Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/8e26af21a087c68b89e30f1115b53b863d50ce8f.roa
File:                     8e26af21a087c68b89e30f1115b53b863d50ce8f.roa (raw, json)
Hash identifier:          fQuWmqRbWRuQdCGEhcqyK8o8fjwWz+eC3I2JAqlaW8g=
Subject key identifier:   68:E8:B4:C5:D4:68:75:DE:8B:B4:70:87:C9:7A:61:DF:61:30:01:40
Certificate issuer:       /CN=09388c479448ba5275aecc1ebce8e9e6fdf027ef
Certificate serial:       1DABBE
Authority key identifier: 0D:AC:0D:E6:3E:9B:D7:77:0F:3F:6D:94:83:8F:0B:9D:E4:51:60:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09388c479448ba5275aecc1ebce8e9e6fdf027ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/8e26af21a087c68b89e30f1115b53b863d50ce8f.roa
Signing time:             Thu 16 Nov 2023 20:19:11 +0000
ROA not before:           Thu 16 Nov 2023 20:19:11 +0000
ROA not after:            Sun 16 Nov 2025 20:19:11 +0000
asID:                     272803
IP address blocks:        45.231.216.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944510 (0x1dabbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09388c479448ba5275aecc1ebce8e9e6fdf027ef
        Validity
            Not Before: Nov 16 20:19:11 2023 GMT
            Not After : Nov 16 20:19:11 2025 GMT
        Subject: CN=8e26af21a087c68b89e30f1115b53b863d50ce8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:5a:de:cd:25:f6:47:95:61:af:9f:fc:62:
                    f8:7f:b3:11:0b:3c:d0:60:bf:f7:b7:ae:57:c7:77:
                    00:c3:cf:d2:b7:d5:82:df:a2:2c:0e:7b:75:c3:b2:
                    e7:00:b0:3e:5c:42:9f:37:11:a3:67:ac:10:49:0d:
                    eb:a1:e8:a9:70:ae:80:19:98:b8:25:5b:03:63:12:
                    f8:f2:5f:ea:96:cc:fb:d8:13:38:c5:a6:4e:ea:47:
                    0a:c7:6d:bf:83:80:bd:46:00:80:75:34:77:61:80:
                    91:df:da:f8:58:43:80:81:03:c0:28:2b:49:bf:7e:
                    70:f6:2a:61:24:94:c3:e8:38:af:40:cf:47:d6:95:
                    6e:1d:09:1b:1e:43:b3:48:53:5b:ea:ef:06:59:6e:
                    09:86:a8:ec:38:fb:0d:bb:82:15:79:24:0d:0e:57:
                    51:d8:91:92:6b:e4:20:43:74:6d:32:e7:e2:fa:9a:
                    a8:6d:84:0e:7b:3b:22:3d:b2:e8:ab:85:c5:69:f6:
                    06:6d:2f:6f:88:97:0c:1c:a9:c5:86:b1:ca:b7:b8:
                    0d:be:21:37:60:2d:59:17:39:dd:89:8d:c7:31:8b:
                    79:2b:29:05:e7:b3:b8:54:9c:e3:15:e8:00:0a:84:
                    1b:37:c3:39:cb:ed:4c:9e:33:de:19:c1:1e:bf:61:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:B4:C5:D4:68:75:DE:8B:B4:70:87:C9:7A:61:DF:61:30:01:40
            X509v3 Authority Key Identifier:
                keyid:0D:AC:0D:E6:3E:9B:D7:77:0F:3F:6D:94:83:8F:0B:9D:E4:51:60:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09388c479448ba5275aecc1ebce8e9e6fdf027ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/8e26af21a087c68b89e30f1115b53b863d50ce8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/09388c479448ba5275aecc1ebce8e9e6fdf027ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:5e:ca:5c:d3:f0:92:9b:38:49:81:36:af:17:05:af:39:
         35:5a:d1:bd:be:15:6a:95:06:d3:e6:9e:0c:0c:b1:6f:fb:24:
         98:62:93:0e:5d:f2:84:c0:55:7c:6c:5a:68:58:77:8a:33:34:
         87:3f:f8:49:dd:00:33:09:b6:ab:5e:0e:5b:c8:c9:c1:1d:82:
         2a:4b:ff:81:f6:82:91:bb:8c:2d:f6:91:01:f8:9b:8d:bd:5d:
         3b:60:2c:9e:0b:24:c4:8c:51:81:82:eb:58:3a:de:bc:25:cf:
         04:b2:6a:09:51:3f:8c:72:4f:1e:72:3a:70:ce:bc:be:51:72:
         99:a8:3d:57:3e:19:00:e3:76:53:90:79:42:7e:f2:1a:0f:40:
         3c:76:3c:f9:69:5d:48:d5:5b:de:c2:47:90:97:7e:21:eb:59:
         69:97:55:1e:4c:32:f2:19:0d:9e:ea:8f:c3:ac:78:aa:14:20:
         59:02:14:fe:14:87:d2:ff:1b:ea:e8:7c:6f:a1:aa:36:2f:4a:
         e8:c1:b6:71:37:01:80:51:4b:a4:2c:3e:34:69:06:a8:bf:9f:
         1a:96:a1:a0:9a:54:a7:1c:56:73:4b:a5:5f:1f:1b:34:7f:a2:
         c7:a9:42:78:bb:76:0f:4e:e7:ec:12:c0:88:13:0c:f9:6b:e6:
         6b:a6:7f:6e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHau+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
Mzg4YzQ3OTQ0OGJhNTI3NWFlY2MxZWJjZThlOWU2ZmRmMDI3ZWYwHhcNMjMxMTE2
MjAxOTExWhcNMjUxMTE2MjAxOTExWjAzMTEwLwYDVQQDEyg4ZTI2YWYyMWEwODdj
NjhiODllMzBmMTExNWI1M2I4NjNkNTBjZThmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyopa3s0l9keVYa+f/GL4f7MRCzzQYL/3t65Xx3cAw8/St9WC
36IsDnt1w7LnALA+XEKfNxGjZ6wQSQ3roeipcK6AGZi4JVsDYxL48l/qlsz72BM4
xaZO6kcKx22/g4C9RgCAdTR3YYCR39r4WEOAgQPAKCtJv35w9iphJJTD6DivQM9H
1pVuHQkbHkOzSFNb6u8GWW4JhqjsOPsNu4IVeSQNDldR2JGSa+QgQ3RtMufi+pqo
bYQOezsiPbLoq4XFafYGbS9viJcMHKnFhrHKt7gNviE3YC1ZFzndiY3HMYt5KykF
57O4VJzjFegACoQbN8M5y+1MnjPeGcEev2E1zQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGjotMXUaHXei7Rwh8l6Yd9hMAFAMB8GA1UdIwQYMBaAFA2sDeY+m9d3Dz9t
lIOPC53kUWA6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzODhj
NDc5NDQ4YmE1Mjc1YWVjYzFlYmNlOGU5ZTZmZGYwMjdlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDlmYjc1NjctMGNiZi00Nzc4LWFiNmEtOWMxNTNk
ZjdlNDEwLzhlMjZhZjIxYTA4N2M2OGI4OWUzMGYxMTE1YjUzYjg2M2Q1MGNlOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOWZiNzU2Ny0wY2JmLTQ3NzgtYWI2YS05YzE1
M2RmN2U0MTAvMDkzODhjNDc5NDQ4YmE1Mjc1YWVjYzFlYmNlOGU5ZTZmZGYwMjdl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3n2DANBgkqhkiG9w0BAQsFAAOCAQEAj59eylzT8JKbOEmB
Nq8XBa85NVrRvb4VapUG0+aeDAyxb/skmGKTDl3yhMBVfGxaaFh3ijM0hz/4Sd0A
Mwm2q14OW8jJwR2CKkv/gfaCkbuMLfaRAfibjb1dO2AsngskxIxRgYLrWDrevCXP
BLJqCVE/jHJPHnI6cM68vlFymag9Vz4ZAON2U5B5Qn7yGg9APHY8+WldSNVb3sJH
kJd+IetZaZdVHkwy8hkNnuqPw6x4qhQgWQIU/hSH0v8b6uh8b6GqNi9K6MG2cTcB
gFFLpCw+NGkGqL+fGpahoJpUpxxWc0ulXx8bNH+ix6lCeLt2D07n7BLAiBMM+Wvm
a6Z/bg==
-----END CERTIFICATE-----