Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/fef46a5a07801f50c3398380e1b99f89dc4f4557.roa
File:                     fef46a5a07801f50c3398380e1b99f89dc4f4557.roa (raw, json)
Hash identifier:          foayCNjUfQDkHprnZStRQPtzlfCq8RXpceoCBBt2x/A=
Subject key identifier:   84:82:51:99:5A:F2:BF:D1:14:78:9B:F4:E1:D0:32:29:21:3D:BD:E0
Certificate issuer:       /CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
Certificate serial:       0234DE
Authority key identifier: 43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/fef46a5a07801f50c3398380e1b99f89dc4f4557.roa
Signing time:             Fri 28 Jul 2023 21:10:16 +0000
ROA not before:           Thu 27 Jul 2023 21:10:16 +0000
ROA not after:            Mon 28 Jul 2025 21:10:16 +0000
asID:                     266876
IP address blocks:        45.160.32.0/24 maxlen: 24
                          2803:3aa0::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144606 (0x234de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
        Validity
            Not Before: Jul 27 21:10:16 2023 GMT
            Not After : Jul 28 21:10:16 2025 GMT
        Subject: CN=fef46a5a07801f50c3398380e1b99f89dc4f4557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:38:04:79:f0:fc:fa:b7:d6:bd:a9:21:e8:
                    2c:32:4c:2b:74:23:b6:3e:83:96:6a:aa:97:a1:f9:
                    fe:51:ba:5c:e3:4b:86:2c:d1:d5:6b:57:35:44:70:
                    b9:54:e0:bd:ca:02:79:75:3c:2c:b4:0e:86:85:40:
                    c4:43:b7:11:96:19:3b:92:2c:7f:d1:0b:15:fc:49:
                    a6:2d:f4:60:76:cd:99:37:57:35:12:b9:6d:5e:98:
                    de:43:2c:09:9b:3e:2d:bc:62:14:d6:30:94:79:e3:
                    43:89:a8:97:42:0c:78:1e:59:74:a5:0e:66:8a:56:
                    7c:97:09:e9:3c:2b:b1:90:97:96:65:34:06:e6:9e:
                    6d:ae:ae:64:df:1b:d1:6c:bf:70:74:65:8d:9a:07:
                    cb:81:c3:78:30:65:d2:78:e9:3b:7d:69:e7:c7:d3:
                    da:db:a4:af:ad:34:77:b9:82:23:51:73:0b:91:8b:
                    44:dc:21:66:46:69:a5:cf:e9:2e:e1:06:a0:9c:36:
                    82:19:37:2b:ae:ab:eb:87:3c:d9:64:54:74:8a:78:
                    60:0a:f7:60:56:65:95:ff:aa:96:f2:29:95:f1:64:
                    4d:95:61:cd:90:c4:9f:a7:5c:17:82:0d:87:3e:5d:
                    e4:d0:3e:a9:b1:b1:32:91:5d:15:3c:fa:1e:d1:1a:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:82:51:99:5A:F2:BF:D1:14:78:9B:F4:E1:D0:32:29:21:3D:BD:E0
            X509v3 Authority Key Identifier:
                keyid:43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/fef46a5a07801f50c3398380e1b99f89dc4f4557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.32.0/24
                IPv6:
                  2803:3aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:1d:1f:1f:08:87:5b:c6:b5:da:d5:15:d8:80:60:c2:47:
         0d:11:53:33:db:d0:ea:d0:f7:87:a1:57:90:9f:6d:fb:78:bf:
         a9:4f:87:e9:64:d1:7a:57:1c:eb:75:7a:99:df:f6:39:d8:3f:
         41:0f:b0:48:28:92:c8:12:d0:d8:f2:22:28:b7:ed:05:c4:59:
         ee:a9:f2:ab:20:b7:26:5e:cd:9f:43:42:b0:f2:20:4a:ac:ab:
         17:8b:22:08:df:d6:37:e1:5f:11:0d:bf:e0:55:63:0c:7c:39:
         7a:85:1a:e7:8f:18:79:23:fe:96:b3:fe:d1:70:50:15:43:dd:
         b4:40:5a:9a:57:5b:e3:00:97:08:1b:23:21:13:c2:7b:9f:0f:
         e5:05:a4:41:11:44:20:09:c7:3a:8e:4b:fe:39:27:12:d3:37:
         bb:eb:b1:2b:72:31:18:25:af:cc:3c:69:63:b6:cf:ba:e1:40:
         e7:9a:c9:bb:91:2c:5c:76:f1:96:d4:b3:de:f5:b9:4b:29:99:
         dd:75:80:3d:c2:c6:95:02:b3:57:eb:9b:21:fe:54:e2:b0:3d:
         df:78:97:60:7b:97:41:5b:9b:94:30:38:19:98:1e:2e:1b:84:
         c5:e8:b6:44:c3:f7:9f:4d:7a:3a:a4:d3:ff:75:61:48:b3:ba:
         ff:e3:da:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAjTeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
OWIxYzMzMjY5ZmQ3N2VlMDkwOGRkMzRkNGE2NTljYWZiYjI0MzAwHhcNMjMwNzI3
MjExMDE2WhcNMjUwNzI4MjExMDE2WjAzMTEwLwYDVQQDEyhmZWY0NmE1YTA3ODAx
ZjUwYzMzOTgzODBlMWI5OWY4OWRjNGY0NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA62A4BHnw/Pq31r2pIegsMkwrdCO2PoOWaqqXofn+Ubpc40uG
LNHVa1c1RHC5VOC9ygJ5dTwstA6GhUDEQ7cRlhk7kix/0QsV/EmmLfRgds2ZN1c1
ErltXpjeQywJmz4tvGIU1jCUeeNDiaiXQgx4Hll0pQ5milZ8lwnpPCuxkJeWZTQG
5p5trq5k3xvRbL9wdGWNmgfLgcN4MGXSeOk7fWnnx9Pa26SvrTR3uYIjUXMLkYtE
3CFmRmmlz+ku4QagnDaCGTcrrqvrhzzZZFR0inhgCvdgVmWV/6qW8imV8WRNlWHN
kMSfp1wXgg2HPl3k0D6psbEykV0VPPoe0RpToQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFISCUZla8r/RFHib9OHQMikhPb3gMB8GA1UdIwQYMBaAFEPO1rZ3e1lt2ac0
BgGr4eMnVwFSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ5YjFj
MzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzJjZmM3MDQtYTdiMC00ZjIyLTg4NDEtNjY2YmQz
YzM5NDkyL2ZlZjQ2YTVhMDc4MDFmNTBjMzM5ODM4MGUxYjk5Zjg5ZGM0ZjQ1NTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMmNmYzcwNC1hN2IwLTRmMjItODg0MS02NjZi
ZDNjMzk0OTIvZGQ5YjFjMzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC2gIDANBAIAAjAHAwUAKAM6oDANBgkqhkiG9w0BAQsFAAOC
AQEAbZUdHx8Ih1vGtdrVFdiAYMJHDRFTM9vQ6tD3h6FXkJ9t+3i/qU+H6WTRelcc
63V6md/2Odg/QQ+wSCiSyBLQ2PIiKLftBcRZ7qnyqyC3Jl7Nn0NCsPIgSqyrF4si
CN/WN+FfEQ2/4FVjDHw5eoUa548YeSP+lrP+0XBQFUPdtEBamldb4wCXCBsjIRPC
e58P5QWkQRFEIAnHOo5L/jknEtM3u+uxK3IxGCWvzDxpY7bPuuFA55rJu5EsXHbx
ltSz3vW5SymZ3XWAPcLGlQKzV+ubIf5U4rA933iXYHuXQVublDA4GZgeLhuExei2
RMP3n016OqTT/3VhSLO6/+Pa+g==
-----END CERTIFICATE-----