Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/eab9fecd572ac4d334b253a5e2c87b89110795bb.roa
File:                     eab9fecd572ac4d334b253a5e2c87b89110795bb.roa (raw, json)
Hash identifier:          rwf4u8eGBy6xfz+vH/JY5Hkr/aBZTkZo8wI8GH/AJ1Y=
Subject key identifier:   DE:86:C0:2B:95:AA:21:BC:F9:06:F2:04:4E:9B:35:06:4F:9F:2B:94
Certificate issuer:       /CN=ec26d796feff013fc3a15572c1aa63c868c10fa2
Certificate serial:       2589B1
Authority key identifier: 68:A4:D9:F1:FA:A1:EA:6A:52:4C:01:E5:6E:E6:9F:00:4A:48:87:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec26d796feff013fc3a15572c1aa63c868c10fa2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/eab9fecd572ac4d334b253a5e2c87b89110795bb.roa
Signing time:             Thu 19 Oct 2023 19:08:45 +0000
ROA not before:           Thu 19 Oct 2023 19:08:45 +0000
ROA not after:            Sun 19 Oct 2025 19:08:45 +0000
asID:                     264784
IP address blocks:        168.197.216.0/22 maxlen: 24
                          2803:88c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460081 (0x2589b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec26d796feff013fc3a15572c1aa63c868c10fa2
        Validity
            Not Before: Oct 19 19:08:45 2023 GMT
            Not After : Oct 19 19:08:45 2025 GMT
        Subject: CN=eab9fecd572ac4d334b253a5e2c87b89110795bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:62:29:19:15:be:b7:61:26:9b:05:e7:a1:
                    04:56:6e:d6:69:e2:6c:3a:ea:69:f4:34:22:19:fd:
                    dc:5f:05:e3:92:10:fe:20:a2:d8:85:66:fa:b1:2c:
                    e6:3b:fb:56:23:20:db:1a:8e:f3:1f:d2:1b:36:cf:
                    a5:2c:18:d6:19:09:7f:2e:ff:25:7b:04:b5:b3:f8:
                    59:fd:f8:f9:9d:c4:a5:01:d4:de:cd:2b:31:30:04:
                    e5:3f:2c:a7:56:92:1d:a2:3e:1b:41:c3:da:2f:8e:
                    4c:e0:9b:a0:2c:dd:d5:b5:59:da:e7:4a:47:7f:05:
                    f8:1a:a0:c2:de:7f:4a:8a:03:b4:c0:bb:0c:ab:51:
                    75:8d:1c:13:a0:66:f3:18:44:3e:09:38:4f:07:3c:
                    3f:05:08:f3:93:77:c2:34:ee:4d:ce:d1:de:0d:21:
                    32:f3:19:30:a8:d1:be:cc:7d:64:ca:c2:74:18:c4:
                    96:66:6e:21:26:35:76:d7:d7:91:9c:68:cd:54:a5:
                    da:6c:b6:8a:61:13:65:d4:6a:ba:73:a8:f2:36:6c:
                    1c:f4:36:69:d6:b1:ee:44:f4:e9:4a:ac:e2:e6:4a:
                    ec:9e:4e:68:4a:9a:e7:8c:10:d8:6d:a9:6f:9f:67:
                    f0:c2:a3:b8:95:c0:9c:13:a0:c3:6d:8a:f6:85:6e:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:86:C0:2B:95:AA:21:BC:F9:06:F2:04:4E:9B:35:06:4F:9F:2B:94
            X509v3 Authority Key Identifier:
                keyid:68:A4:D9:F1:FA:A1:EA:6A:52:4C:01:E5:6E:E6:9F:00:4A:48:87:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec26d796feff013fc3a15572c1aa63c868c10fa2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/eab9fecd572ac4d334b253a5e2c87b89110795bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7b3dc65-79c6-457e-9b87-b821fff8fe8f/ec26d796feff013fc3a15572c1aa63c868c10fa2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.216.0/22
                IPv6:
                  2803:88c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:80:90:dc:ed:f1:18:a6:f5:98:cb:92:55:03:f8:12:4f:7b:
         9e:1f:05:a7:dd:9b:f1:3c:2f:56:5c:74:29:6c:47:10:36:c7:
         bc:5f:06:26:5d:97:4b:33:0c:6f:bb:59:88:3f:f9:95:b0:bf:
         9e:c4:d3:3e:bb:8b:2d:b3:d4:b7:9e:08:2f:15:ad:fb:6d:38:
         bc:f7:6c:d2:7e:e0:81:c5:40:38:7b:07:42:23:2a:f3:e8:6f:
         31:ef:47:11:7d:6a:5d:36:46:d6:33:a2:89:47:67:7a:77:ee:
         9d:03:25:c9:ba:b5:48:b0:47:6d:e1:84:89:62:18:ee:8b:29:
         35:a8:d7:e0:74:ce:69:83:84:15:12:15:f0:b3:99:c9:03:2d:
         03:fc:03:89:6d:cb:5b:37:5e:d5:78:f6:e5:29:c2:f2:cf:b9:
         4d:e7:2e:a2:22:92:8d:da:62:90:73:f9:45:26:3b:b9:89:0c:
         80:22:eb:9d:62:61:7f:2b:f1:fd:5d:d5:05:92:30:b3:55:3c:
         02:7a:9d:23:66:50:3c:bb:2d:4c:83:3a:98:b2:88:ac:ad:ff:
         98:e4:7d:c7:62:45:e9:1c:8b:c0:73:c8:5a:76:72:be:f7:a6:
         27:f2:c4:62:19:5a:4d:5c:3b:04:46:aa:2c:ac:96:49:46:6a:
         12:f9:6a:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJYmxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
MjZkNzk2ZmVmZjAxM2ZjM2ExNTU3MmMxYWE2M2M4NjhjMTBmYTIwHhcNMjMxMDE5
MTkwODQ1WhcNMjUxMDE5MTkwODQ1WjAzMTEwLwYDVQQDEyhlYWI5ZmVjZDU3MmFj
NGQzMzRiMjUzYTVlMmM4N2I4OTExMDc5NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjXhiKRkVvrdhJpsF56EEVm7WaeJsOupp9DQiGf3cXwXjkhD+
IKLYhWb6sSzmO/tWIyDbGo7zH9IbNs+lLBjWGQl/Lv8lewS1s/hZ/fj5ncSlAdTe
zSsxMATlPyynVpIdoj4bQcPaL45M4JugLN3VtVna50pHfwX4GqDC3n9KigO0wLsM
q1F1jRwToGbzGEQ+CThPBzw/BQjzk3fCNO5NztHeDSEy8xkwqNG+zH1kysJ0GMSW
Zm4hJjV219eRnGjNVKXabLaKYRNl1Gq6c6jyNmwc9DZp1rHuRPTpSqzi5krsnk5o
SprnjBDYbalvn2fwwqO4lcCcE6DDbYr2hW40EwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFN6GwCuVqiG8+QbyBE6bNQZPnyuUMB8GA1UdIwQYMBaAFGik2fH6oepqUkwB
5W7mnwBKSIebMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWMyNmQ3
OTZmZWZmMDEzZmMzYTE1NTcyYzFhYTYzYzg2OGMxMGZhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdiM2RjNjUtNzljNi00NTdlLTliODctYjgyMWZm
ZjhmZThmL2VhYjlmZWNkNTcyYWM0ZDMzNGIyNTNhNWUyYzg3Yjg5MTEwNzk1YmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2IzZGM2NS03OWM2LTQ1N2UtOWI4Ny1iODIx
ZmZmOGZlOGYvZWMyNmQ3OTZmZWZmMDEzZmMzYTE1NTcyYzFhYTYzYzg2OGMxMGZh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqjF2DANBAIAAjAHAwUAKAOIwDANBgkqhkiG9w0BAQsFAAOC
AQEAFYCQ3O3xGKb1mMuSVQP4Ek97nh8Fp92b8TwvVlx0KWxHEDbHvF8GJl2XSzMM
b7tZiD/5lbC/nsTTPruLLbPUt54ILxWt+204vPds0n7ggcVAOHsHQiMq8+hvMe9H
EX1qXTZG1jOiiUdnenfunQMlybq1SLBHbeGEiWIY7ospNajX4HTOaYOEFRIV8LOZ
yQMtA/wDiW3LWzde1Xj25SnC8s+5TecuoiKSjdpikHP5RSY7uYkMgCLrnWJhfyvx
/V3VBZIws1U8AnqdI2ZQPLstTIM6mLKIrK3/mOR9x2JF6RyLwHPIWnZyvvemJ/LE
YhlaTVw7BEaqLKyWSUZqEvlqkw==
-----END CERTIFICATE-----