Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/86c705c61f2e5fbdb785b8adadd0833d4531055a.roa
File:                     86c705c61f2e5fbdb785b8adadd0833d4531055a.roa (raw, json)
Hash identifier:          aF2DBFFdPCDH4jRE/7KcQNj1qwANQRJXO6mP4T+Qe4E=
Subject key identifier:   D4:78:8F:6B:44:6C:63:88:46:BF:A0:1E:5F:7A:77:90:63:0F:E0:50
Certificate issuer:       /CN=20561c0e6e4a53a86130af5c55d968e60b1940cd
Certificate serial:       262399
Authority key identifier: 99:51:67:0F:72:6F:79:94:1D:22:C9:47:BD:8C:62:9E:0D:06:CF:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20561c0e6e4a53a86130af5c55d968e60b1940cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/86c705c61f2e5fbdb785b8adadd0833d4531055a.roa
Signing time:             Thu 18 Jan 2024 18:45:20 +0000
ROA not before:           Thu 18 Jan 2024 18:45:20 +0000
ROA not after:            Thu 18 Jan 2029 18:45:20 +0000
asID:                     266780
IP address blocks:        45.234.112.0/22 maxlen: 24
                          2803:9f20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499481 (0x262399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20561c0e6e4a53a86130af5c55d968e60b1940cd
        Validity
            Not Before: Jan 18 18:45:20 2024 GMT
            Not After : Jan 18 18:45:20 2029 GMT
        Subject: CN=86c705c61f2e5fbdb785b8adadd0833d4531055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:ff:5e:6c:b1:44:59:3b:26:af:1d:cc:28:
                    6a:30:08:a8:e2:46:b3:bd:6b:2b:4f:c4:7e:d6:5e:
                    8c:be:4d:db:c2:ff:8f:34:2f:9b:97:12:21:ac:39:
                    4d:9e:38:84:39:09:e7:9f:f8:09:d5:77:dc:69:bb:
                    2e:b2:97:76:aa:5b:58:dd:b7:8e:6c:78:04:58:3b:
                    50:ac:b1:d1:57:8f:af:aa:d3:da:43:11:b9:d3:67:
                    00:4e:36:40:64:fa:b6:c0:e0:7d:ad:19:a8:0b:cd:
                    5f:8b:ba:7f:3f:86:72:fe:e1:05:db:fa:b0:03:80:
                    a8:83:25:1c:61:4f:b9:7f:38:6f:36:66:bd:94:5f:
                    e9:02:94:80:f7:10:d1:97:90:72:40:de:2f:8b:27:
                    5c:8c:5f:1a:c2:8f:8c:8f:a3:f9:95:a1:07:87:3f:
                    0e:c6:0e:34:0f:b7:95:ff:9f:79:90:34:64:b9:99:
                    8b:c1:c9:ad:be:aa:f6:e9:95:3a:52:45:78:59:7b:
                    30:53:4e:3d:7b:27:49:ac:8c:ee:00:c1:98:e1:20:
                    83:71:eb:bf:11:1f:32:fe:4b:e0:00:a7:89:a8:6b:
                    c4:22:6c:e3:6f:69:09:9f:66:8a:58:36:f7:be:59:
                    81:0a:24:cb:f1:80:e7:b7:4d:6e:02:01:19:45:94:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:8F:6B:44:6C:63:88:46:BF:A0:1E:5F:7A:77:90:63:0F:E0:50
            X509v3 Authority Key Identifier:
                keyid:99:51:67:0F:72:6F:79:94:1D:22:C9:47:BD:8C:62:9E:0D:06:CF:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20561c0e6e4a53a86130af5c55d968e60b1940cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/86c705c61f2e5fbdb785b8adadd0833d4531055a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06166a51-d6d4-4b9f-b374-d262b31d7155/20561c0e6e4a53a86130af5c55d968e60b1940cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.112.0/22
                IPv6:
                  2803:9f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:06:87:b2:39:72:77:4e:71:cc:cb:2d:bf:07:a0:51:f4:
         a5:37:7a:d6:53:59:d7:f5:3f:e9:50:2d:25:91:e3:27:6b:d9:
         8a:d5:ea:65:0e:6b:1c:1c:32:4e:39:57:e5:65:0f:90:ac:08:
         b6:89:bd:a7:fb:d5:99:45:5b:97:46:54:03:88:92:77:65:49:
         6d:a6:11:07:a5:94:34:93:1f:d5:c4:4b:f0:50:af:e3:6c:23:
         6c:39:35:c2:c7:a9:e2:d6:cf:b4:92:4a:e4:ab:df:4c:d3:89:
         90:c1:10:e9:07:a3:3d:83:97:5d:21:8c:52:ce:ca:c4:4b:97:
         36:49:9d:33:aa:15:a8:93:5f:91:4a:94:89:f7:13:3e:a4:98:
         1e:10:1b:59:8a:0f:43:56:90:ec:10:bd:05:7b:9e:a9:8f:0a:
         60:63:f4:84:76:1a:45:b7:cd:5d:c9:f0:0e:05:de:35:c3:29:
         dd:09:b2:88:63:bf:da:5a:a5:b2:c0:d5:d2:58:3e:36:eb:69:
         9d:fb:0d:0b:ff:97:a1:ed:77:e2:ab:a9:75:e2:32:5a:c4:49:
         48:bf:6d:15:d7:e1:0e:71:59:df:62:56:b9:7e:b6:76:4d:f0:
         9e:88:26:70:8d:59:cd:fe:4c:26:e9:38:63:4f:d3:25:60:f6:
         70:81:a0:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJiOZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
NTYxYzBlNmU0YTUzYTg2MTMwYWY1YzU1ZDk2OGU2MGIxOTQwY2QwHhcNMjQwMTE4
MTg0NTIwWhcNMjkwMTE4MTg0NTIwWjAzMTEwLwYDVQQDEyg4NmM3MDVjNjFmMmU1
ZmJkYjc4NWI4YWRhZGQwODMzZDQ1MzEwNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqGj/XmyxRFk7Jq8dzChqMAio4kazvWsrT8R+1l6Mvk3bwv+P
NC+blxIhrDlNnjiEOQnnn/gJ1Xfcabsuspd2qltY3beObHgEWDtQrLHRV4+vqtPa
QxG502cATjZAZPq2wOB9rRmoC81fi7p/P4Zy/uEF2/qwA4CogyUcYU+5fzhvNma9
lF/pApSA9xDRl5ByQN4viydcjF8awo+Mj6P5laEHhz8Oxg40D7eV/595kDRkuZmL
wcmtvqr26ZU6UkV4WXswU049eydJrIzuAMGY4SCDceu/ER8y/kvgAKeJqGvEImzj
b2kJn2aKWDb3vlmBCiTL8YDnt01uAgEZRZQ6swIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNR4j2tEbGOIRr+gHl96d5BjD+BQMB8GA1UdIwQYMBaAFJlRZw9yb3mUHSLJ
R72MYp4NBs8jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjA1NjFj
MGU2ZTRhNTNhODYxMzBhZjVjNTVkOTY4ZTYwYjE5NDBjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDYxNjZhNTEtZDZkNC00YjlmLWIzNzQtZDI2MmIz
MWQ3MTU1Lzg2YzcwNWM2MWYyZTVmYmRiNzg1YjhhZGFkZDA4MzNkNDUzMTA1NWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNjE2NmE1MS1kNmQ0LTRiOWYtYjM3NC1kMjYy
YjMxZDcxNTUvMjA1NjFjMGU2ZTRhNTNhODYxMzBhZjVjNTVkOTY4ZTYwYjE5NDBj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3qcDANBAIAAjAHAwUAKAOfIDANBgkqhkiG9w0BAQsFAAOC
AQEAlKcGh7I5cndOcczLLb8HoFH0pTd61lNZ1/U/6VAtJZHjJ2vZitXqZQ5rHBwy
TjlX5WUPkKwItom9p/vVmUVbl0ZUA4iSd2VJbaYRB6WUNJMf1cRL8FCv42wjbDk1
wsep4tbPtJJK5KvfTNOJkMEQ6QejPYOXXSGMUs7KxEuXNkmdM6oVqJNfkUqUifcT
PqSYHhAbWYoPQ1aQ7BC9BXueqY8KYGP0hHYaRbfNXcnwDgXeNcMp3QmyiGO/2lql
ssDV0lg+NutpnfsNC/+Xoe134qupdeIyWsRJSL9tFdfhDnFZ32JWuX62dk3wnogm
cI1Zzf5MJuk4Y0/TJWD2cIGgvQ==
-----END CERTIFICATE-----