bb:7d:fb:c2:f8:22:70:3c:8e:eb:47:3b:c4:da:
                    ae:4c:9a:af:32:c0:88:28:a7:4b:75:4d:ef:71:c7:
                    e3:ca:45:dc:cb:40:a3:f3:8a:7b:9b:21:79:86:ee:
                    e6:73:4a:9b:70:d4:bf:02:2f:50:33:94:0a:6b:0b:
                    be:8a:61:47:c3:0f:16:ce:e9:57:df:52:00:b4:da:
                    f4:29:7e:92:52:2d:e8:5b:ca:a9:b4:56:56:f8:e2:
                    85:59:d1:02:c2:b1:7a:11:81:5a:f2:6b:5e:06:cf:
                    d8:52:d2:0c:96:84:94:9b:41:9d:75:a6:94:cf:7f:
                    dc:86:3e:3d:43:89:92:30:0f:c3:b7:ab:ce:9f:6c:
                    08:95:d4:52:c5:c6:c0:6e:30:03:52:71:d6:30:83:
                    18:27:01:da:ea:26:b7:61:ae:b2:39:4e:fd:d8:de:
                    8d:6f:91:62:5f:ea:35:11:5b:b6:22:1e:61:9b:9a:
                    e4:fd:05:be:c8:c7:00:e2:f7:e1:01:f5:cb:f4:2e:
                    30:78:d7:a3:ff:98:74:d7:1b:30:c8:f8:0e:89:2d:
                    cc:4c:0c:ca:fb:5b:7d:39:2b:a6:55:83:95:43:4f:
                    46:e9:2e:ff:0e:80:e1:95:64:c2:69:ae:b2:16:56:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:1B:79:27:C2:8A:CF:4B:DE:21:12:19:B7:8D:D0:D0:B5:51:DF
            X509v3 Authority Key Identifier:
                keyid:ED:52:7F:D5:40:DC:6E:5F:89:99:F1:21:C0:D8:26:60:41:56:DF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c34aa1623d42a0b6186e98309cecbae27a9189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/bed163f6049afc0f68f3b31ae25561bb0da92ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/1c34aa1623d42a0b6186e98309cecbae27a9189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.4.0/22
                  168.227.252.0/22
                  170.239.32.0/22
                IPv6:
                  2803:2240::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:de:2b:c1:1d:e4:8a:66:21:b5:2d:e1:a8:f8:1f:13:98:7f:
         ea:fd:6b:88:a7:d2:89:8d:c2:f5:84:e7:35:cf:14:58:aa:09:
         8e:51:fd:59:83:2b:08:b6:18:e7:d7:b2:89:12:9d:02:d2:4e:
         e4:b2:cf:a5:63:2a:89:f0:6d:0e:2b:fe:9a:da:71:92:fe:4b:
         f3:34:8f:38:df:e9:d6:28:20:cd:28:ec:90:81:eb:56:d3:e4:
         64:91:99:2a:81:d6:28:67:e8:2d:85:86:28:f4:cb:27:75:e0:
         2d:c1:1d:e9:da:d2:6f:e4:0b:54:4c:43:2f:05:1a:ef:4f:2b:
         39:21:8d:af:87:60:d7:e4:84:58:01:49:c2:98:95:f5:20:23:
         9a:fc:5b:20:e0:a7:cd:b9:72:63:eb:49:c5:22:f7:ac:6c:63:
         21:7d:9b:d2:f6:f9:0a:0b:b6:a5:05:a7:23:a0:06:70:12:b2:
         df:1a:00:c1:89:86:ff:5c:c6:70:54:d2:87:63:38:b1:5b:89:
         2d:ad:0a:1e:e8:c0:35:c8:e1:95:f2:38:3f:8f:79:a3:93:f3:
         bd:2d:2f:83:c8:38:9d:7b:70:c5:5e:88:6a:4d:f2:f5:5c:5d:
         69:92:a0:b4:97:36:3c:93:34:35:9f:bf:1b:d2:07:e9:89:c7:
         fe:1b:97:81
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDEervMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
MzRhYTE2MjNkNDJhMGI2MTg2ZTk4MzA5Y2VjYmFlMjdhOTE4OWYwHhcNMjMxMDI2
MDczMDAwWhcNMjUxMDI1MDczMDAwWjAzMTEwLwYDVQQDEyhiZWQxNjNmNjA0OWFm
YzBmNjhmM2IzMWFlMjU1NjFiYjBkYTkyZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgmXz0go794w33BHrd0eLu337wvgicDyO60c7xNquTJqvMsCI
KKdLdU3vccfjykXcy0Cj84p7myF5hu7mc0qbcNS/Ai9QM5QKawu+imFHww8WzulX
31IAtNr0KX6SUi3oW8qptFZW+OKFWdECwrF6EYFa8mteBs/YUtIMloSUm0GddaaU
z3/chj49Q4mSMA/Dt6vOn2wIldRSxcbAbjADUnHWMIMYJwHa6ia3Ya6yOU792N6N
b5FiX+o1EVu2Ih5hm5rk/QW+yMcA4vfhAfXL9C4weNej/5h01xswyPgOiS3MTAzK
+1t9OSumVYOVQ09G6S7/DoDhlWTCaa6yFlZ0qwIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFKEvG3knworPS94hEhm3jdDQtVHfMB8GA1UdIwQYMBaAFO1Sf9VA3G5fiZnx
IcDYJmBBVt/RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWMzNGFh
MTYyM2Q0MmEwYjYxODZlOTgzMDljZWNiYWUyN2E5MTg5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTEzMzY5MjEtMjM5Ni00YWRiLWExYzAtMzM2Y2Ew
MDg4NDJlL2JlZDE2M2Y2MDQ5YWZjMGY2OGYzYjMxYWUyNTU2MWJiMGRhOTJlY2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTMzNjkyMS0yMzk2LTRhZGItYTFjMC0zMzZj
YTAwODg0MmUvMWMzNGFhMTYyM2Q0MmEwYjYxODZlOTgzMDljZWNiYWUyN2E5MTg5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAorMBAMEAqjj/AMEAqrvIDANBAIAAjAHAwUAKAMiQDANBgkq
hkiG9w0BAQsFAAOCAQEAAt4rwR3kimYhtS3hqPgfE5h/6v1riKfSiY3C9YTnNc8U
WKoJjlH9WYMrCLYY59eyiRKdAtJO5LLPpWMqifBtDiv+mtpxkv5L8zSPON/p1igg
zSjskIHrVtPkZJGZKoHWKGfoLYWGKPTLJ3XgLcEd6drSb+QLVExDLwUa708rOSGN
r4dg1+SEWAFJwpiV9SAjmvxbIOCnzblyY+tJxSL3rGxjIX2b0vb5Cgu2pQWnI6AG
cBKy3xoAwYmG/1zGcFTSh2M4sVuJLa0KHujANcjhlfI4P495o5PzvS0vg8g4nXtw
xV6Iak3y9VxdaZKgtJc2PJM0NZ+/G9IH6YnH/huXgQ==
-----END CERTIFICATE-----