Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/23d5abaf0f5ef69175f1e0ad7f65071059f46874.roa
File:                     23d5abaf0f5ef69175f1e0ad7f65071059f46874.roa (raw, json)
Hash identifier:          0X+4SHPS2mgmg10wSZ5mrEJE2h2i5ggNkl9ti4mE1js=
Subject key identifier:   D3:C1:82:21:2F:DD:2E:E0:6C:D1:39:4B:6E:02:11:2E:D4:29:75:AA
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       234D94
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/23d5abaf0f5ef69175f1e0ad7f65071059f46874.roa
Signing time:             Mon 14 Aug 2023 20:07:30 +0000
ROA not before:           Sun 13 Aug 2023 20:07:28 +0000
ROA not after:            Thu 14 Aug 2025 20:07:28 +0000
asID:                     27995
IP address blocks:        179.4.0.0/16 maxlen: 24
                          186.20.0.0/15 maxlen: 16
                          186.172.0.0/14 maxlen: 16
                          191.116.0.0/14 maxlen: 24
                          179.2.0.0/15 maxlen: 24
                          190.110.128.0/19 maxlen: 24
                          2800:540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313620 (0x234d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Aug 13 20:07:28 2023 GMT
            Not After : Aug 14 20:07:28 2025 GMT
        Subject: CN=23d5abaf0f5ef69175f1e0ad7f65071059f46874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:b5:c5:de:b2:90:cb:68:ae:f4:a1:3f:19:
                    4b:3b:e4:e2:b0:d9:db:7e:b2:7d:c3:90:a9:a8:4d:
                    c5:d3:56:04:87:33:81:45:fb:0b:cb:b3:ca:18:f5:
                    7d:f1:db:9b:88:b4:70:05:46:c9:d7:b6:d6:03:76:
                    b7:7d:c5:f0:ef:a5:61:1b:5b:04:ce:57:30:b6:c3:
                    fa:34:9f:41:2c:48:6a:12:b0:f4:d7:41:f5:4a:96:
                    06:9f:33:c0:e8:ed:36:ef:16:b5:39:25:16:ef:93:
                    24:6c:07:df:12:1a:b7:45:54:c7:34:67:d4:c1:26:
                    8a:4c:bc:af:d7:78:d6:ea:73:93:f4:b4:d4:f8:fb:
                    62:ed:0b:a8:d7:50:ac:54:4d:1a:64:ac:a0:12:2d:
                    d3:6c:27:8d:d0:58:87:a2:56:2e:97:1c:b0:b7:2b:
                    ab:51:87:d4:59:5c:fe:0f:91:4a:9d:fc:4f:ac:1c:
                    61:35:6b:6e:50:6d:0a:df:42:6a:0f:54:0c:74:a0:
                    3c:10:c3:96:38:74:3e:61:29:cf:f7:8b:89:78:17:
                    84:b0:9c:8e:da:99:e5:10:50:0b:72:34:a0:39:a8:
                    4b:8a:41:13:4e:79:fc:21:ba:ba:bf:61:d3:47:f4:
                    de:dd:e7:a8:20:5c:b7:d6:a8:79:b4:3b:61:44:91:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:82:21:2F:DD:2E:E0:6C:D1:39:4B:6E:02:11:2E:D4:29:75:AA
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/23d5abaf0f5ef69175f1e0ad7f65071059f46874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0-179.4.255.255
                  186.20.0.0/15
                  186.172.0.0/14
                  190.110.128.0/19
                  191.116.0.0/14
                IPv6:
                  2800:540::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:6c:c1:a8:f5:9c:16:14:11:f2:56:81:d8:56:d7:fa:cf:
         2b:31:5d:b7:fc:2d:9d:7c:18:0a:bb:74:97:3e:40:a0:89:50:
         bd:ab:9e:f8:ad:24:21:55:71:08:19:f0:d6:4c:0b:2d:10:53:
         80:08:80:90:21:a8:06:71:47:22:79:50:a4:bd:2f:b1:3d:21:
         31:49:84:f9:9a:55:b6:57:8a:5e:0c:ba:f7:33:57:16:9e:ed:
         c8:8a:40:6d:90:c7:28:3a:24:8e:12:5b:38:f2:12:12:7b:5b:
         d5:bb:5c:3f:d6:1f:ca:0a:60:48:90:ba:d1:79:71:10:78:eb:
         84:34:3d:ac:85:83:4b:e5:5b:d8:b6:1e:8c:d7:a3:2f:76:04:
         7e:00:d0:1f:db:de:60:f7:a9:53:49:8a:00:9c:1c:c4:e9:70:
         57:15:ca:c9:c3:84:f9:10:6b:6b:ae:f4:0f:15:52:6e:4c:a7:
         ac:d7:06:05:44:8a:ca:e6:3a:a5:b2:77:08:ff:fb:36:0e:cd:
         29:c3:d0:a9:e3:60:84:56:34:fb:b4:74:b1:e4:66:27:0c:24:
         42:52:de:6d:1f:83:38:38:4f:f3:06:e9:94:70:92:83:66:76:
         1e:d8:dd:a0:d6:ae:4d:b0:a1:36:6c:4a:fc:e0:14:e7:d4:e7:
         47:6a:25:99
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIDI02UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
MmJhZjFkNDM3MTJlZjVmMzg2MGIyMWQwNGU4NTM0NTM2ZmExNjQwHhcNMjMwODEz
MjAwNzI4WhcNMjUwODE0MjAwNzI4WjAzMTEwLwYDVQQDEygyM2Q1YWJhZjBmNWVm
NjkxNzVmMWUwYWQ3ZjY1MDcxMDU5ZjQ2ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAw/W1xd6ykMtorvShPxlLO+TisNnbfrJ9w5CpqE3F01YEhzOB
RfsLy7PKGPV98dubiLRwBUbJ17bWA3a3fcXw76VhG1sEzlcwtsP6NJ9BLEhqErD0
10H1SpYGnzPA6O027xa1OSUW75MkbAffEhq3RVTHNGfUwSaKTLyv13jW6nOT9LTU
+Pti7Quo11CsVE0aZKygEi3TbCeN0FiHolYulxywtyurUYfUWVz+D5FKnfxPrBxh
NWtuUG0K30JqD1QMdKA8EMOWOHQ+YSnP94uJeBeEsJyO2pnlEFALcjSgOahLikET
Tnn8Ibq6v2HTR/Te3eeoIFy31qh5tDthRJHSbQIDAQABo4IChTCCAoEwHQYDVR0O
BBYEFNPBgiEv3S7gbNE5S24CES7UKXWqMB8GA1UdIwQYMBaAFIfjVjLD26sNS5jd
XBIONKlIODBJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDYyYmFm
MWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmQyZDI4MGItNmJhYy00Y2NlLWIwZTEtYzk1YjRj
ZGQwNTBjLzIzZDVhYmFmMGY1ZWY2OTE3NWYxZTBhZDdmNjUwNzEwNTlmNDY4NzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZDJkMjgwYi02YmFjLTRjY2UtYjBlMS1jOTVi
NGNkZDA1MGMvZDYyYmFmMWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6
MDgwJwQCAAEwITAKAwMBswIDAwCzBAMDAboUAwMCuqwDBAW+boADAwK/dDANBAIA
AjAHAwUAKAAFQDANBgkqhkiG9w0BAQsFAAOCAQEAhNxswaj1nBYUEfJWgdhW1/rP
KzFdt/wtnXwYCrt0lz5AoIlQvaue+K0kIVVxCBnw1kwLLRBTgAiAkCGoBnFHInlQ
pL0vsT0hMUmE+ZpVtleKXgy69zNXFp7tyIpAbZDHKDokjhJbOPISEntb1btcP9Yf
ygpgSJC60XlxEHjrhDQ9rIWDS+Vb2LYejNejL3YEfgDQH9veYPepU0mKAJwcxOlw
VxXKycOE+RBra670DxVSbkynrNcGBUSKyuY6pbJ3CP/7Ng7NKcPQqeNghFY0+7R0
seRmJwwkQlLebR+DODhP8wbplHCSg2Z2HtjdoNauTbChNmxK/OAU59TnR2olmQ==
-----END CERTIFICATE-----