Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/7e238674f3aa70fedc782684628a05c59dd2d977.roa
File:                     7e238674f3aa70fedc782684628a05c59dd2d977.roa (raw, json)
Hash identifier:          NyU8E7f1gDfql4Ex9UDVBFBcG9EsrQ3JseR/78iA+Os=
Subject key identifier:   AC:39:69:14:8F:06:52:D8:2A:12:0B:90:49:E5:90:25:1D:F3:54:82
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       177E07
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/7e238674f3aa70fedc782684628a05c59dd2d977.roa
Signing time:             Tue 10 May 2022 19:26:45 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     14618
IP address blocks:        200.12.197.0/24 maxlen: 24
                          2801:0:60::/48 maxlen: 48
                          2801:0:62::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539591 (0x177e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=7e238674f3aa70fedc782684628a05c59dd2d977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:d7:b1:60:47:51:84:cd:4a:81:34:b8:4e:
                    0d:2c:2c:c2:b0:cd:2e:f2:dd:01:76:b5:75:a0:f5:
                    2e:f0:cb:15:25:e1:e9:6f:1f:be:52:09:3e:ab:2e:
                    de:b3:fb:7d:ea:51:29:52:e4:d0:d0:26:a8:c0:6b:
                    29:92:2f:f1:3a:9e:2c:a1:16:91:37:c5:3c:1d:35:
                    10:61:32:ca:b0:d4:df:8d:e6:66:b0:db:3f:30:ff:
                    70:eb:3d:a0:97:40:11:77:a4:c6:0f:c3:87:e0:fe:
                    60:84:99:6e:bc:5c:a9:6e:b6:6c:41:ae:2f:4c:cf:
                    3d:af:bd:77:ed:3d:90:9b:ee:99:a1:1e:bf:ff:85:
                    a6:dd:88:bc:8d:75:64:95:eb:ef:7b:d6:a3:eb:62:
                    eb:04:b9:3b:6f:89:9d:a2:c1:b0:7f:35:a9:8e:35:
                    73:57:dd:ad:1c:55:94:de:75:f4:56:2c:c7:f5:d5:
                    af:2c:a1:5b:a4:38:e9:cc:5c:99:ae:cd:10:3f:66:
                    79:01:68:ad:9f:19:1d:3b:5e:44:5a:2f:21:58:15:
                    06:94:cb:9f:29:62:d7:a4:f4:24:69:65:08:cb:06:
                    c4:28:ad:9a:b9:39:f6:c9:5b:8e:ae:52:08:bb:92:
                    e2:39:63:7e:d2:64:e1:4e:3c:67:57:87:75:d6:5f:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:39:69:14:8F:06:52:D8:2A:12:0B:90:49:E5:90:25:1D:F3:54:82
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/7e238674f3aa70fedc782684628a05c59dd2d977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24
                IPv6:
                  2801:0:60::/48
                  2801:0:62::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:28:9e:a0:71:a4:80:a4:5d:7e:54:d1:37:28:bc:f6:1c:
         79:0f:a6:92:c8:62:30:5b:a2:a0:bd:7b:25:bd:61:e3:92:18:
         55:bf:a6:4c:f9:6f:cb:50:3e:5c:22:d5:d4:ee:f9:3b:2f:f4:
         38:5d:70:31:6c:92:70:86:a0:e2:f8:a5:25:43:12:14:70:30:
         ae:2f:82:0c:f1:c0:f4:08:ee:3b:33:fc:b1:aa:e8:66:37:fb:
         c6:9b:0e:89:aa:64:c7:b7:37:60:0d:b4:2f:7b:bb:82:5d:e0:
         72:06:79:9e:c2:b6:91:e0:81:54:03:e3:79:b7:8d:60:14:c2:
         9d:6e:8e:62:c6:fc:48:48:d1:21:ba:5e:84:48:6a:27:3b:67:
         d1:fa:a5:63:18:b9:5f:87:36:16:50:7d:c7:55:90:2f:84:9e:
         9d:2b:51:5f:45:0f:d6:68:58:8a:db:1b:19:e8:7e:74:a5:e3:
         42:67:af:22:95:5d:33:ea:0d:70:c3:81:71:86:30:bf:ae:2b:
         95:ba:84:89:22:1f:51:ca:2a:d3:c0:61:74:ba:cb:25:d0:c2:
         ae:74:e3:f6:2c:45:ea:7b:4b:c0:15:78:b1:d8:cb:70:2c:64:
         4a:f6:84:f1:20:4e:5e:b8:ff:a1:63:f2:03:c2:b5:3e:99:10:
         f1:eb:29:67
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDF34HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc3
MjM1ZjY2YjZjNWQ1YzMxODY5MDY2YzRkNDA1ZDY3MDYyMDEyY2YwHhcNMjIwNDI4
MDMwMDAwWhcNMjQwNDI4MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZTIzODY3NGYzYWE3
MGZlZGM3ODI2ODQ2MjhhMDVjNTlkZDJkOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA447XsWBHUYTNSoE0uE4NLCzCsM0u8t0BdrV1oPUu8MsVJeHp
bx++Ugk+qy7es/t96lEpUuTQ0CaowGspki/xOp4soRaRN8U8HTUQYTLKsNTfjeZm
sNs/MP9w6z2gl0ARd6TGD8OH4P5ghJluvFypbrZsQa4vTM89r7137T2Qm+6ZoR6/
/4Wm3Yi8jXVklevve9aj62LrBLk7b4mdosGwfzWpjjVzV92tHFWU3nX0VizH9dWv
LKFbpDjpzFyZrs0QP2Z5AWitnxkdO15EWi8hWBUGlMufKWLXpPQkaWUIywbEKK2a
uTn2yVuOrlIIu5LiOWN+0mThTjxnV4d11l9+0QIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFKw5aRSPBlLYKhILkEnlkCUd81SCMB8GA1UdIwQYMBaAFApKuQWFaUAQZND2
lJ83MylyBt0yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzcyMzVm
NjZiNmM1ZDVjMzE4NjkwNjZjNGQ0MDVkNjcwNjIwMTJjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTIyYzM3NzMtOTc3My00ZWI2LTk4M2YtNGJjMGVh
OGM5MzJiLzdlMjM4Njc0ZjNhYTcwZmVkYzc4MjY4NDYyOGEwNWM1OWRkMmQ5Nzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMjJjMzc3My05NzczLTRlYjYtOTgzZi00YmMw
ZWE4YzkzMmIvNzcyMzVmNjZiNmM1ZDVjMzE4NjkwNjZjNGQ0MDVkNjcwNjIwMTJj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwDAQCAAEwBgMEAMgMxTAYBAIAAjASAwcAKAEAAABgAwcAKAEAAABiMA0GCSqG
SIb3DQEBCwUAA4IBAQCKLCieoHGkgKRdflTRNyi89hx5D6aSyGIwW6KgvXslvWHj
khhVv6ZM+W/LUD5cItXU7vk7L/Q4XXAxbJJwhqDi+KUlQxIUcDCuL4IM8cD0CO47
M/yxquhmN/vGmw6JqmTHtzdgDbQve7uCXeByBnmewraR4IFUA+N5t41gFMKdbo5i
xvxISNEhul6ESGonO2fR+qVjGLlfhzYWUH3HVZAvhJ6dK1FfRQ/WaFiK2xsZ6H50
peNCZ68ilV0z6g1ww4FxhjC/riuVuoSJIh9RyirTwGF0ussl0MKudOP2LEXqe0vA
FXix2MtwLGRK9oTxIE5euP+hY/IDwrU+mRDx6yln
-----END CERTIFICATE-----