Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/402eddc1509e55e54fdefb82d900bdf2d1eab3d2.roa
File:                     402eddc1509e55e54fdefb82d900bdf2d1eab3d2.roa (raw, json)
Hash identifier:          8OHhXSIaxHsBr68b/oHebALn9QmChRZVMRSuobLv5sc=
Subject key identifier:   99:42:8A:FC:76:98:D6:B6:70:FF:D6:4E:5E:80:75:B8:7F:DD:C4:3F
Certificate issuer:       /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial:       1EED13
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/402eddc1509e55e54fdefb82d900bdf2d1eab3d2.roa
Signing time:             Mon 29 May 2023 12:27:56 +0000
ROA not before:           Sun 28 May 2023 12:27:56 +0000
ROA not after:            Thu 29 May 2025 12:27:56 +0000
asID:                     15107
IP address blocks:        148.244.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026771 (0x1eed13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
        Validity
            Not Before: May 28 12:27:56 2023 GMT
            Not After : May 29 12:27:56 2025 GMT
        Subject: CN=402eddc1509e55e54fdefb82d900bdf2d1eab3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bc:b8:fa:b6:70:da:c9:d7:ba:de:3d:c8:2f:
                    c3:9c:c7:a6:01:e4:7e:71:8b:7a:ee:04:7f:9b:e0:
                    28:97:a8:e3:6e:e9:99:38:2e:d3:5d:14:2c:3d:3d:
                    b0:d5:96:58:4f:b7:1f:8d:e6:d4:11:86:40:57:a6:
                    43:61:f2:c5:97:06:c4:10:44:fe:e5:a7:3a:78:91:
                    44:ea:12:0d:ae:6e:ec:c1:2f:63:b8:f9:63:bb:49:
                    dc:15:0e:ca:c0:c6:33:cd:59:3c:b6:4f:25:f9:c9:
                    13:68:7a:aa:97:b8:06:f2:dc:1b:18:89:0f:7d:80:
                    b3:80:19:f6:4d:b5:76:03:e0:f7:09:f5:e5:81:6a:
                    8c:82:4f:ef:42:c6:5a:63:b7:ae:92:af:15:3b:3f:
                    8a:6a:65:b3:be:dd:ed:b1:60:cc:ad:df:f4:32:8c:
                    b8:a1:ec:60:a3:a3:3c:12:da:7b:9b:72:39:a9:2a:
                    82:71:5d:b6:1c:bd:e0:86:6d:66:09:ba:06:22:76:
                    cc:86:94:4c:b0:9f:07:65:4c:79:75:a1:15:50:fa:
                    1c:7d:f1:95:a4:73:6b:78:ed:21:bb:7a:6e:6c:7d:
                    d5:80:fa:c2:f4:98:77:30:00:25:0d:c2:f2:b0:51:
                    fd:65:8e:dd:6f:fc:53:54:14:b7:e3:47:85:3a:5f:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:8A:FC:76:98:D6:B6:70:FF:D6:4E:5E:80:75:B8:7F:DD:C4:3F
            X509v3 Authority Key Identifier:
                keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/402eddc1509e55e54fdefb82d900bdf2d1eab3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:b7:32:ba:cf:c7:82:33:7a:32:c9:90:d7:37:5f:52:a5:
         55:f4:27:b6:0a:53:dc:9c:7d:e2:e3:f6:4a:29:d7:4b:81:28:
         f2:9b:9e:ba:eb:14:00:69:ae:70:20:95:c0:30:19:3a:ea:b3:
         c2:bb:e2:ac:00:fd:b5:a4:bd:95:43:22:8b:e1:27:cf:1e:30:
         c7:7f:00:6b:de:7e:ce:4e:25:25:9e:ab:17:6d:f3:6f:d0:16:
         09:87:a6:86:4d:2a:23:71:ce:1b:75:1b:36:96:da:82:a6:ac:
         1c:9b:5b:e8:cb:b9:9a:5c:7f:ae:ae:7c:15:19:2f:25:18:9c:
         54:2f:6b:f9:b4:13:d2:d4:8c:d8:51:88:f8:e0:52:1f:88:8c:
         5d:52:9b:a9:82:bf:ac:0c:75:3c:d4:da:4b:22:9e:c4:4b:a3:
         8c:9b:94:6b:1e:c2:7b:ac:d3:77:0b:95:40:ff:b4:5d:3b:89:
         ea:8a:63:bd:77:16:b3:b7:9b:6a:a9:37:e0:ad:91:4f:bf:ec:
         9d:b1:5e:bf:d1:94:fe:68:63:32:dc:b6:90:a3:9e:6a:22:4a:
         9a:71:0a:37:bc:91:e8:86:87:89:ec:d1:fe:3c:63:15:1f:e4:
         f6:cf:bb:64:a3:c0:6f:1a:5b:d6:4d:2a:2e:69:b7:0b:c2:db:
         fd:b8:b4:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHu0TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
MzJlZDdmYzc1ODdhMTEyNDA5MDFjNzZjMWY2ZjY0ZjMwMjAxNDkwHhcNMjMwNTI4
MTIyNzU2WhcNMjUwNTI5MTIyNzU2WjAzMTEwLwYDVQQDEyg0MDJlZGRjMTUwOWU1
NWU1NGZkZWZiODJkOTAwYmRmMmQxZWFiM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgLy4+rZw2snXut49yC/DnMemAeR+cYt67gR/m+Aol6jjbumZ
OC7TXRQsPT2w1ZZYT7cfjebUEYZAV6ZDYfLFlwbEEET+5ac6eJFE6hINrm7swS9j
uPlju0ncFQ7KwMYzzVk8tk8l+ckTaHqql7gG8twbGIkPfYCzgBn2TbV2A+D3CfXl
gWqMgk/vQsZaY7eukq8VOz+KamWzvt3tsWDMrd/0Moy4oexgo6M8Etp7m3I5qSqC
cV22HL3ghm1mCboGInbMhpRMsJ8HZUx5daEVUPocffGVpHNreO0hu3pubH3VgPrC
9Jh3MAAlDcLysFH9ZY7db/xTVBS340eFOl9CXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJlCivx2mNa2cP/WTl6Adbh/3cQ/MB8GA1UdIwQYMBaAFGPl5w+iPAyAg36h
/pZQdpXAzl7/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzMmVk
N2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI1MDA5M2MtYmE5OC00OGI4LThjNTItOWFiZTU3
ZDUyZDRmLzQwMmVkZGMxNTA5ZTU1ZTU0ZmRlZmI4MmQ5MDBiZGYyZDFlYWIzZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjUwMDkzYy1iYTk4LTQ4YjgtOGM1Mi05YWJl
NTdkNTJkNGYvMDkzMmVkN2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBpT0ADANBgkqhkiG9w0BAQsFAAOCAQEAmHq3MrrPx4IzejLJ
kNc3X1KlVfQntgpT3Jx94uP2SinXS4Eo8pueuusUAGmucCCVwDAZOuqzwrvirAD9
taS9lUMii+Enzx4wx38Aa95+zk4lJZ6rF23zb9AWCYemhk0qI3HOG3UbNpbagqas
HJtb6Mu5mlx/rq58FRkvJRicVC9r+bQT0tSM2FGI+OBSH4iMXVKbqYK/rAx1PNTa
SyKexEujjJuUax7Ce6zTdwuVQP+0XTuJ6opjvXcWs7ebaqk34K2RT7/snbFev9GU
/mhjMty2kKOeaiJKmnEKN7yR6IaHiezR/jxjFR/k9s+7ZKPAbxpb1k0qLmm3C8Lb
/bi0Cw==
-----END CERTIFICATE-----