Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/1722437955efe063c7b6e1751306021442a6eee4.roa
File:                     1722437955efe063c7b6e1751306021442a6eee4.roa (raw, json)
Hash identifier:          vFQd5iTTp+CWBqIN6O//YCb2CwCMCek6615coJVeWio=
Subject key identifier:   48:0C:6A:EB:04:E2:57:F6:B9:6A:45:88:74:27:F7:79:8C:B4:86:5A
Certificate issuer:       /CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
Certificate serial:       227805
Authority key identifier: AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/1722437955efe063c7b6e1751306021442a6eee4.roa
Signing time:             Mon 31 Jul 2023 20:58:30 +0000
ROA not before:           Sun 30 Jul 2023 20:58:30 +0000
ROA not after:            Thu 31 Jul 2025 20:58:30 +0000
asID:                     263185
IP address blocks:        179.43.80.0/21 maxlen: 24
                          179.43.88.0/23 maxlen: 24
                          179.43.90.0/24 maxlen: 24
                          179.43.93.0/24 maxlen: 24
                          179.43.94.0/24 maxlen: 24
                          2803:2480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258949 (0x227805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Validity
            Not Before: Jul 30 20:58:30 2023 GMT
            Not After : Jul 31 20:58:30 2025 GMT
        Subject: CN=1722437955efe063c7b6e1751306021442a6eee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:2d:9a:dd:bd:63:3f:3d:e7:78:d7:93:77:
                    20:2b:4e:99:3b:0c:95:09:c4:f4:47:8e:43:b6:80:
                    3a:af:71:2c:a0:60:32:c5:bc:e1:3e:5e:32:c9:91:
                    58:f5:c3:cb:0a:74:96:d0:85:40:b9:f9:ad:48:ac:
                    50:3d:45:2c:8e:a1:bb:b5:ed:50:98:be:03:0c:e1:
                    7a:c2:8d:51:bb:2a:49:4d:ce:49:15:1a:a6:86:7d:
                    19:d9:dd:2a:e5:96:8b:97:f6:04:27:e8:e1:b1:d3:
                    48:4b:43:b1:9d:83:91:45:fb:f6:ab:ef:e0:36:0a:
                    13:06:15:fc:73:ce:4a:20:c1:57:a6:43:4f:6d:a1:
                    18:c6:6c:5e:ed:a4:ad:38:7c:60:31:c3:77:81:1a:
                    fe:a7:d2:4e:74:12:b7:19:c1:0b:8a:d0:fd:04:b7:
                    95:aa:e7:8b:ad:96:fe:3d:80:6a:25:b9:18:9a:74:
                    e8:0b:ae:be:8f:53:90:a7:84:4c:70:7f:6b:1b:fd:
                    73:48:6d:5e:97:d5:21:8c:31:b9:43:11:57:bf:a8:
                    f0:fb:92:44:9d:63:de:d8:2b:77:ca:52:67:6d:15:
                    28:fd:eb:67:58:e9:94:50:08:ef:70:2c:be:dd:0d:
                    01:da:14:09:e4:e7:85:e6:dd:f5:bd:cd:92:56:0b:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0C:6A:EB:04:E2:57:F6:B9:6A:45:88:74:27:F7:79:8C:B4:86:5A
            X509v3 Authority Key Identifier:
                keyid:AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/1722437955efe063c7b6e1751306021442a6eee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.80.0-179.43.90.255
                  179.43.93.0-179.43.94.255
                IPv6:
                  2803:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:bf:29:a9:1b:8f:cd:0e:8c:c9:4b:6e:10:86:53:1d:15:42:
         d4:a8:f4:00:6c:1e:48:5c:cb:b8:f5:d0:09:a6:26:14:c2:94:
         1d:e7:ee:a8:5f:51:8c:38:d9:01:6a:8c:c7:dc:3f:9f:d5:e8:
         a9:24:af:23:88:dd:7c:27:ce:18:db:c8:db:be:d6:de:9c:f6:
         f0:43:c6:69:86:61:8d:82:41:f2:51:dc:79:d5:79:1e:a4:01:
         d8:cb:1a:b4:85:8a:ee:75:b9:52:50:b7:2f:dc:3c:e0:c8:bb:
         04:c3:cc:46:b1:e1:b1:db:f3:0b:74:9a:04:88:2a:2e:5e:57:
         4e:4f:8d:53:b2:5c:25:ba:55:f7:dd:0d:c5:5d:ae:06:1b:2c:
         07:02:23:54:2c:0e:73:9e:9e:00:c1:51:08:a8:76:5a:f6:e1:
         fc:89:17:75:6d:f5:7f:bf:b0:5e:1f:bd:3e:89:aa:ea:4e:f3:
         3f:76:02:90:1e:d8:26:45:6d:3b:02:3c:7a:d8:14:20:7c:93:
         08:1b:91:e0:28:89:8a:4e:fe:55:e6:08:45:60:4c:fb:2e:dd:
         83:9d:4d:d1:0f:77:74:e7:f2:d5:0b:4d:b4:64:82:b2:7d:a0:
         c9:19:6a:c7:56:70:13:f2:35:78:48:cd:8a:f6:d6:32:62:90:
         c3:3d:b2:2b
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIDIngFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgx
ZTU3NmViODc1ZWY3OWMzZDhmMDhlYTBmYTlhNmZlYzgyNjk2ZWYwHhcNMjMwNzMw
MjA1ODMwWhcNMjUwNzMxMjA1ODMwWjAzMTEwLwYDVQQDEygxNzIyNDM3OTU1ZWZl
MDYzYzdiNmUxNzUxMzA2MDIxNDQyYTZlZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt4ktmt29Yz8953jXk3cgK06ZOwyVCcT0R45DtoA6r3EsoGAy
xbzhPl4yyZFY9cPLCnSW0IVAufmtSKxQPUUsjqG7te1QmL4DDOF6wo1RuypJTc5J
FRqmhn0Z2d0q5ZaLl/YEJ+jhsdNIS0OxnYORRfv2q+/gNgoTBhX8c85KIMFXpkNP
baEYxmxe7aStOHxgMcN3gRr+p9JOdBK3GcELitD9BLeVqueLrZb+PYBqJbkYmnTo
C66+j1OQp4RMcH9rG/1zSG1el9UhjDG5QxFXv6jw+5JEnWPe2Ct3ylJnbRUo/etn
WOmUUAjvcCy+3Q0B2hQJ5OeF5t31vc2SVgtUXwIDAQABo4ICgDCCAnwwHQYDVR0O
BBYEFEgMausE4lf2uWpFiHQn93mMtIZaMB8GA1UdIwQYMBaAFKrfiHy4Zc28/E2d
A7aFyLMhPX5OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODFlNTc2
ZWI4NzVlZjc5YzNkOGYwOGVhMGZhOWE2ZmVjODI2OTZlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTk5MmM5M2MtMTVjNy00YWQ0LWFlZGYtMGIyYzky
ZGVlMTJmLzE3MjI0Mzc5NTVlZmUwNjNjN2I2ZTE3NTEzMDYwMjE0NDJhNmVlZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTkyYzkzYy0xNWM3LTRhZDQtYWVkZi0wYjJj
OTJkZWUxMmYvODFlNTc2ZWI4NzVlZjc5YzNkOGYwOGVhMGZhOWE2ZmVjODI2OTZl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBEBggrBgEFBQcBBwEB/wQ1
MDMwIgQCAAEwHDAMAwQEsytQAwQAsytaMAwDBACzK10DBACzK14wDQQCAAIwBwMF
ACgDJIAwDQYJKoZIhvcNAQELBQADggEBAKC/Kakbj80OjMlLbhCGUx0VQtSo9ABs
Hkhcy7j10AmmJhTClB3n7qhfUYw42QFqjMfcP5/V6KkkryOI3XwnzhjbyNu+1t6c
9vBDxmmGYY2CQfJR3HnVeR6kAdjLGrSFiu51uVJQty/cPODIuwTDzEax4bHb8wt0
mgSIKi5eV05PjVOyXCW6VffdDcVdrgYbLAcCI1QsDnOengDBUQiodlr24fyJF3Vt
9X+/sF4fvT6JqupO8z92ApAe2CZFbTsCPHrYFCB8kwgbkeAoiYpO/lXmCEVgTPsu
3YOdTdEPd3Tn8tULTbRkgrJ9oMkZasdWcBPyNXhIzYr21jJikMM9sis=
-----END CERTIFICATE-----