Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/52d1473a96e803f8abd860d8c10099db11e2e5ec.roa
File:                     52d1473a96e803f8abd860d8c10099db11e2e5ec.roa (raw, json)
Hash identifier:          pb3PLF/0XzGrKY5M8irrrGqMvd+6T+Pjo4jKfMKEAQw=
Subject key identifier:   1F:82:01:34:3C:B3:33:35:7F:36:3C:18:C9:40:2A:0D:51:55:F9:0C
Certificate issuer:       /CN=cf4915c9e7820927bad31711777cdb049ec85e66
Certificate serial:       175638
Authority key identifier: F7:25:26:2A:74:53:36:17:8C:F8:ED:98:E6:95:58:E4:6A:64:D6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf4915c9e7820927bad31711777cdb049ec85e66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/52d1473a96e803f8abd860d8c10099db11e2e5ec.roa
Signing time:             Mon 25 Mar 2024 08:30:02 +0000
ROA not before:           Mon 25 Mar 2024 08:30:02 +0000
ROA not after:            Wed 25 Mar 2026 08:30:02 +0000
asID:                     267731
IP address blocks:        45.166.76.0/23 maxlen: 23
                          45.166.78.0/24 maxlen: 24
                          2803:95a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529400 (0x175638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4915c9e7820927bad31711777cdb049ec85e66
        Validity
            Not Before: Mar 25 08:30:02 2024 GMT
            Not After : Mar 25 08:30:02 2026 GMT
        Subject: CN=52d1473a96e803f8abd860d8c10099db11e2e5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:b5:61:df:06:db:69:b6:b7:df:85:6f:a2:
                    5a:8c:66:ca:82:e9:44:94:d7:bc:18:05:21:b5:fa:
                    57:33:71:72:7e:60:58:47:19:99:53:94:82:5f:4f:
                    88:cb:31:54:4b:86:d2:3b:85:a2:bd:87:af:3a:24:
                    27:15:ea:cd:1c:39:3f:a5:06:42:9b:2e:ee:04:cf:
                    f8:f7:35:ab:f9:98:ee:b8:73:95:0a:13:5e:4e:71:
                    4e:84:0d:a7:94:b7:55:2e:35:b8:29:bd:bb:20:71:
                    c2:fd:41:04:1a:c4:cb:c8:fb:1f:4a:3b:cc:e9:0d:
                    66:f3:bf:b1:cc:93:52:bb:a5:4b:36:4f:e4:5a:b0:
                    11:6a:39:7d:e8:51:53:30:3f:f9:85:57:2d:3b:ac:
                    ff:2d:66:2b:96:9a:af:c1:db:f8:1a:75:65:76:a1:
                    0a:68:fe:96:70:82:b2:a7:82:0d:5b:67:19:d1:7e:
                    9d:35:2a:bb:9e:ea:2e:02:30:4e:8a:6d:e5:46:b3:
                    0a:6f:99:75:46:21:70:99:30:8e:19:9b:1d:10:4c:
                    66:6e:bf:39:76:e8:da:51:16:28:f9:88:e3:39:33:
                    b3:89:71:4d:ce:6b:35:a5:e1:ab:3b:32:0c:37:dc:
                    06:77:2e:fb:f9:39:65:63:da:ca:f2:fa:34:c4:df:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:01:34:3C:B3:33:35:7F:36:3C:18:C9:40:2A:0D:51:55:F9:0C
            X509v3 Authority Key Identifier:
                keyid:F7:25:26:2A:74:53:36:17:8C:F8:ED:98:E6:95:58:E4:6A:64:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf4915c9e7820927bad31711777cdb049ec85e66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/52d1473a96e803f8abd860d8c10099db11e2e5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515dae08-e1f8-441c-b42e-04115f0a6bf6/cf4915c9e7820927bad31711777cdb049ec85e66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.76.0-45.166.78.255
                IPv6:
                  2803:95a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:54:69:d4:7b:c3:4a:5c:17:d4:c6:f4:87:0b:46:d6:56:5b:
         ff:3c:dc:fe:f9:59:21:ba:1f:4b:e1:e1:a3:0f:16:c2:2e:10:
         8b:84:53:63:42:31:29:85:a2:c5:70:0c:0b:bd:bb:a5:6b:43:
         2f:1c:f2:bb:10:06:94:db:0f:be:af:54:92:8b:ab:71:fc:d8:
         7c:41:c4:44:d0:4a:1a:fd:82:53:55:39:cd:e7:5f:02:7f:fa:
         5a:1a:bf:57:1c:4a:01:76:2c:bc:d3:28:78:59:d7:78:c7:70:
         bf:9b:96:1a:50:d0:df:7c:8b:53:91:e9:be:c4:71:da:62:97:
         50:1e:b8:f5:28:51:3c:16:9c:24:50:f0:59:bb:03:ef:47:f5:
         50:66:0d:a1:6e:4a:7e:a0:cd:67:ac:33:8d:d8:f2:02:ba:a3:
         d2:5c:64:1a:80:7d:a2:0f:80:fc:cb:67:cb:6e:f5:89:57:a7:
         0d:a0:48:a6:d1:82:4c:de:63:65:3f:19:92:1b:71:4b:d0:9d:
         f9:aa:cc:03:56:4e:d1:c8:2d:c5:0b:4d:ee:b5:9f:12:79:fb:
         70:ad:63:27:be:16:30:9d:95:be:f7:d4:d4:36:35:2f:ab:58:
         6f:b9:d6:9e:77:e3:7b:4e:02:d2:62:56:01:5a:a2:04:2a:45:
         c7:44:00:5a
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDF1Y4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
NDkxNWM5ZTc4MjA5MjdiYWQzMTcxMTc3N2NkYjA0OWVjODVlNjYwHhcNMjQwMzI1
MDgzMDAyWhcNMjYwMzI1MDgzMDAyWjAzMTEwLwYDVQQDEyg1MmQxNDczYTk2ZTgw
M2Y4YWJkODYwZDhjMTAwOTlkYjExZTJlNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhJq1Yd8G22m2t9+Fb6JajGbKgulElNe8GAUhtfpXM3FyfmBY
RxmZU5SCX0+IyzFUS4bSO4WivYevOiQnFerNHDk/pQZCmy7uBM/49zWr+ZjuuHOV
ChNeTnFOhA2nlLdVLjW4Kb27IHHC/UEEGsTLyPsfSjvM6Q1m87+xzJNSu6VLNk/k
WrARajl96FFTMD/5hVctO6z/LWYrlpqvwdv4GnVldqEKaP6WcIKyp4INW2cZ0X6d
NSq7nuouAjBOim3lRrMKb5l1RiFwmTCOGZsdEExmbr85dujaURYo+YjjOTOziXFN
zms1peGrOzIMN9wGdy77+TllY9rK8vo0xN+NjQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFB+CATQ8szM1fzY8GMlAKg1RVfkMMB8GA1UdIwQYMBaAFPclJip0UzYXjPjt
mOaVWORqZNaCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Y0OTE1
YzllNzgyMDkyN2JhZDMxNzExNzc3Y2RiMDQ5ZWM4NWU2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTE1ZGFlMDgtZTFmOC00NDFjLWI0MmUtMDQxMTVm
MGE2YmY2LzUyZDE0NzNhOTZlODAzZjhhYmQ4NjBkOGMxMDA5OWRiMTFlMmU1ZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MTVkYWUwOC1lMWY4LTQ0MWMtYjQyZS0wNDEx
NWYwYTZiZjYvY2Y0OTE1YzllNzgyMDkyN2JhZDMxNzExNzc3Y2RiMDQ5ZWM4NWU2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQCLaZMAwQALaZOMA0EAgACMAcDBQAoA5WgMA0GCSqGSIb3
DQEBCwUAA4IBAQBAVGnUe8NKXBfUxvSHC0bWVlv/PNz++Vkhuh9L4eGjDxbCLhCL
hFNjQjEphaLFcAwLvbula0MvHPK7EAaU2w++r1SSi6tx/Nh8QcRE0Eoa/YJTVTnN
518Cf/paGr9XHEoBdiy80yh4Wdd4x3C/m5YaUNDffItTkem+xHHaYpdQHrj1KFE8
FpwkUPBZuwPvR/VQZg2hbkp+oM1nrDON2PICuqPSXGQagH2iD4D8y2fLbvWJV6cN
oEim0YJM3mNlPxmSG3FL0J35qswDVk7RyC3FC03utZ8SeftwrWMnvhYwnZW+99TU
NjUvq1hvudaed+N7TgLSYlYBWqIEKkXHRABa
-----END CERTIFICATE-----