Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/30838f0287a310c348df869b32c827332bfbe8cb.roa
File:                     30838f0287a310c348df869b32c827332bfbe8cb.roa (raw, json)
Hash identifier:          hJcZLkQ0B4MxHX69eIMIOJAN1SklQF1jb40uVr1XYO0=
Subject key identifier:   60:47:02:AD:8C:FC:B1:5D:26:5E:23:A3:C5:7C:6B:7F:67:A7:54:85
Certificate issuer:       /CN=491acfc3caa333c01c36fa039f700188dbc91264
Certificate serial:       025A9B
Authority key identifier: 44:3A:16:8A:F5:F7:74:B3:BD:11:73:5A:B5:DA:F9:53:93:A2:1A:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491acfc3caa333c01c36fa039f700188dbc91264.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/30838f0287a310c348df869b32c827332bfbe8cb.roa
Signing time:             Wed 26 Jul 2023 16:31:31 +0000
ROA not before:           Tue 25 Jul 2023 16:31:31 +0000
ROA not after:            Sat 26 Jul 2025 16:31:31 +0000
asID:                     272840
IP address blocks:        167.250.135.0/24 maxlen: 24
                          2803:dc90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154267 (0x25a9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491acfc3caa333c01c36fa039f700188dbc91264
        Validity
            Not Before: Jul 25 16:31:31 2023 GMT
            Not After : Jul 26 16:31:31 2025 GMT
        Subject: CN=30838f0287a310c348df869b32c827332bfbe8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:8d:e4:e0:60:4e:f8:b0:9f:de:c6:ba:35:
                    41:61:f9:c3:64:c8:27:4d:1e:ed:94:f5:97:d0:64:
                    65:01:6e:5f:4c:61:a0:f3:fa:aa:35:a4:b5:a9:0d:
                    1e:e4:ec:36:cb:39:ec:5c:fd:2a:5b:cc:f9:17:4b:
                    9f:f8:3c:e0:6a:09:3e:86:e7:bb:94:f0:7c:42:83:
                    02:e3:ea:68:0b:18:fe:f8:ac:e6:5d:2e:90:63:41:
                    38:22:85:98:f7:14:d8:53:f5:5e:de:78:74:bc:f6:
                    28:c1:36:a7:e0:ef:91:1c:db:43:b4:22:a7:36:61:
                    3a:6b:b8:be:98:50:c0:ea:28:1d:fb:08:15:c4:2c:
                    35:08:1e:3b:52:54:3b:3a:6c:cd:52:e6:98:5b:22:
                    4d:ad:62:86:4e:11:f6:fe:86:b3:35:9b:70:de:82:
                    94:b9:0e:bf:57:fe:32:b8:cd:81:f7:60:b1:c9:db:
                    9b:1c:36:5b:00:57:0e:af:92:d6:66:80:c1:65:43:
                    39:4f:71:f8:89:18:81:3a:0e:12:af:bb:89:da:78:
                    a3:73:fb:7d:55:cc:8d:91:c7:eb:88:58:41:e9:6c:
                    ba:dc:f1:f0:ac:97:36:86:46:0b:5d:eb:48:08:24:
                    85:be:ee:ab:d0:9c:17:30:66:6f:4f:7c:cc:52:f0:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:02:AD:8C:FC:B1:5D:26:5E:23:A3:C5:7C:6B:7F:67:A7:54:85
            X509v3 Authority Key Identifier:
                keyid:44:3A:16:8A:F5:F7:74:B3:BD:11:73:5A:B5:DA:F9:53:93:A2:1A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491acfc3caa333c01c36fa039f700188dbc91264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/30838f0287a310c348df869b32c827332bfbe8cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.135.0/24
                IPv6:
                  2803:dc90::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:d0:90:8e:56:fe:13:35:4e:87:5f:38:24:c5:96:d1:fa:
         aa:30:90:ab:dc:8a:de:d1:b7:ee:40:53:29:a4:9e:cb:07:e2:
         d0:47:84:f7:cf:e6:16:93:fc:90:1f:ab:f9:5b:2d:c7:d6:81:
         ca:af:f1:13:b9:6a:7d:e1:f2:99:5e:5d:d8:c1:af:1c:a1:d0:
         22:94:7c:e9:14:a4:41:88:08:dd:a9:77:2b:76:6e:5c:ee:ef:
         3e:b5:3b:a7:2c:f0:2c:a5:91:c3:03:2d:f3:c8:9c:94:65:5b:
         18:c7:eb:36:5c:3d:69:9f:81:58:c1:ba:39:8a:78:ab:b8:6e:
         00:f1:4c:e4:1a:3c:77:20:24:c0:02:41:e1:c2:b0:61:9e:fc:
         3f:d5:6b:13:d5:93:fc:be:d5:b5:18:20:9c:0b:3e:fc:33:bf:
         62:6f:6e:54:37:2b:00:f6:b5:36:a1:0e:89:1e:b0:67:d2:63:
         34:56:43:48:76:c5:68:19:f4:c4:19:8a:a5:2a:ff:bd:cd:69:
         51:b0:63:02:cb:62:98:62:2e:ec:fb:ae:38:de:b4:1e:95:e9:
         69:1e:2f:2c:83:16:3d:2a:4b:27:d9:e7:ff:8e:0b:79:7e:f4:
         48:63:18:d5:24:91:a9:14:af:fe:b6:e4:61:88:70:52:02:c2:
         da:4c:53:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAlqbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MWFjZmMzY2FhMzMzYzAxYzM2ZmEwMzlmNzAwMTg4ZGJjOTEyNjQwHhcNMjMwNzI1
MTYzMTMxWhcNMjUwNzI2MTYzMTMxWjAzMTEwLwYDVQQDEygzMDgzOGYwMjg3YTMx
MGMzNDhkZjg2OWIzMmM4MjczMzJiZmJlOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr5iN5OBgTviwn97GujVBYfnDZMgnTR7tlPWX0GRlAW5fTGGg
8/qqNaS1qQ0e5Ow2yznsXP0qW8z5F0uf+Dzgagk+hue7lPB8QoMC4+poCxj++Kzm
XS6QY0E4IoWY9xTYU/Ve3nh0vPYowTan4O+RHNtDtCKnNmE6a7i+mFDA6igd+wgV
xCw1CB47UlQ7OmzNUuaYWyJNrWKGThH2/oazNZtw3oKUuQ6/V/4yuM2B92Cxydub
HDZbAFcOr5LWZoDBZUM5T3H4iRiBOg4Sr7uJ2nijc/t9VcyNkcfriFhB6Wy63PHw
rJc2hkYLXetICCSFvu6r0JwXMGZvT3zMUvBcQQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFGBHAq2M/LFdJl4jo8V8a39np1SFMB8GA1UdIwQYMBaAFEQ6For193SzvRFz
WrXa+VOTohr5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkxYWNm
YzNjYWEzMzNjMDFjMzZmYTAzOWY3MDAxODhkYmM5MTI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZThlZjBiZWItZjg0My00YjRkLTg1YjgtOWFjMTVi
NTVhMjk5LzMwODM4ZjAyODdhMzEwYzM0OGRmODY5YjMyYzgyNzMzMmJmYmU4Y2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOGVmMGJlYi1mODQzLTRiNGQtODViOC05YWMx
NWI1NWEyOTkvNDkxYWNmYzNjYWEzMzNjMDFjMzZmYTAzOWY3MDAxODhkYmM5MTI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAKf6hzANBAIAAjAHAwUAKAPckDANBgkqhkiG9w0BAQsFAAOC
AQEARs3QkI5W/hM1TodfOCTFltH6qjCQq9yK3tG37kBTKaSeywfi0EeE98/mFpP8
kB+r+Vstx9aByq/xE7lqfeHymV5d2MGvHKHQIpR86RSkQYgI3al3K3ZuXO7vPrU7
pyzwLKWRwwMt88iclGVbGMfrNlw9aZ+BWMG6OYp4q7huAPFM5Bo8dyAkwAJB4cKw
YZ78P9VrE9WT/L7VtRggnAs+/DO/Ym9uVDcrAPa1NqEOiR6wZ9JjNFZDSHbFaBn0
xBmKpSr/vc1pUbBjAstimGIu7PuuON60HpXpaR4vLIMWPSpLJ9nn/44LeX70SGMY
1SSRqRSv/rbkYYhwUgLC2kxTlA==
-----END CERTIFICATE-----