Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/d8de6a294993e1bf29ccd98c025ef8b548867de6.roa
File:                     d8de6a294993e1bf29ccd98c025ef8b548867de6.roa (raw, json)
Hash identifier:          eOYEelOYORisaPpxZRAo2Nvjy5lcxFEGf9Zg9ZXRh1E=
Subject key identifier:   1E:6F:1D:CB:01:15:C7:C8:EA:06:4C:7F:1B:B4:28:8D:CB:E6:88:CA
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24F893
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/d8de6a294993e1bf29ccd98c025ef8b548867de6.roa
Signing time:             Tue 26 Sep 2023 17:13:22 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     264788
IP address blocks:        168.197.188.0/22 maxlen: 24
                          2800:2a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422931 (0x24f893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=d8de6a294993e1bf29ccd98c025ef8b548867de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:c5:de:14:6b:ad:7f:21:80:41:c1:34:2a:
                    ea:e9:42:88:36:80:d6:ac:66:d1:eb:79:46:6a:44:
                    3e:6d:46:b9:52:8f:da:78:1f:24:77:07:c8:0e:dc:
                    6d:17:9a:c3:90:26:e2:2e:66:db:77:94:4c:f3:2c:
                    31:ad:56:d9:9c:79:2a:db:b9:9d:d8:1f:9c:4d:81:
                    93:ca:ec:22:37:69:31:b6:cf:4e:ac:20:43:c4:53:
                    17:f4:2f:a6:8d:e1:a9:bc:f2:82:f4:bd:c4:ef:82:
                    b9:b0:48:44:c9:3a:85:21:0b:bd:bf:91:7b:48:5e:
                    cb:c9:c2:c8:8a:a7:bc:19:e5:44:ae:94:79:7f:ec:
                    35:9a:f7:01:98:20:f1:aa:05:2c:09:f4:e3:d4:da:
                    2f:88:02:44:5f:b3:06:94:be:af:27:cc:b8:6a:f4:
                    71:66:a6:75:81:c0:c0:61:6d:87:7a:1b:78:e1:b8:
                    a9:55:99:ca:77:0d:04:96:96:c4:21:4c:6d:ea:12:
                    de:72:f6:8a:ac:67:80:af:d2:ad:7b:3a:70:ab:10:
                    c5:d2:d3:cc:52:f3:e2:2a:32:e4:8d:d6:c3:b2:68:
                    a9:d1:6e:00:79:8c:f7:77:2f:54:46:56:19:d0:ed:
                    66:ad:15:3f:53:b8:78:f7:d7:7d:b3:9b:94:99:3a:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:1D:CB:01:15:C7:C8:EA:06:4C:7F:1B:B4:28:8D:CB:E6:88:CA
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/d8de6a294993e1bf29ccd98c025ef8b548867de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:65:e2:6b:d8:08:f1:ce:b8:e2:e4:4e:59:f7:07:b7:1e:
         5b:27:da:89:51:80:f5:b7:50:7f:75:d1:6d:07:71:8d:8b:f5:
         ce:6c:40:68:17:23:a5:08:eb:d3:65:79:19:96:8d:5d:1b:c4:
         80:6c:9c:fd:0e:5c:6d:2a:87:6d:98:80:62:fe:ea:76:6b:e1:
         b5:d1:60:f1:7a:6c:84:33:c2:33:72:31:0b:d7:22:10:b5:81:
         e8:a5:11:69:7b:48:84:c0:4d:e9:8b:1b:da:63:c6:69:60:83:
         48:a7:87:f6:13:2e:4a:45:c9:6a:70:6d:7a:91:59:8f:b9:41:
         f2:ff:b3:e2:32:e2:78:ee:06:5e:b5:f5:9b:05:8b:f6:8f:65:
         6a:fa:91:4e:21:cb:9b:f2:8f:16:a7:5d:92:cd:78:2a:4c:ec:
         96:87:ec:29:bb:11:80:3c:6f:47:6f:16:29:73:7e:7c:78:52:
         20:cc:b9:46:51:cc:4a:45:55:25:47:a0:3d:7f:96:f8:26:86:
         d2:a0:c8:be:57:b4:51:a5:0f:39:cf:4c:3c:1e:46:ab:f2:1c:
         94:cf:25:3c:dc:d9:64:43:79:c8:bf:6b:d1:25:81:44:22:0f:
         97:62:c9:e3:f7:d7:f6:20:ee:ad:6e:8f:40:50:96:82:a7:3d:
         82:c9:5c:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJPiTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjMwOTI1
MTcxMjQ4WhcNMjUwOTI2MTcxMjQ4WjAzMTEwLwYDVQQDEyhkOGRlNmEyOTQ5OTNl
MWJmMjljY2Q5OGMwMjVlZjhiNTQ4ODY3ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlKzF3hRrrX8hgEHBNCrq6UKINoDWrGbR63lGakQ+bUa5Uo/a
eB8kdwfIDtxtF5rDkCbiLmbbd5RM8ywxrVbZnHkq27md2B+cTYGTyuwiN2kxts9O
rCBDxFMX9C+mjeGpvPKC9L3E74K5sEhEyTqFIQu9v5F7SF7LycLIiqe8GeVErpR5
f+w1mvcBmCDxqgUsCfTj1NoviAJEX7MGlL6vJ8y4avRxZqZ1gcDAYW2Heht44bip
VZnKdw0ElpbEIUxt6hLecvaKrGeAr9KtezpwqxDF0tPMUvPiKjLkjdbDsmip0W4A
eYz3dy9URlYZ0O1mrRU/U7h499d9s5uUmToNxQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFB5vHcsBFcfI6gZMfxu0KI3L5ojKMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0L2Q4ZGU2YTI5NDk5M2UxYmYyOWNjZDk4YzAyNWVmOGI1NDg4NjdkZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqjFvDANBAIAAjAHAwUAKAACoDANBgkqhkiG9w0BAQsFAAOC
AQEALz9l4mvYCPHOuOLkTln3B7ceWyfaiVGA9bdQf3XRbQdxjYv1zmxAaBcjpQjr
02V5GZaNXRvEgGyc/Q5cbSqHbZiAYv7qdmvhtdFg8XpshDPCM3IxC9ciELWB6KUR
aXtIhMBN6Ysb2mPGaWCDSKeH9hMuSkXJanBtepFZj7lB8v+z4jLieO4GXrX1mwWL
9o9lavqRTiHLm/KPFqddks14KkzslofsKbsRgDxvR28WKXN+fHhSIMy5RlHMSkVV
JUegPX+W+CaG0qDIvle0UaUPOc9MPB5Gq/IclM8lPNzZZEN5yL9r0SWBRCIPl2LJ
4/fX9iDurW6PQFCWgqc9gslc9A==
-----END CERTIFICATE-----