Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/6485e8d4931f47cbb8734be20f23ae190f58a55c.roa
File:                     6485e8d4931f47cbb8734be20f23ae190f58a55c.roa (raw, json)
Hash identifier:          ek7BgKBZDwjV0viW3J0jEnzvfSRzA1Kvo+rAj5T14xg=
Subject key identifier:   BC:DD:BA:F0:69:50:54:24:5F:F9:66:6A:7D:1C:BA:34:E4:F2:AA:1A
Certificate issuer:       /CN=06648e29e39a495ed1db237056c029aa5ab8ead6
Certificate serial:       11CE18
Authority key identifier: 2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/6485e8d4931f47cbb8734be20f23ae190f58a55c.roa
Signing time:             Sat 25 Nov 2023 07:30:01 +0000
ROA not before:           Sat 25 Nov 2023 07:30:01 +0000
ROA not after:            Mon 24 Nov 2025 07:30:01 +0000
asID:                     266842
IP address blocks:        45.186.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166872 (0x11ce18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06648e29e39a495ed1db237056c029aa5ab8ead6
        Validity
            Not Before: Nov 25 07:30:01 2023 GMT
            Not After : Nov 24 07:30:01 2025 GMT
        Subject: CN=6485e8d4931f47cbb8734be20f23ae190f58a55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:ff:9d:34:aa:00:83:f3:cb:8e:6a:99:f9:
                    fb:47:7d:8a:ac:2d:8a:b6:a9:33:33:c7:7d:58:10:
                    51:18:ba:28:2f:d0:96:82:9d:8b:07:9d:9a:0f:e7:
                    04:36:13:f2:4b:18:58:28:05:bb:8f:5b:5f:81:1d:
                    cf:8c:fb:62:72:5f:1d:5b:cf:25:79:71:c1:26:f4:
                    69:5e:ef:b8:51:7c:74:d0:61:63:f7:58:58:39:8e:
                    31:91:c7:78:ac:da:a3:0f:3c:e3:91:a7:f4:33:c5:
                    7f:36:7b:2b:ab:09:9c:e6:5b:1a:d2:0e:c8:ba:0f:
                    f8:4f:0d:80:b1:6a:29:b1:36:f2:d3:95:ea:02:92:
                    7f:9e:17:b9:a8:90:bc:59:ff:d3:93:8d:ef:a0:a4:
                    8f:bd:ed:1d:e8:cb:75:e2:1f:20:a1:72:e3:89:15:
                    aa:e0:60:41:d3:9a:4e:f6:b2:82:11:27:7f:c9:45:
                    9d:bb:03:a6:0f:5e:72:41:bd:57:68:58:38:f2:c3:
                    b4:13:4e:81:ac:aa:a7:f2:5f:60:54:3f:41:4c:b1:
                    86:f9:eb:28:cf:6f:8f:0f:c0:79:78:da:9c:7b:15:
                    65:97:e4:27:b1:e7:58:68:e2:f8:6b:4b:85:eb:1d:
                    c3:76:f3:16:79:be:6b:14:06:91:d1:9f:3a:15:8c:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:BA:F0:69:50:54:24:5F:F9:66:6A:7D:1C:BA:34:E4:F2:AA:1A
            X509v3 Authority Key Identifier:
                keyid:2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/6485e8d4931f47cbb8734be20f23ae190f58a55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/06648e29e39a495ed1db237056c029aa5ab8ead6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f9:8f:2c:b4:5e:5a:41:4c:73:a6:fd:79:ca:6d:bd:f4:03:
         08:51:16:5b:fe:bf:74:61:f1:f0:43:42:e1:06:4f:54:12:fd:
         3b:ac:7f:c3:9d:0c:a4:9f:58:cf:5c:d9:61:ff:16:66:85:a8:
         50:14:5d:19:ba:33:e7:7a:52:4c:5b:37:af:20:23:c3:2f:2b:
         7f:70:3e:86:dc:4a:5d:9a:ae:b8:af:e9:d2:62:0c:f7:7e:ca:
         e8:f6:2b:63:31:e8:9d:01:37:c0:35:aa:cf:02:12:35:c3:7e:
         bb:3b:79:50:c2:5d:0a:e6:26:42:fa:12:87:9d:df:4a:91:53:
         62:49:16:e9:03:b7:65:40:e9:a7:21:b6:82:06:61:b6:21:59:
         bc:4b:7d:0c:05:11:22:79:fc:75:ea:6f:d7:15:38:d2:ae:e1:
         a1:de:5b:7a:b9:0e:7a:fc:17:0c:8d:48:30:30:0f:43:4b:08:
         0f:75:fb:b6:a5:39:54:d7:6d:fd:04:bd:e8:dc:19:81:88:41:
         d3:48:aa:16:82:f3:4c:52:cc:eb:b7:7a:3a:5b:4d:9f:02:7a:
         a7:eb:03:f7:7d:49:d9:1f:a0:b7:9f:da:ef:82:0d:c6:92:67:
         0e:f0:61:d5:4e:26:2b:c9:e4:e6:9d:a4:41:94:3f:e1:da:57:
         da:d3:d6:0d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEc4YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA2
NjQ4ZTI5ZTM5YTQ5NWVkMWRiMjM3MDU2YzAyOWFhNWFiOGVhZDYwHhcNMjMxMTI1
MDczMDAxWhcNMjUxMTI0MDczMDAxWjAzMTEwLwYDVQQDEyg2NDg1ZThkNDkzMWY0
N2NiYjg3MzRiZTIwZjIzYWUxOTBmNThhNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvqb/nTSqAIPzy45qmfn7R32KrC2KtqkzM8d9WBBRGLooL9CW
gp2LB52aD+cENhPySxhYKAW7j1tfgR3PjPticl8dW88leXHBJvRpXu+4UXx00GFj
91hYOY4xkcd4rNqjDzzjkaf0M8V/Nnsrqwmc5lsa0g7Iug/4Tw2AsWopsTby05Xq
ApJ/nhe5qJC8Wf/Tk43voKSPve0d6Mt14h8goXLjiRWq4GBB05pO9rKCESd/yUWd
uwOmD15yQb1XaFg48sO0E06BrKqn8l9gVD9BTLGG+esoz2+PD8B5eNqcexVll+Qn
sedYaOL4a0uF6x3DdvMWeb5rFAaR0Z86FYwdXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLzduvBpUFQkX/lman0cujTk8qoaMB8GA1UdIwQYMBaAFCyeE5FPlNaoYGuc
TWxymN1yZHzqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDY2NDhl
MjllMzlhNDk1ZWQxZGIyMzcwNTZjMDI5YWE1YWI4ZWFkNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGZmNGU3NWEtYjg4YS00NzgwLTk2ZGEtMWJjZTU2
MjI4N2FlLzY0ODVlOGQ0OTMxZjQ3Y2JiODczNGJlMjBmMjNhZTE5MGY1OGE1NWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZmY0ZTc1YS1iODhhLTQ3ODAtOTZkYS0xYmNl
NTYyMjg3YWUvMDY2NDhlMjllMzlhNDk1ZWQxZGIyMzcwNTZjMDI5YWE1YWI4ZWFk
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi26mDANBgkqhkiG9w0BAQsFAAOCAQEAj/mPLLReWkFMc6b9
ecptvfQDCFEWW/6/dGHx8ENC4QZPVBL9O6x/w50MpJ9Yz1zZYf8WZoWoUBRdGboz
53pSTFs3ryAjwy8rf3A+htxKXZquuK/p0mIM937K6PYrYzHonQE3wDWqzwISNcN+
uzt5UMJdCuYmQvoSh53fSpFTYkkW6QO3ZUDppyG2ggZhtiFZvEt9DAURInn8depv
1xU40q7hod5berkOevwXDI1IMDAPQ0sID3X7tqU5VNdt/QS96NwZgYhB00iqFoLz
TFLM67d6OltNnwJ6p+sD931J2R+gt5/a74INxpJnDvBh1U4mK8nk5p2kQZQ/4dpX
2tPWDQ==
-----END CERTIFICATE-----