Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/12d495ccb9a42ffdb91e60d420dbc3b87861dc38.roa
File:                     12d495ccb9a42ffdb91e60d420dbc3b87861dc38.roa (raw, json)
Hash identifier:          GsLs0ll4joT4XatjQBb92PoDnPJwh8c0doZvmYq7V2U=
Subject key identifier:   9D:CD:6D:18:03:27:DB:F1:9C:4A:39:0F:13:82:36:B9:58:94:CE:57
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       04DDAE
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/12d495ccb9a42ffdb91e60d420dbc3b87861dc38.roa
Signing time:             Tue 27 Sep 2022 16:24:06 +0000
ROA not before:           Tue 27 Sep 2022 16:23:41 +0000
ROA not after:            Fri 27 Sep 2024 16:23:41 +0000
asID:                     270158
IP address blocks:        45.174.57.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318894 (0x4ddae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Sep 27 16:23:41 2022 GMT
            Not After : Sep 27 16:23:41 2024 GMT
        Subject: CN=12d495ccb9a42ffdb91e60d420dbc3b87861dc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:68:61:c1:8e:86:17:a5:a2:5f:49:57:74:
                    30:33:1b:36:8a:c8:4e:1d:6f:41:40:8b:16:f7:21:
                    b7:7f:6a:dc:b5:d1:37:31:ee:23:70:20:4e:a7:6a:
                    62:0a:09:29:a8:93:56:e8:06:d6:60:54:47:15:fd:
                    19:5d:a5:84:fe:45:7a:f9:2e:31:98:64:77:1c:b7:
                    76:9a:0e:80:ef:e3:18:35:e2:a8:96:8d:c8:e9:6d:
                    bc:bc:57:95:99:2a:ea:41:5c:49:0c:cd:00:e8:5c:
                    1c:5a:d1:ae:5a:b5:4c:d2:5d:6d:0f:61:bc:da:6d:
                    9e:a6:d0:6b:95:c0:38:a0:e0:9e:91:ff:f5:68:5b:
                    cd:9d:be:16:c4:46:c1:eb:e3:7c:0d:35:b0:05:73:
                    10:37:04:f9:4c:05:db:86:e4:ca:16:57:6a:ea:7e:
                    39:58:bf:8e:e6:8d:11:2d:4f:17:89:fc:0b:51:48:
                    aa:a2:e9:be:c2:0a:20:73:aa:9d:a8:34:78:e7:4a:
                    0b:06:9b:68:ed:7b:fe:74:e5:2f:2d:36:3d:f8:bf:
                    16:37:be:10:6d:dc:dc:72:42:70:a7:f7:ff:0b:be:
                    7d:d1:ad:f8:90:c5:bb:eb:37:f3:30:37:3f:ff:82:
                    65:cb:a5:13:2c:4d:35:81:bb:b9:ef:09:60:ae:96:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CD:6D:18:03:27:DB:F1:9C:4A:39:0F:13:82:36:B9:58:94:CE:57
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/12d495ccb9a42ffdb91e60d420dbc3b87861dc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4d:e2:a1:2a:a3:8f:03:16:5e:53:aa:59:14:29:74:3d:08:
         52:56:59:f5:bd:28:7d:7c:da:66:97:fa:b4:b6:64:dd:6b:af:
         45:10:50:b4:41:88:ff:95:c1:b3:92:17:58:d3:f1:23:98:29:
         b2:d2:ec:83:19:46:65:02:77:ef:ed:0e:fd:cf:71:73:46:38:
         10:b6:07:da:5f:56:d4:c2:38:92:8f:ba:8b:81:5c:51:0b:58:
         09:42:8b:13:53:a7:a7:19:62:80:45:aa:cd:6a:a5:f6:f2:65:
         96:8d:2e:bd:d9:69:26:0e:8b:7e:5a:7e:66:04:4a:4f:b2:80:
         7b:11:e8:c3:9c:1b:ff:3a:09:86:28:89:0e:84:57:7c:31:6c:
         db:fe:d2:fb:a4:b8:9c:1c:cd:ed:cd:16:11:d7:09:e7:b2:05:
         2d:d7:47:52:3c:4f:57:99:9d:1f:93:58:76:05:a1:31:d4:39:
         5d:53:6a:a6:e9:51:57:87:06:6e:dc:f9:40:73:b5:7d:53:3e:
         55:9a:5b:aa:c1:01:07:5a:bf:28:ce:02:1e:d1:6f:dd:bc:bf:
         1c:d9:1c:c2:02:20:12:92:64:0a:48:39:04:60:bc:11:9c:bb:
         a2:c3:36:3a:4d:f4:85:1b:d8:60:8b:de:e0:26:34:71:0e:07:
         39:98:0f:9a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBN2uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
ODIwYTg5N2UwOTBjYzE3NDExMTI5NDY0ZTg1NmYzZjhjODk2NmQwHhcNMjIwOTI3
MTYyMzQxWhcNMjQwOTI3MTYyMzQxWjAzMTEwLwYDVQQDEygxMmQ0OTVjY2I5YTQy
ZmZkYjkxZTYwZDQyMGRiYzNiODc4NjFkYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0PxoYcGOhhelol9JV3QwMxs2ishOHW9BQIsW9yG3f2rctdE3
Me4jcCBOp2piCgkpqJNW6AbWYFRHFf0ZXaWE/kV6+S4xmGR3HLd2mg6A7+MYNeKo
lo3I6W28vFeVmSrqQVxJDM0A6FwcWtGuWrVM0l1tD2G82m2eptBrlcA4oOCekf/1
aFvNnb4WxEbB6+N8DTWwBXMQNwT5TAXbhuTKFldq6n45WL+O5o0RLU8XifwLUUiq
oum+wgogc6qdqDR450oLBpto7Xv+dOUvLTY9+L8WN74QbdzcckJwp/f/C7590a34
kMW76zfzMDc//4Jly6UTLE01gbu57wlgrpbn9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ3NbRgDJ9vxnEo5DxOCNrlYlM5XMB8GA1UdIwQYMBaAFFdWD/Nh7HCqpnOS
6Rp+X6CSGf0aMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDU4MjBh
ODk3ZTA5MGNjMTc0MTExMjk0NjRlODU2ZjNmOGM4OTY2ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjVhNDA3YzYtMTEyMS00YmM2LWEyNTYtN2NiNDFk
OTg4NTMwLzEyZDQ5NWNjYjlhNDJmZmRiOTFlNjBkNDIwZGJjM2I4Nzg2MWRjMzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNWE0MDdjNi0xMTIxLTRiYzYtYTI1Ni03Y2I0
MWQ5ODg1MzAvMDU4MjBhODk3ZTA5MGNjMTc0MTExMjk0NjRlODU2ZjNmOGM4OTY2
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2uOTANBgkqhkiG9w0BAQsFAAOCAQEABk3ioSqjjwMWXlOq
WRQpdD0IUlZZ9b0ofXzaZpf6tLZk3WuvRRBQtEGI/5XBs5IXWNPxI5gpstLsgxlG
ZQJ37+0O/c9xc0Y4ELYH2l9W1MI4ko+6i4FcUQtYCUKLE1OnpxligEWqzWql9vJl
lo0uvdlpJg6Lflp+ZgRKT7KAexHow5wb/zoJhiiJDoRXfDFs2/7S+6S4nBzN7c0W
EdcJ57IFLddHUjxPV5mdH5NYdgWhMdQ5XVNqpulRV4cGbtz5QHO1fVM+VZpbqsEB
B1q/KM4CHtFv3by/HNkcwgIgEpJkCkg5BGC8EZy7osM2Ok30hRvYYIve4CY0cQ4H
OZgPmg==
-----END CERTIFICATE-----