Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/33bd23d1b75c4265348c3fa037f153d12a46db3c.roa
File:                     33bd23d1b75c4265348c3fa037f153d12a46db3c.roa (raw, json)
Hash identifier:          4RtHqWFtSMDEU1PFnUZCXpUlVgzFZzC8cDFboGFGY8M=
Subject key identifier:   8A:26:BF:25:61:7B:03:C5:E9:7D:E8:0B:20:02:9C:29:2C:FB:91:50
Certificate issuer:       /CN=4670db2847f3f5f45823175e7fcec0e67a763df2
Certificate serial:       20C87F
Authority key identifier: B8:11:79:A9:78:D9:9B:49:1C:57:2B:74:C2:71:69:24:34:10:CB:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/33bd23d1b75c4265348c3fa037f153d12a46db3c.roa
Signing time:             Fri 09 Jun 2023 17:44:14 +0000
ROA not before:           Thu 08 Jun 2023 17:44:14 +0000
ROA not after:            Mon 09 Jun 2025 17:44:14 +0000
asID:                     52356
IP address blocks:        190.14.152.0/22 maxlen: 24
                          2803:b140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148479 (0x20c87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4670db2847f3f5f45823175e7fcec0e67a763df2
        Validity
            Not Before: Jun  8 17:44:14 2023 GMT
            Not After : Jun  9 17:44:14 2025 GMT
        Subject: CN=33bd23d1b75c4265348c3fa037f153d12a46db3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:2c:30:ce:a1:bd:a2:09:02:fe:5d:d8:29:
                    dc:3a:85:8f:02:54:f9:f4:bf:cb:cd:de:80:39:e1:
                    bb:c3:9d:61:86:69:bf:09:48:6a:36:30:51:c0:89:
                    01:70:b4:66:5c:f9:fc:87:7d:1a:87:1f:3d:f0:8b:
                    d0:31:dc:fd:ee:fb:d2:10:41:fa:a6:6d:62:13:1d:
                    4a:1a:77:a7:ed:eb:75:a4:97:1b:c9:d6:4f:e1:53:
                    0b:eb:c7:f0:33:c3:32:be:6f:17:0d:5b:c2:35:e1:
                    f2:40:fd:02:13:dd:71:ac:21:70:e1:5a:97:4a:07:
                    e2:fd:22:14:83:28:a0:20:0d:9c:e1:99:c4:cb:c8:
                    dc:29:f1:16:d1:c1:af:df:bd:4d:d2:ae:16:4f:3a:
                    bf:6f:a7:84:db:a1:b3:8f:01:85:d0:4b:10:03:b1:
                    eb:d0:52:86:ab:ab:8f:3e:97:b1:8f:04:7b:b4:11:
                    97:f6:6a:21:47:48:01:97:60:2b:8a:a9:72:fc:05:
                    1c:38:ab:19:2b:93:0d:76:c8:ca:86:6a:9d:af:8d:
                    01:8c:c6:a6:96:68:ae:18:c9:70:de:30:ff:8d:9e:
                    34:07:dd:4c:33:c1:8b:1b:da:23:f9:bb:cc:6b:41:
                    9d:df:8e:15:86:ce:34:bc:00:14:c1:bc:6b:07:52:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:26:BF:25:61:7B:03:C5:E9:7D:E8:0B:20:02:9C:29:2C:FB:91:50
            X509v3 Authority Key Identifier:
                keyid:B8:11:79:A9:78:D9:9B:49:1C:57:2B:74:C2:71:69:24:34:10:CB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4670db2847f3f5f45823175e7fcec0e67a763df2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/33bd23d1b75c4265348c3fa037f153d12a46db3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8f735c9-64a6-4a7d-8322-6c13cf34e36f/4670db2847f3f5f45823175e7fcec0e67a763df2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.152.0/22
                IPv6:
                  2803:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:a2:98:15:6c:72:0b:6f:c2:6e:41:0a:0d:e5:8f:b6:44:
         23:7a:f2:02:6b:af:04:b6:11:1e:8e:b4:a2:78:31:3b:c3:32:
         36:9e:32:86:74:59:0f:d9:1c:2e:ce:92:da:d7:64:7d:2b:bd:
         cc:57:9d:f7:12:d5:5e:f7:0b:46:63:a1:dd:61:d1:56:5e:76:
         8a:8d:8b:ce:4c:95:6a:65:35:57:0a:74:08:5f:c5:bf:c0:8f:
         8f:2a:93:ed:a7:d9:d2:2f:6b:75:80:60:1b:87:b9:f7:e2:62:
         87:29:c8:93:cc:10:ac:7a:11:de:e8:2d:d0:79:24:67:2d:37:
         7e:34:5d:f3:8a:51:43:8e:50:04:98:63:a2:db:55:da:9b:2b:
         e0:2e:e1:7b:64:db:08:c6:6d:1b:1c:6d:63:ed:e4:2d:9b:94:
         d4:c2:be:33:bf:c5:90:25:0b:3b:da:36:78:04:32:3c:db:a5:
         88:98:31:e0:0b:ec:d6:62:61:1e:85:07:24:c0:36:a7:e8:78:
         b4:88:10:45:38:38:db:03:ca:c2:c5:fd:7b:ca:e8:a4:94:42:
         0f:07:2f:1f:27:60:d0:a1:a6:2d:cf:9b:9e:7d:81:9a:e6:db:
         b2:6e:a4:7e:f7:7b:ce:42:b1:5e:e9:a5:15:cb:c0:20:c5:48:
         50:9d:1d:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIMh/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NzBkYjI4NDdmM2Y1ZjQ1ODIzMTc1ZTdmY2VjMGU2N2E3NjNkZjIwHhcNMjMwNjA4
MTc0NDE0WhcNMjUwNjA5MTc0NDE0WjAzMTEwLwYDVQQDEygzM2JkMjNkMWI3NWM0
MjY1MzQ4YzNmYTAzN2YxNTNkMTJhNDZkYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhbssMM6hvaIJAv5d2CncOoWPAlT59L/Lzd6AOeG7w51hhmm/
CUhqNjBRwIkBcLRmXPn8h30ahx898IvQMdz97vvSEEH6pm1iEx1KGnen7et1pJcb
ydZP4VML68fwM8Myvm8XDVvCNeHyQP0CE91xrCFw4VqXSgfi/SIUgyigIA2c4ZnE
y8jcKfEW0cGv371N0q4WTzq/b6eE26GzjwGF0EsQA7Hr0FKGq6uPPpexjwR7tBGX
9mohR0gBl2Ariqly/AUcOKsZK5MNdsjKhmqdr40BjMamlmiuGMlw3jD/jZ40B91M
M8GLG9oj+bvMa0Gd344Vhs40vAAUwbxrB1ILdwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIomvyVhewPF6X3oCyACnCks+5FQMB8GA1UdIwQYMBaAFLgReal42ZtJHFcr
dMJxaSQ0EMtpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY3MGRi
Mjg0N2YzZjVmNDU4MjMxNzVlN2ZjZWMwZTY3YTc2M2RmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZThmNzM1YzktNjRhNi00YTdkLTgzMjItNmMxM2Nm
MzRlMzZmLzMzYmQyM2QxYjc1YzQyNjUzNDhjM2ZhMDM3ZjE1M2QxMmE0NmRiM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOGY3MzVjOS02NGE2LTRhN2QtODMyMi02YzEz
Y2YzNGUzNmYvNDY3MGRiMjg0N2YzZjVmNDU4MjMxNzVlN2ZjZWMwZTY3YTc2M2Rm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr4OmDANBAIAAjAHAwUAKAOxQDANBgkqhkiG9w0BAQsFAAOC
AQEAC1SimBVscgtvwm5BCg3lj7ZEI3ryAmuvBLYRHo60ongxO8MyNp4yhnRZD9kc
Ls6S2tdkfSu9zFed9xLVXvcLRmOh3WHRVl52io2LzkyVamU1Vwp0CF/Fv8CPjyqT
7afZ0i9rdYBgG4e59+JihynIk8wQrHoR3ugt0HkkZy03fjRd84pRQ45QBJhjottV
2psr4C7he2TbCMZtGxxtY+3kLZuU1MK+M7/FkCULO9o2eAQyPNuliJgx4Avs1mJh
HoUHJMA2p+h4tIgQRTg42wPKwsX9e8ropJRCDwcvHydg0KGmLc+bnn2Bmubbsm6k
fvd7zkKxXumlFcvAIMVIUJ0d6g==
-----END CERTIFICATE-----