Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/bb29c964b5aa5a81e95e3693e24914c6b330203f.roa
File:                     bb29c964b5aa5a81e95e3693e24914c6b330203f.roa (raw, json)
Hash identifier:          ZRn5BKddovDPpNV8q/BVWcxqe+CyXsrW0BAp+8Hp8+Y=
Subject key identifier:   A6:A2:95:B3:B5:AC:CF:DB:0D:45:8F:8D:DD:05:B9:28:D9:A2:2E:D1
Certificate issuer:       /CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
Certificate serial:       1BEB2E
Authority key identifier: D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/bb29c964b5aa5a81e95e3693e24914c6b330203f.roa
Signing time:             Wed 10 Jan 2024 14:35:21 +0000
ROA not before:           Wed 10 Jan 2024 14:35:21 +0000
ROA not after:            Sat 10 Jan 2026 14:35:21 +0000
asID:                     267832
IP address blocks:        45.175.20.0/24 maxlen: 24
                          2803:c460::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829678 (0x1beb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
        Validity
            Not Before: Jan 10 14:35:21 2024 GMT
            Not After : Jan 10 14:35:21 2026 GMT
        Subject: CN=bb29c964b5aa5a81e95e3693e24914c6b330203f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:9c:21:e4:c3:e4:3a:2c:ff:81:27:0f:30:
                    ae:2a:4b:e5:c8:4c:4f:52:89:fb:d3:8b:aa:1b:02:
                    90:ec:2e:db:ae:4e:2c:6b:5e:fe:60:cc:23:4f:12:
                    41:ec:51:c6:b2:91:fb:16:34:f5:a3:9b:12:77:1c:
                    f2:52:ef:ed:b8:00:e7:93:8b:8b:53:9d:96:c0:e4:
                    39:b4:5e:b8:b2:31:2c:5d:a3:87:7e:50:85:00:a0:
                    b0:70:22:29:12:1f:fe:e4:2d:af:38:47:f1:ab:54:
                    4a:5a:f9:f0:ea:08:4a:01:44:24:2f:44:2b:6b:b5:
                    38:50:7a:49:6b:f5:5c:54:b3:3b:59:c1:a1:94:90:
                    74:45:28:3d:a6:ae:80:39:71:e0:c1:85:0f:fc:c6:
                    e9:ad:a8:b5:a5:8f:07:b3:ff:76:1e:71:2a:d5:56:
                    65:29:b8:cd:c9:9e:1c:31:3d:4d:5d:d1:a7:88:67:
                    16:74:40:27:54:69:82:c8:75:97:c3:71:2e:97:60:
                    34:7d:a0:18:d5:ff:bd:d4:bc:90:57:9b:01:b3:90:
                    f3:80:4a:4d:89:b1:52:e2:f5:7e:79:fa:02:4b:03:
                    1e:07:c8:b0:d9:06:5c:6b:b8:45:93:66:f5:cf:41:
                    dd:9d:e0:14:77:83:96:a8:dd:04:29:7b:c7:f8:51:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:95:B3:B5:AC:CF:DB:0D:45:8F:8D:DD:05:B9:28:D9:A2:2E:D1
            X509v3 Authority Key Identifier:
                keyid:D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/bb29c964b5aa5a81e95e3693e24914c6b330203f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.20.0/24
                IPv6:
                  2803:c460::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:71:07:71:53:d4:f6:d5:6b:10:f2:59:1e:fd:de:78:c9:
         1d:8c:c4:f9:cf:43:20:f8:6a:95:4e:a3:55:74:ff:9e:69:ef:
         b9:24:d2:ef:f8:0c:ae:e9:5c:86:cd:5f:be:22:1a:02:46:f2:
         01:c4:9d:4f:c0:55:e1:a2:b3:37:53:1e:d0:80:bb:7e:b4:c0:
         35:96:88:be:00:c9:a6:61:bb:3a:da:9f:dd:45:c4:66:06:79:
         92:cf:ae:b1:7b:c3:5b:e0:fd:9c:f2:4e:48:2c:c2:77:1e:31:
         ce:7f:76:86:12:a3:42:2b:44:dd:bb:19:17:30:38:a0:c7:f5:
         64:cd:71:b1:9c:aa:07:72:51:63:bd:d3:14:ab:da:de:4b:f0:
         63:94:74:c0:38:02:23:35:b5:43:96:ba:57:38:17:e5:16:33:
         94:c1:0e:fc:a7:84:ad:c3:63:82:af:58:1c:10:b0:4e:a4:2b:
         dc:76:da:0e:b0:ad:c7:b7:84:79:e1:d1:3d:c1:fe:4d:04:2e:
         45:93:6e:36:be:00:0d:6d:c6:98:73:67:58:0d:c2:f5:0c:60:
         fc:20:75:3c:6c:74:a9:93:e2:7c:bb:14:16:6d:00:6b:af:e6:
         6f:d0:8a:17:9b:f5:39:d7:62:a6:c4:11:88:c3:e7:1a:dd:4f:
         41:5f:58:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDG+suMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NjY0OTM2ZmYzZTIzYTA0ZGQ2YWFmMjRlOWY3ZjRjYTkxODM1MjgwHhcNMjQwMTEw
MTQzNTIxWhcNMjYwMTEwMTQzNTIxWjAzMTEwLwYDVQQDEyhiYjI5Yzk2NGI1YWE1
YTgxZTk1ZTM2OTNlMjQ5MTRjNmIzMzAyMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo3GcIeTD5Dos/4EnDzCuKkvlyExPUon704uqGwKQ7C7brk4s
a17+YMwjTxJB7FHGspH7FjT1o5sSdxzyUu/tuADnk4uLU52WwOQ5tF64sjEsXaOH
flCFAKCwcCIpEh/+5C2vOEfxq1RKWvnw6ghKAUQkL0Qra7U4UHpJa/VcVLM7WcGh
lJB0RSg9pq6AOXHgwYUP/Mbprai1pY8Hs/92HnEq1VZlKbjNyZ4cMT1NXdGniGcW
dEAnVGmCyHWXw3Eul2A0faAY1f+91LyQV5sBs5DzgEpNibFS4vV+efoCSwMeB8iw
2QZca7hFk2b1z0HdneAUd4OWqN0EKXvH+FGBgwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKailbO1rM/bDUWPjd0FuSjZoi7RMB8GA1UdIwQYMBaAFNEDmIPXdGnFSNDS
m0dFII3LZHPXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTI2NjQ5
MzZmZjNlMjNhMDRkZDZhYWYyNGU5ZjdmNGNhOTE4MzUyOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTQ3ODkyYjAtN2ZmNy00ZDlmLTg2MTQtYmE5YTNk
N2FhMTY4L2JiMjljOTY0YjVhYTVhODFlOTVlMzY5M2UyNDkxNGM2YjMzMDIwM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNDc4OTJiMC03ZmY3LTRkOWYtODYxNC1iYTlh
M2Q3YWExNjgvMTI2NjQ5MzZmZjNlMjNhMDRkZDZhYWYyNGU5ZjdmNGNhOTE4MzUy
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC2vFDANBAIAAjAHAwUAKAPEYDANBgkqhkiG9w0BAQsFAAOC
AQEAeyxxB3FT1PbVaxDyWR793njJHYzE+c9DIPhqlU6jVXT/nmnvuSTS7/gMrulc
hs1fviIaAkbyAcSdT8BV4aKzN1Me0IC7frTANZaIvgDJpmG7Otqf3UXEZgZ5ks+u
sXvDW+D9nPJOSCzCdx4xzn92hhKjQitE3bsZFzA4oMf1ZM1xsZyqB3JRY73TFKva
3kvwY5R0wDgCIzW1Q5a6VzgX5RYzlMEO/KeErcNjgq9YHBCwTqQr3HbaDrCtx7eE
eeHRPcH+TQQuRZNuNr4ADW3GmHNnWA3C9Qxg/CB1PGx0qZPifLsUFm0Aa6/mb9CK
F5v1OddipsQRiMPnGt1PQV9YTQ==
-----END CERTIFICATE-----