Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2918a494-5b9e-4037-8f33-3a894d8e15f5/91deffbd277133b8434f00cd6c4b2bad18f7b705.roa
File:                     91deffbd277133b8434f00cd6c4b2bad18f7b705.roa (raw, json)
Hash identifier:          jWlDcl2hF7tFIPpYY9bv0rtKHSPQ1O1tJiMqF2tAFjw=
Subject key identifier:   4C:12:DC:3B:D8:99:2E:C9:74:44:0F:14:81:16:EA:6B:88:41:78:9C
Certificate issuer:       /CN=f0014ba715b2faafa7dfc03d3448fdf5546e10a1
Certificate serial:       205554
Authority key identifier: AC:17:2C:5A:5F:A0:54:8B:D5:7F:86:AE:1F:B2:49:41:AD:40:EA:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0014ba715b2faafa7dfc03d3448fdf5546e10a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2918a494-5b9e-4037-8f33-3a894d8e15f5/91deffbd277133b8434f00cd6c4b2bad18f7b705.roa
Signing time:             Tue 27 Jun 2023 18:57:16 +0000
ROA not before:           Mon 26 Jun 2023 18:57:16 +0000
ROA not after:            Fri 27 Jun 2025 18:57:16 +0000
asID:                     269857
IP address blocks:        45.189.116.0/23 maxlen: 24
                          45.189.118.0/24 maxlen: 24
                          2803:50e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118996 (0x205554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0014ba715b2faafa7dfc03d3448fdf5546e10a1
        Validity
            Not Before: Jun 26 18:57:16 2023 GMT
            Not After : Jun 27 18:57:16 2025 GMT
        Subject: CN=91deffbd277133b8434f00cd6c4b2bad18f7b705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:d0:fe:8a:07:c8:d9:eb:dc:8b:81:3a:67:
                    32:46:a9:4f:ac:c5:72:b4:e2:b4:52:5a:b5:21:2e:
                    06:d5:c0:08:3f:16:52:79:b1:07:1b:be:dc:4f:45:
                    05:ac:e2:9b:7b:66:02:97:ee:b3:53:2a:82:eb:cd:
                    0a:53:a5:63:aa:0e:56:58:80:81:1d:06:ad:2a:0a:
                    d0:d7:e7:a2:50:cf:11:fd:3c:37:4d:ad:6b:a4:37:
                    b5:fa:b6:80:4f:6c:50:d1:9d:e0:fb:02:51:23:ae:
                    81:df:a8:be:4f:f8:d7:2a:3a:8b:93:4f:15:ae:a8:
                    2e:4e:fa:86:43:72:c9:3e:c8:50:df:17:ab:ac:8a:
                    8f:5e:9b:70:ed:46:a1:5b:d9:4b:47:4e:4b:1c:a4:
                    a1:0f:c5:8d:6c:98:37:3c:db:c6:45:1d:ee:3d:41:
                    9d:ea:75:90:de:4e:9b:2e:56:dc:c4:e9:41:77:31:
                    a1:23:1d:97:cb:0c:94:10:57:47:58:d4:a6:a3:77:
                    86:63:44:6c:c7:81:b8:9e:5b:7d:aa:a1:d6:23:7c:
                    ec:db:d4:64:bb:f3:4c:4f:27:3d:26:7e:56:fc:01:
                    04:d1:0a:8f:34:ec:9d:2f:37:03:c7:3f:33:d6:6f:
                    f2:6a:ad:e0:41:5d:d4:7d:09:d6:dc:91:29:2b:aa:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:12:DC:3B:D8:99:2E:C9:74:44:0F:14:81:16:EA:6B:88:41:78:9C
            X509v3 Authority Key Identifier:
                keyid:AC:17:2C:5A:5F:A0:54:8B:D5:7F:86:AE:1F:B2:49:41:AD:40:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0014ba715b2faafa7dfc03d3448fdf5546e10a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2918a494-5b9e-4037-8f33-3a894d8e15f5/91deffbd277133b8434f00cd6c4b2bad18f7b705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2918a494-5b9e-4037-8f33-3a894d8e15f5/f0014ba715b2faafa7dfc03d3448fdf5546e10a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.116.0-45.189.118.255
                IPv6:
                  2803:50e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:99:31:dd:cb:08:50:5f:48:ea:21:73:1e:9e:79:04:c1:b4:
         d7:94:e9:e0:b8:1c:40:cc:79:6e:36:cd:da:37:69:f6:c2:ed:
         3b:2f:85:76:b8:c9:3d:7a:de:32:5d:fd:fe:06:f6:8f:ac:c0:
         29:50:1a:b0:0a:08:ce:e9:0d:f0:f3:5a:29:51:40:51:7f:56:
         24:ca:ca:04:26:81:bf:20:34:f5:d7:b3:5d:21:78:ed:ac:91:
         96:f2:79:4c:47:b8:78:b7:c8:84:d1:ff:ab:6a:40:50:9c:c2:
         d4:63:01:18:3e:ad:ff:d3:67:82:71:94:2e:c3:de:85:73:ab:
         ee:f1:de:25:35:f8:93:09:83:41:59:c5:a4:c6:21:21:d7:b1:
         e5:84:f6:1b:23:9e:ea:69:6a:c4:07:9f:52:49:48:76:5d:70:
         6e:76:b8:9f:4f:35:99:33:0c:77:10:05:26:55:72:8a:cb:c2:
         31:5a:f9:c1:20:7a:c4:20:b5:c9:f4:be:ae:01:76:d3:25:03:
         86:8c:16:02:6a:e3:50:28:cb:56:63:fa:db:ea:f2:f2:a3:fc:
         65:f1:36:59:58:03:ee:6a:0d:7d:69:e3:0c:a7:47:91:f4:b4:
         29:27:d5:3e:a7:cc:0d:68:a1:da:98:56:98:8e:56:e9:61:b7:
         04:b2:bf:b9
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDIFVUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
MDE0YmE3MTViMmZhYWZhN2RmYzAzZDM0NDhmZGY1NTQ2ZTEwYTEwHhcNMjMwNjI2
MTg1NzE2WhcNMjUwNjI3MTg1NzE2WjAzMTEwLwYDVQQDEyg5MWRlZmZiZDI3NzEz
M2I4NDM0ZjAwY2Q2YzRiMmJhZDE4ZjdiNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqILQ/ooHyNnr3IuBOmcyRqlPrMVytOK0Ulq1IS4G1cAIPxZS
ebEHG77cT0UFrOKbe2YCl+6zUyqC680KU6Vjqg5WWICBHQatKgrQ1+eiUM8R/Tw3
Ta1rpDe1+raAT2xQ0Z3g+wJRI66B36i+T/jXKjqLk08VrqguTvqGQ3LJPshQ3xer
rIqPXptw7UahW9lLR05LHKShD8WNbJg3PNvGRR3uPUGd6nWQ3k6bLlbcxOlBdzGh
Ix2XywyUEFdHWNSmo3eGY0Rsx4G4nlt9qqHWI3zs29Rku/NMTyc9Jn5W/AEE0QqP
NOydLzcDxz8z1m/yaq3gQV3UfQnW3JEpK6r9QwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFEwS3DvYmS7JdEQPFIEW6muIQXicMB8GA1UdIwQYMBaAFKwXLFpfoFSL1X+G
rh+ySUGtQOpfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjAwMTRi
YTcxNWIyZmFhZmE3ZGZjMDNkMzQ0OGZkZjU1NDZlMTBhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjkxOGE0OTQtNWI5ZS00MDM3LThmMzMtM2E4OTRk
OGUxNWY1LzkxZGVmZmJkMjc3MTMzYjg0MzRmMDBjZDZjNGIyYmFkMThmN2I3MDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOTE4YTQ5NC01YjllLTQwMzctOGYzMy0zYTg5
NGQ4ZTE1ZjUvZjAwMTRiYTcxNWIyZmFhZmE3ZGZjMDNkMzQ0OGZkZjU1NDZlMTBh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQCLb10AwQALb12MA0EAgACMAcDBQAoA1DgMA0GCSqGSIb3
DQEBCwUAA4IBAQARmTHdywhQX0jqIXMennkEwbTXlOnguBxAzHluNs3aN2n2wu07
L4V2uMk9et4yXf3+BvaPrMApUBqwCgjO6Q3w81opUUBRf1YkysoEJoG/IDT117Nd
IXjtrJGW8nlMR7h4t8iE0f+rakBQnMLUYwEYPq3/02eCcZQuw96Fc6vu8d4lNfiT
CYNBWcWkxiEh17HlhPYbI57qaWrEB59SSUh2XXBudrifTzWZMwx3EAUmVXKKy8Ix
WvnBIHrEILXJ9L6uAXbTJQOGjBYCauNQKMtWY/rb6vLyo/xl8TZZWAPuag19aeMM
p0eR9LQpJ9U+p8wNaKHamFaYjlbpYbcEsr+5
-----END CERTIFICATE-----