Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/a8e9c325024c0ee6e2205f095e4458dd51263603.roa
File:                     a8e9c325024c0ee6e2205f095e4458dd51263603.roa (raw, json)
Hash identifier:          0Hao9HkkuWdPGOU/XZzcSQXi26XHCQoZwrXyw58Ixdo=
Subject key identifier:   EA:79:93:0B:3D:7E:D8:28:23:77:D9:F0:3D:EC:70:ED:13:FA:04:24
Certificate issuer:       /CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
Certificate serial:       17D806
Authority key identifier: C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/a8e9c325024c0ee6e2205f095e4458dd51263603.roa
Signing time:             Tue 16 May 2023 08:30:01 +0000
ROA not before:           Mon 15 May 2023 08:30:01 +0000
ROA not after:            Wed 14 May 2025 08:30:01 +0000
asID:                     270036
IP address blocks:        179.60.225.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562630 (0x17d806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Validity
            Not Before: May 15 08:30:01 2023 GMT
            Not After : May 14 08:30:01 2025 GMT
        Subject: CN=a8e9c325024c0ee6e2205f095e4458dd51263603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:0a:96:e0:e2:2b:f4:19:1f:9b:e7:4a:90:
                    86:bf:15:5a:1b:42:7b:f5:16:32:5f:11:8c:2d:b8:
                    f9:7a:0e:6c:de:3e:08:de:10:5e:7e:86:8a:6a:10:
                    18:98:ee:fd:b6:83:e6:56:8f:71:74:e1:7d:96:82:
                    bd:f8:97:29:0b:e6:30:93:db:4a:fe:c3:b4:3f:c4:
                    63:73:95:4f:18:d2:fb:5c:6e:2c:1b:0c:2e:02:fd:
                    a7:e0:91:6b:ea:44:59:54:ac:63:82:41:93:e0:a0:
                    aa:bd:c7:32:75:9b:37:24:1d:af:18:d1:16:b8:29:
                    bb:2c:fb:63:fe:c6:ea:15:fa:e2:bf:04:46:51:94:
                    40:dd:69:cb:0f:ce:b2:d8:cf:84:6d:57:ff:73:fe:
                    50:4a:ce:60:c6:17:50:e2:29:42:e2:ef:8a:30:16:
                    30:0c:a9:a7:72:27:5e:18:34:82:a7:7b:84:f9:b4:
                    79:23:17:61:1e:e9:39:9f:bc:4c:9c:7c:0b:58:7f:
                    6a:58:b1:22:02:2c:44:f2:0d:eb:24:b0:c2:80:24:
                    c2:62:06:a9:b1:05:15:0b:2b:dc:d1:ab:d6:d6:19:
                    8c:a2:d3:d6:c5:5f:89:29:d8:73:d9:f2:d3:c0:56:
                    6d:ab:95:04:1a:30:62:24:b9:59:70:e6:68:d3:ae:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:93:0B:3D:7E:D8:28:23:77:D9:F0:3D:EC:70:ED:13:FA:04:24
            X509v3 Authority Key Identifier:
                keyid:C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/a8e9c325024c0ee6e2205f095e4458dd51263603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:00:42:fe:1c:ba:77:b5:7a:8e:e3:c1:f0:69:77:32:64:a3:
         5a:4e:6f:98:92:0d:da:32:e8:61:c4:07:03:c2:a8:07:86:31:
         e8:75:75:24:fb:eb:ba:4b:32:0b:62:87:a9:d4:52:5e:da:6c:
         b2:68:eb:b1:ea:29:ab:3d:7d:33:94:95:5b:c4:6c:cc:9a:49:
         de:d1:37:c3:2e:eb:ca:b2:0d:86:44:cd:1d:3c:32:cb:fd:27:
         5f:81:cd:36:4f:8d:0e:02:b6:5a:b8:f2:3f:0b:68:75:23:a9:
         90:c4:ce:1d:29:fc:97:5b:e0:92:40:4d:b7:eb:7b:26:b4:b9:
         bf:ed:3b:19:2a:dc:73:22:95:3f:6f:60:35:73:45:fe:18:e2:
         ea:21:36:95:8c:9c:ae:08:7c:33:7d:47:43:8d:a5:c9:03:69:
         e8:8e:43:67:df:5e:61:3c:a2:c5:c6:c2:2f:03:10:c2:5e:01:
         ba:0f:d2:86:fa:33:bb:d9:c7:24:2a:2c:06:72:57:ec:db:4b:
         24:ff:8b:f4:aa:a6:2b:1b:e4:73:33:92:c1:b4:13:af:bb:c2:
         74:e7:c5:a3:52:65:6b:c2:49:98:04:86:5c:0b:3a:ea:fc:73:
         e8:3b:e6:93:fa:b8:bc:ee:55:4d:c5:26:18:41:d7:b7:25:f6:
         da:73:5d:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF9gGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlh
YTZmMGZhZjA2YjBlODIwNTQzZmZiMDdjYWUwZTg4YzY4MTBmZWYwHhcNMjMwNTE1
MDgzMDAxWhcNMjUwNTE0MDgzMDAxWjAzMTEwLwYDVQQDEyhhOGU5YzMyNTAyNGMw
ZWU2ZTIyMDVmMDk1ZTQ0NThkZDUxMjYzNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlM4KluDiK/QZH5vnSpCGvxVaG0J79RYyXxGMLbj5eg5s3j4I
3hBefoaKahAYmO79toPmVo9xdOF9loK9+JcpC+Ywk9tK/sO0P8Rjc5VPGNL7XG4s
GwwuAv2n4JFr6kRZVKxjgkGT4KCqvccydZs3JB2vGNEWuCm7LPtj/sbqFfrivwRG
UZRA3WnLD86y2M+EbVf/c/5QSs5gxhdQ4ilC4u+KMBYwDKmncideGDSCp3uE+bR5
IxdhHuk5n7xMnHwLWH9qWLEiAixE8g3rJLDCgCTCYgapsQUVCyvc0avW1hmMotPW
xV+JKdhz2fLTwFZtq5UEGjBiJLlZcOZo067yAwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOp5kws9ftgoI3fZ8D3scO0T+gQkMB8GA1UdIwQYMBaAFMbO0aAwOf2pJzut
O1NN8mvXtcTGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWFhNmYw
ZmFmMDZiMGU4MjA1NDNmZmIwN2NhZTBlODhjNjgxMGZlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2Q3OTM1MzUtY2RiYS00YjBjLTk4NmMtZDQ5ZDhj
YTY1N2VhL2E4ZTljMzI1MDI0YzBlZTZlMjIwNWYwOTVlNDQ1OGRkNTEyNjM2MDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZDc5MzUzNS1jZGJhLTRiMGMtOTg2Yy1kNDlk
OGNhNjU3ZWEvOWFhNmYwZmFmMDZiMGU4MjA1NDNmZmIwN2NhZTBlODhjNjgxMGZl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALM84TANBgkqhkiG9w0BAQsFAAOCAQEAAgBC/hy6d7V6juPB
8Gl3MmSjWk5vmJIN2jLoYcQHA8KoB4Yx6HV1JPvruksyC2KHqdRSXtpssmjrseop
qz19M5SVW8RszJpJ3tE3wy7ryrINhkTNHTwyy/0nX4HNNk+NDgK2WrjyPwtodSOp
kMTOHSn8l1vgkkBNt+t7JrS5v+07GSrccyKVP29gNXNF/hji6iE2lYycrgh8M31H
Q42lyQNp6I5DZ99eYTyixcbCLwMQwl4Bug/Shvozu9nHJCosBnJX7NtLJP+L9Kqm
KxvkczOSwbQTr7vCdOfFo1Jla8JJmASGXAs66vxz6Dvmk/q4vO5VTcUmGEHXtyX2
2nNduQ==
-----END CERTIFICATE-----