Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/b9ea1d71b56cb0db8f4aef04c87f4af52626ff45.roa
File:                     b9ea1d71b56cb0db8f4aef04c87f4af52626ff45.roa (raw, json)
Hash identifier:          bdqn3VUwsF5Dl9wL/cE36byetOwOqsCcT5u8H+9EByg=
Subject key identifier:   DF:06:06:B0:FA:A5:F3:F8:E4:B8:56:8C:C2:41:68:DE:95:B8:E9:72
Certificate issuer:       /CN=dbb33696dfeda6014d72e7e580e08c1dc7180b30
Certificate serial:       05A75E
Authority key identifier: CB:36:70:79:1D:9C:F3:5B:D5:00:5F:EA:95:1F:E4:C4:D3:C9:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbb33696dfeda6014d72e7e580e08c1dc7180b30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/b9ea1d71b56cb0db8f4aef04c87f4af52626ff45.roa
Signing time:             Wed 07 Feb 2024 01:38:22 +0000
ROA not before:           Wed 07 Feb 2024 01:38:22 +0000
ROA not after:            Sat 07 Feb 2026 01:38:22 +0000
asID:                     271825
IP address blocks:        179.42.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370526 (0x5a75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb33696dfeda6014d72e7e580e08c1dc7180b30
        Validity
            Not Before: Feb  7 01:38:22 2024 GMT
            Not After : Feb  7 01:38:22 2026 GMT
        Subject: CN=b9ea1d71b56cb0db8f4aef04c87f4af52626ff45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:2e:f6:a7:aa:3b:6c:0f:b2:cb:e5:31:6c:
                    89:14:93:af:0b:5a:4a:eb:9f:87:ce:a8:ab:db:10:
                    1a:dc:10:cf:ac:fe:ea:1c:7b:4e:ff:06:e4:31:b6:
                    dc:2c:de:18:50:30:b2:28:d3:4c:68:d6:95:49:6a:
                    1e:c0:3d:7f:de:4b:9b:bf:85:9d:05:d5:bf:f8:fd:
                    29:9f:0a:39:48:70:7c:3d:e7:6e:ac:fa:1f:11:07:
                    d2:8a:2b:a9:16:e9:5d:d4:53:fd:a5:0b:e7:3b:00:
                    8f:d3:10:6e:0e:68:02:f8:b3:a9:57:dd:7d:a8:67:
                    f5:26:16:6b:9d:32:8e:27:5f:45:22:71:21:94:9b:
                    2c:71:4c:e0:35:36:44:ee:e1:45:03:05:43:06:b1:
                    9f:10:8e:33:bd:46:f6:6a:12:3f:5b:65:49:19:8b:
                    a9:68:80:13:6d:a2:43:e4:98:5b:a6:f0:bb:2b:1e:
                    aa:6f:3e:6f:c8:f9:d1:ca:82:1a:81:a5:da:cc:d7:
                    e3:06:78:af:dd:c3:7c:b5:10:d4:bb:13:e1:f7:7e:
                    1f:fd:60:4b:88:2b:4c:0b:94:5e:79:0d:ed:42:fc:
                    26:79:54:b0:d0:06:80:05:d9:eb:71:96:cf:5d:7c:
                    4c:56:a4:2c:41:9c:0c:47:d2:a9:ed:47:90:87:1a:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:06:B0:FA:A5:F3:F8:E4:B8:56:8C:C2:41:68:DE:95:B8:E9:72
            X509v3 Authority Key Identifier:
                keyid:CB:36:70:79:1D:9C:F3:5B:D5:00:5F:EA:95:1F:E4:C4:D3:C9:18:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbb33696dfeda6014d72e7e580e08c1dc7180b30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/b9ea1d71b56cb0db8f4aef04c87f4af52626ff45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dbb33696dfeda6014d72e7e580e08c1dc7180b30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:4f:32:5b:ea:a6:62:69:2d:25:4f:a7:dd:08:6e:7b:8b:79:
         45:da:19:e0:f1:35:73:83:05:03:1f:6d:cd:19:5f:15:f7:b0:
         a8:5f:6d:e5:36:3b:89:d2:ab:d2:64:83:14:5c:60:22:28:34:
         b2:38:d9:06:ee:c9:a3:86:22:1c:d6:2c:88:04:48:04:dd:6e:
         84:be:94:87:3e:db:0e:82:08:b9:e9:03:c5:ab:cd:8a:24:5f:
         4c:cb:28:3b:f3:25:2c:fe:95:b1:76:67:b7:55:e2:9d:42:48:
         0e:e1:d2:8b:15:c9:52:77:d5:dc:ea:de:04:1b:d2:f1:96:af:
         21:da:d1:c0:fc:fb:92:ba:29:f5:00:23:ad:e2:98:15:1b:1b:
         ab:cf:8c:6f:8a:6a:b0:67:95:c7:8a:f4:95:8d:74:9e:79:b4:
         b4:44:f0:29:65:97:11:e2:40:43:4e:53:49:94:73:64:a5:b1:
         a1:67:b9:ba:c8:7d:89:6b:14:72:0a:c0:09:51:3d:70:99:09:
         0a:2d:cd:f5:8c:86:8b:68:c7:a5:50:95:05:a0:37:14:9e:d3:
         27:ff:8c:86:e3:84:f3:72:ed:38:b1:28:72:35:c3:82:43:1d:
         83:59:76:2e:88:08:1a:0c:ec:b5:7b:95:da:39:6c:42:b1:55:
         64:5c:47:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBadeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRi
YjMzNjk2ZGZlZGE2MDE0ZDcyZTdlNTgwZTA4YzFkYzcxODBiMzAwHhcNMjQwMjA3
MDEzODIyWhcNMjYwMjA3MDEzODIyWjAzMTEwLwYDVQQDEyhiOWVhMWQ3MWI1NmNi
MGRiOGY0YWVmMDRjODdmNGFmNTI2MjZmZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn+0u9qeqO2wPssvlMWyJFJOvC1pK65+Hzqir2xAa3BDPrP7q
HHtO/wbkMbbcLN4YUDCyKNNMaNaVSWoewD1/3kubv4WdBdW/+P0pnwo5SHB8Pedu
rPofEQfSiiupFuld1FP9pQvnOwCP0xBuDmgC+LOpV919qGf1JhZrnTKOJ19FInEh
lJsscUzgNTZE7uFFAwVDBrGfEI4zvUb2ahI/W2VJGYupaIATbaJD5JhbpvC7Kx6q
bz5vyPnRyoIagaXazNfjBniv3cN8tRDUuxPh934f/WBLiCtMC5ReeQ3tQvwmeVSw
0AaABdnrcZbPXXxMVqQsQZwMR9Kp7UeQhxoc8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN8GBrD6pfP45LhWjMJBaN6VuOlyMB8GA1UdIwQYMBaAFMs2cHkdnPNb1QBf
6pUf5MTTyRiGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGJiMzM2
OTZkZmVkYTYwMTRkNzJlN2U1ODBlMDhjMWRjNzE4MGIzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDgxZjg0ODAtYmI1ZS00N2U2LTg1NjgtZmU1ZDAy
YmEwNWY1L2I5ZWExZDcxYjU2Y2IwZGI4ZjRhZWYwNGM4N2Y0YWY1MjYyNmZmNDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wODFmODQ4MC1iYjVlLTQ3ZTYtODU2OC1mZTVk
MDJiYTA1ZjUvZGJiMzM2OTZkZmVkYTYwMTRkNzJlN2U1ODBlMDhjMWRjNzE4MGIz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbMqXjANBgkqhkiG9w0BAQsFAAOCAQEAlU8yW+qmYmktJU+n
3Qhue4t5RdoZ4PE1c4MFAx9tzRlfFfewqF9t5TY7idKr0mSDFFxgIig0sjjZBu7J
o4YiHNYsiARIBN1uhL6Uhz7bDoIIuekDxavNiiRfTMsoO/MlLP6VsXZnt1XinUJI
DuHSixXJUnfV3OreBBvS8ZavIdrRwPz7krop9QAjreKYFRsbq8+Mb4pqsGeVx4r0
lY10nnm0tETwKWWXEeJAQ05TSZRzZKWxoWe5ush9iWsUcgrACVE9cJkJCi3N9YyG
i2jHpVCVBaA3FJ7TJ/+MhuOE83LtOLEocjXDgkMdg1l2LogIGgzstXuV2jlsQrFV
ZFxHHw==
-----END CERTIFICATE-----