Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/a453bd50918e9373ad4f3da0170f14469383d122.roa
File:                     a453bd50918e9373ad4f3da0170f14469383d122.roa (raw, json)
Hash identifier:          UiGitHUPp0eTxBk+qt11CYzsv+tsUVqHBCgaw08cE28=
Subject key identifier:   21:B9:E4:52:90:F1:D8:C3:94:FF:73:B4:74:7C:DC:35:28:14:44:BB
Certificate issuer:       /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial:       28D46D
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/a453bd50918e9373ad4f3da0170f14469383d122.roa
Signing time:             Mon 19 Feb 2024 17:00:41 +0000
ROA not before:           Mon 19 Feb 2024 17:00:37 +0000
ROA not after:            Mon 19 Feb 2029 17:00:37 +0000
asID:                     7195
IP address blocks:        200.25.0.0/17 maxlen: 24
                          2800:1e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675821 (0x28d46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4213629bff1656b039692adab742735c1703764c
        Validity
            Not Before: Feb 19 17:00:37 2024 GMT
            Not After : Feb 19 17:00:37 2029 GMT
        Subject: CN=a453bd50918e9373ad4f3da0170f14469383d122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:d7:93:bf:55:7e:d2:9e:f0:69:82:2c:6f:
                    3a:7c:79:ec:35:7a:89:fd:9a:8e:43:d2:b1:19:10:
                    16:d3:b5:6c:44:24:c1:67:46:c0:f0:57:6d:1b:ab:
                    d1:53:f2:cc:d2:05:d9:1b:ab:b0:0e:bb:ce:e4:6d:
                    df:25:a9:2c:a5:89:b5:6a:14:b4:4a:de:59:eb:4e:
                    de:0c:6f:ba:06:8e:9c:90:ca:45:4d:5f:8b:5d:a4:
                    f0:72:fe:0f:35:25:cf:a4:ce:dd:6f:6d:fa:e5:69:
                    65:ce:38:91:65:5f:fe:67:db:71:58:fe:3a:e0:19:
                    6c:e5:d4:63:3b:36:f1:0f:59:db:fc:50:05:35:97:
                    67:b5:bc:d7:b2:05:3a:7d:e7:8a:b1:2e:2a:0e:5b:
                    7b:4a:f6:0a:24:e4:1a:0d:95:f9:a8:d0:37:cc:04:
                    f8:da:f1:64:a3:ea:aa:a7:f2:ec:9c:dc:f0:c9:32:
                    ad:fa:31:a4:45:15:43:ac:cc:35:1c:d4:41:28:5b:
                    99:8b:6a:6b:cc:34:d3:30:df:45:e1:bd:c1:4e:43:
                    c2:40:30:28:34:7a:c6:62:30:3f:88:69:f1:38:0d:
                    ca:54:da:b0:f8:f9:f8:94:88:d9:39:97:3b:63:9b:
                    38:96:a8:de:f0:8a:94:a2:0d:05:5f:0d:1d:73:b3:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B9:E4:52:90:F1:D8:C3:94:FF:73:B4:74:7C:DC:35:28:14:44:BB
            X509v3 Authority Key Identifier:
                keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/a453bd50918e9373ad4f3da0170f14469383d122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.0.0/17
                IPv6:
                  2800:1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:18:2f:a6:f9:c8:2b:3b:e2:8e:08:4a:57:fe:da:09:59:
         28:34:c5:3f:e5:21:95:d3:79:4e:66:cc:63:1f:e7:d1:0c:00:
         a1:44:b8:f7:6a:af:d8:be:dc:ad:bd:d3:fb:c2:e8:bf:0c:47:
         a0:61:b7:9c:66:af:5d:67:74:c8:b0:15:c6:8c:03:0e:0e:cc:
         79:8c:54:80:e9:e5:77:d4:af:ec:75:f5:c0:96:34:1b:7b:a1:
         93:e9:ec:93:7b:9c:d3:c5:c5:cc:90:80:06:5d:34:ca:81:9c:
         cb:9d:18:6b:db:eb:89:09:7d:92:b4:c7:11:c7:b4:9e:13:99:
         6e:75:57:0b:7e:25:04:4e:36:e8:65:a7:16:65:de:df:64:fa:
         33:b5:eb:53:d3:6a:35:cb:94:ca:ea:ec:38:15:5f:1d:ae:cb:
         25:10:e8:2d:a1:cf:32:ec:b6:13:dc:28:c4:e4:37:8e:f7:c6:
         24:e4:a1:4a:1a:6b:5d:dd:c3:f6:28:0d:c0:c7:37:74:80:aa:
         aa:7b:3a:44:a1:73:79:02:87:7e:8f:45:31:71:3f:fe:62:c7:
         db:0a:3a:a8:cc:ff:4f:63:13:99:39:fd:9e:36:2c:23:d4:9f:
         c0:71:58:84:77:3e:84:1c:e6:47:9e:c5:54:8d:03:54:af:3a:
         70:07:72:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDKNRtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
MTM2MjliZmYxNjU2YjAzOTY5MmFkYWI3NDI3MzVjMTcwMzc2NGMwHhcNMjQwMjE5
MTcwMDM3WhcNMjkwMjE5MTcwMDM3WjAzMTEwLwYDVQQDEyhhNDUzYmQ1MDkxOGU5
MzczYWQ0ZjNkYTAxNzBmMTQ0NjkzODNkMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtnfXk79VftKe8GmCLG86fHnsNXqJ/ZqOQ9KxGRAW07VsRCTB
Z0bA8FdtG6vRU/LM0gXZG6uwDrvO5G3fJakspYm1ahS0St5Z607eDG+6Bo6ckMpF
TV+LXaTwcv4PNSXPpM7db2365WllzjiRZV/+Z9txWP464Bls5dRjOzbxD1nb/FAF
NZdntbzXsgU6feeKsS4qDlt7SvYKJOQaDZX5qNA3zAT42vFko+qqp/LsnNzwyTKt
+jGkRRVDrMw1HNRBKFuZi2przDTTMN9F4b3BTkPCQDAoNHrGYjA/iGnxOA3KVNqw
+Pn4lIjZOZc7Y5s4lqje8IqUog0FXw0dc7Px7QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCG55FKQ8djDlP9ztHR83DUoFES7MB8GA1UdIwQYMBaAFBQ1q17pNPBywfCS
WlpT3G+OdaTdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDIxMzYy
OWJmZjE2NTZiMDM5NjkyYWRhYjc0MjczNWMxNzAzNzY0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz
M2Y1NWRhL2E0NTNiZDUwOTE4ZTkzNzNhZDRmM2RhMDE3MGYxNDQ2OTM4M2QxMjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx
NjMzZjU1ZGEvNDIxMzYyOWJmZjE2NTZiMDM5NjkyYWRhYjc0MjczNWMxNzAzNzY0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEB8gZADANBAIAAjAHAwUAKAAB4DANBgkqhkiG9w0BAQsFAAOC
AQEAG0cYL6b5yCs74o4ISlf+2glZKDTFP+UhldN5TmbMYx/n0QwAoUS492qv2L7c
rb3T+8LovwxHoGG3nGavXWd0yLAVxowDDg7MeYxUgOnld9Sv7HX1wJY0G3uhk+ns
k3uc08XFzJCABl00yoGcy50Ya9vriQl9krTHEce0nhOZbnVXC34lBE426GWnFmXe
32T6M7XrU9NqNcuUyursOBVfHa7LJRDoLaHPMuy2E9woxOQ3jvfGJOShShprXd3D
9igNwMc3dICqqns6RKFzeQKHfo9FMXE//mLH2wo6qMz/T2MTmTn9njYsI9SfwHFY
hHc+hBzmR57FVI0DVK86cAdy1w==
-----END CERTIFICATE-----