Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5959d69ee32440bbad153c61e624539c3818b6cb.roa
File:                     5959d69ee32440bbad153c61e624539c3818b6cb.roa (raw, json)
Hash identifier:          Xc0rL7ZeOlEtthKObKKqdlrJjKVozxsfjC193XBsXlo=
Subject key identifier:   67:B0:96:A5:F2:59:3C:75:57:5A:D2:13:62:06:86:65:D3:B4:B0:AC
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       262106
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5959d69ee32440bbad153c61e624539c3818b6cb.roa
Signing time:             Thu 28 Dec 2023 13:46:06 +0000
ROA not before:           Thu 28 Dec 2023 13:46:06 +0000
ROA not after:            Sun 28 Dec 2025 13:46:06 +0000
asID:                     262191
IP address blocks:        177.8.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498822 (0x262106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Dec 28 13:46:06 2023 GMT
            Not After : Dec 28 13:46:06 2025 GMT
        Subject: CN=5959d69ee32440bbad153c61e624539c3818b6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:e9:aa:9e:04:e5:96:92:fa:51:fe:bf:bc:
                    c5:d7:6e:fc:49:73:b8:20:e0:07:64:f8:d2:72:e4:
                    f3:b9:1a:f2:de:d9:92:83:74:1c:41:13:7a:67:14:
                    0f:96:b6:4c:0d:b1:09:63:59:85:1a:ae:c8:43:e6:
                    13:32:0d:2e:87:58:00:a3:f2:d9:e6:fe:df:49:8f:
                    f1:71:86:c5:fa:8b:b6:1f:7b:10:4c:49:3c:7e:42:
                    1b:b6:24:bb:18:d4:4d:35:3c:19:d3:3c:bf:97:c7:
                    45:78:42:75:6d:4f:eb:cc:b4:67:56:42:0a:f3:11:
                    af:95:be:a3:13:94:53:d9:83:c7:1b:6b:9b:6a:76:
                    71:12:e7:ed:46:c7:62:40:fa:91:07:fc:a2:20:a3:
                    f2:c6:76:bf:bf:9e:de:94:0b:f4:86:51:28:77:71:
                    6c:3c:7e:98:5d:b9:7a:f9:39:54:4a:c3:8b:e8:2c:
                    62:5a:aa:bb:a3:83:4c:dc:7a:36:86:9b:c4:c2:6c:
                    dc:a9:7e:09:bb:9c:7d:41:5b:aa:f2:1f:bb:70:68:
                    70:d8:5b:3d:82:01:4a:ce:ae:c6:b5:86:a7:f9:d5:
                    d6:81:4d:b6:c3:1a:8b:37:e6:ea:ad:83:ac:05:a5:
                    0f:5d:8d:dd:f7:b7:c8:63:b5:8e:8d:df:b0:b0:02:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:96:A5:F2:59:3C:75:57:5A:D2:13:62:06:86:65:D3:B4:B0:AC
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5959d69ee32440bbad153c61e624539c3818b6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:a7:9a:8f:06:e7:55:be:6e:2d:eb:85:45:19:1c:9d:ab:
         d6:5b:a1:1f:f3:86:c8:29:cd:a4:1f:56:91:e9:19:71:72:1f:
         a6:cf:49:84:c6:1b:25:5e:ba:32:f3:82:c1:dd:39:6c:36:18:
         8d:16:71:fb:2c:c9:ea:ff:4e:74:51:b4:f3:fe:ef:3d:97:2c:
         bf:9a:e0:62:5c:50:50:ab:0f:cb:5b:7e:39:c1:c5:94:da:f4:
         a4:bc:5a:df:bb:02:7a:04:31:f5:60:8d:df:f3:9c:d0:b4:a9:
         a4:95:9d:d4:12:a8:be:85:fb:53:ab:14:5f:fd:eb:d6:f0:12:
         92:37:73:50:b4:df:65:d6:e0:de:5c:59:e6:27:d7:0e:21:d3:
         22:17:09:34:52:01:02:bd:91:16:6d:ae:c1:c2:a8:48:fc:e2:
         bf:2e:7e:e9:9b:b9:9c:25:35:01:c6:5f:ba:2a:44:10:b0:de:
         47:5c:26:96:e1:88:e0:a9:22:5f:d8:a8:62:cd:bf:54:72:91:
         75:55:7a:67:85:94:24:1f:93:e0:f5:58:61:36:4b:e1:85:3c:
         1d:42:66:dd:e5:ec:2e:5c:3e:6e:1f:93:89:f5:7a:e7:dc:ad:
         eb:65:f8:4c:eb:8d:3c:01:30:26:43:93:fa:62:63:19:75:15:
         e4:6f:66:76
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJiEGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
YWNiNGZhMTk4NWIzYTlhMDM1NWE0YTlmYTViZjY0ZDYxYzYxNDUwHhcNMjMxMjI4
MTM0NjA2WhcNMjUxMjI4MTM0NjA2WjAzMTEwLwYDVQQDEyg1OTU5ZDY5ZWUzMjQ0
MGJiYWQxNTNjNjFlNjI0NTM5YzM4MThiNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmELpqp4E5ZaS+lH+v7zF1278SXO4IOAHZPjScuTzuRry3tmS
g3QcQRN6ZxQPlrZMDbEJY1mFGq7IQ+YTMg0uh1gAo/LZ5v7fSY/xcYbF+ou2H3sQ
TEk8fkIbtiS7GNRNNTwZ0zy/l8dFeEJ1bU/rzLRnVkIK8xGvlb6jE5RT2YPHG2ub
anZxEuftRsdiQPqRB/yiIKPyxna/v57elAv0hlEod3FsPH6YXbl6+TlUSsOL6Cxi
Wqq7o4NM3Ho2hpvEwmzcqX4Ju5x9QVuq8h+7cGhw2Fs9ggFKzq7GtYan+dXWgU22
wxqLN+bqrYOsBaUPXY3d97fIY7WOjd+wsAJ4RwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGewlqXyWTx1V1rSE2IGhmXTtLCsMB8GA1UdIwQYMBaAFIbG9eQAYQM8laEl
0N1eDk81gxo+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDlhY2I0
ZmExOTg1YjNhOWEwMzU1YTRhOWZhNWJmNjRkNjFjNjE0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTVjMjU1OGEtMWQ1MS00NTY2LWE3NTUtYjc5YjQ1
YTE0YTYzLzU5NTlkNjllZTMyNDQwYmJhZDE1M2M2MWU2MjQ1MzljMzgxOGI2Y2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNWMyNTU4YS0xZDUxLTQ1NjYtYTc1NS1iNzli
NDVhMTRhNjMvNDlhY2I0ZmExOTg1YjNhOWEwMzU1YTRhOWZhNWJmNjRkNjFjNjE0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA7EISDANBgkqhkiG9w0BAQsFAAOCAQEACaqnmo8G51W+bi3r
hUUZHJ2r1luhH/OGyCnNpB9WkekZcXIfps9JhMYbJV66MvOCwd05bDYYjRZx+yzJ
6v9OdFG08/7vPZcsv5rgYlxQUKsPy1t+OcHFlNr0pLxa37sCegQx9WCN3/Oc0LSp
pJWd1BKovoX7U6sUX/3r1vASkjdzULTfZdbg3lxZ5ifXDiHTIhcJNFIBAr2RFm2u
wcKoSPzivy5+6Zu5nCU1AcZfuipEELDeR1wmluGI4KkiX9ioYs2/VHKRdVV6Z4WU
JB+T4PVYYTZL4YU8HUJm3eXsLlw+bh+TifV659yt62X4TOuNPAEwJkOT+mJjGXUV
5G9mdg==
-----END CERTIFICATE-----