Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/aa042820aca77788c97ac374ade498b8627227c3.roa
File:                     aa042820aca77788c97ac374ade498b8627227c3.roa (raw, json)
Hash identifier:          tt/9zAuLjfs2t91DcF3LisylHnkNK7DNezj2U+HzQHE=
Subject key identifier:   12:2E:F5:7B:A3:6A:E8:0E:76:5A:F0:E1:70:EC:47:A7:D7:2F:B6:EC
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       25B343
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/aa042820aca77788c97ac374ade498b8627227c3.roa
Signing time:             Thu 16 Nov 2023 13:55:05 +0000
ROA not before:           Thu 16 Nov 2023 13:55:05 +0000
ROA not after:            Sun 16 Nov 2025 13:55:05 +0000
asID:                     265724
IP address blocks:        45.6.224.0/22 maxlen: 24
                          2803:9dc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470723 (0x25b343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Nov 16 13:55:05 2023 GMT
            Not After : Nov 16 13:55:05 2025 GMT
        Subject: CN=aa042820aca77788c97ac374ade498b8627227c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:7b:7c:25:80:fd:9e:aa:12:c5:d9:9e:2f:
                    cd:b9:66:77:08:f1:7f:14:dc:65:7f:bd:27:2b:2a:
                    95:87:86:75:98:6e:be:6b:21:cb:6a:0c:5a:b8:65:
                    6c:d7:8b:49:59:cd:66:cc:a8:7e:e3:3d:fb:07:f6:
                    58:52:e0:01:15:44:12:1e:65:76:0f:e7:27:33:49:
                    3c:87:05:41:bb:36:a7:0d:45:2e:7a:25:a4:1d:97:
                    5a:34:de:16:1d:c9:af:09:63:c6:59:cb:7c:2d:d7:
                    28:3c:67:6b:2b:b4:d8:75:b8:0d:31:89:53:87:6b:
                    f5:8a:22:92:25:75:6d:79:39:c5:f2:d3:14:e3:6d:
                    8b:61:38:e0:54:84:d6:ca:fe:05:44:58:32:44:69:
                    de:7a:24:e6:00:48:85:87:d8:8e:5c:f6:87:bf:23:
                    16:ce:9c:8e:b9:2e:e5:f9:71:10:63:be:e9:3f:24:
                    ef:25:40:a9:35:05:13:fd:25:eb:47:4b:86:6c:b8:
                    dd:42:f6:51:cc:9d:66:37:c7:cb:50:4a:fc:1b:af:
                    ce:40:32:ef:54:cd:d8:67:36:45:00:cd:a6:30:a3:
                    77:a0:8e:11:e2:d9:39:56:46:6c:5a:6d:42:a7:82:
                    c1:68:2c:5b:d9:cf:cd:d6:c4:11:39:4d:85:51:36:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:F5:7B:A3:6A:E8:0E:76:5A:F0:E1:70:EC:47:A7:D7:2F:B6:EC
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/aa042820aca77788c97ac374ade498b8627227c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.224.0/22
                IPv6:
                  2803:9dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:0a:cc:13:9b:9f:bb:73:51:1b:f2:0a:f1:51:8f:87:06:
         fb:21:23:c4:00:85:85:ee:cf:72:50:da:e9:c4:23:ff:5e:a9:
         af:9c:21:7a:8d:88:13:6e:b9:3c:5d:00:f4:e2:64:29:99:59:
         f5:bc:d7:85:ca:2a:da:8b:3c:95:2c:2e:84:20:83:5e:f4:73:
         4d:9b:fc:7b:44:38:dd:fa:8e:de:e2:5e:53:30:61:c1:84:93:
         03:2e:be:0f:ee:22:10:fb:38:99:bf:0c:17:77:22:18:fb:4f:
         44:b9:2a:29:8c:a1:af:53:0c:26:6c:40:c1:16:e7:cd:d9:f7:
         a5:d0:20:0d:b6:9f:99:dc:84:3c:85:31:be:80:22:f9:ca:49:
         3f:65:e0:2c:74:21:a0:89:2d:c1:6f:23:93:8e:9c:b9:21:ea:
         3f:97:f4:6c:c6:59:ea:f9:fd:3d:c0:33:84:4b:e2:8e:e5:39:
         ee:a6:4c:ba:c0:37:6b:ca:4d:61:1f:36:62:0f:80:b3:cf:94:
         1e:4b:1f:1b:e0:0f:b6:86:3c:6d:c3:b2:af:19:cc:f6:8d:55:
         f5:d3:50:5e:58:d8:75:bf:86:6f:6e:e7:b7:8d:0a:57:54:6e:
         d2:2f:d9:fd:ae:22:86:d4:2f:5e:f4:41:9d:8f:2e:e2:af:03:
         01:c4:ca:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJbNDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
MmM3M2RmOGE1ZWNmYTIyZWQ5ODY0MmFiNmFlMmU0Njk0OWRkNjEwHhcNMjMxMTE2
MTM1NTA1WhcNMjUxMTE2MTM1NTA1WjAzMTEwLwYDVQQDEyhhYTA0MjgyMGFjYTc3
Nzg4Yzk3YWMzNzRhZGU0OThiODYyNzIyN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsOd7fCWA/Z6qEsXZni/NuWZ3CPF/FNxlf70nKyqVh4Z1mG6+
ayHLagxauGVs14tJWc1mzKh+4z37B/ZYUuABFUQSHmV2D+cnM0k8hwVBuzanDUUu
eiWkHZdaNN4WHcmvCWPGWct8LdcoPGdrK7TYdbgNMYlTh2v1iiKSJXVteTnF8tMU
422LYTjgVITWyv4FRFgyRGneeiTmAEiFh9iOXPaHvyMWzpyOuS7l+XEQY77pPyTv
JUCpNQUT/SXrR0uGbLjdQvZRzJ1mN8fLUEr8G6/OQDLvVM3YZzZFAM2mMKN3oI4R
4tk5VkZsWm1Cp4LBaCxb2c/N1sQROU2FUTZsiwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBIu9XujaugOdlrw4XDsR6fXL7bsMB8GA1UdIwQYMBaAFMaib5TaL2Nys/I3
FvJ4F8MHpfYSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTkyYzcz
ZGY4YTVlY2ZhMjJlZDk4NjQyYWI2YWUyZTQ2OTQ5ZGQ2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTdjMDgxYzMtMzRhMS00OWQ3LTlhY2EtMWEwZWI4
M2E4MzhiL2FhMDQyODIwYWNhNzc3ODhjOTdhYzM3NGFkZTQ5OGI4NjI3MjI3YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81N2MwODFjMy0zNGExLTQ5ZDctOWFjYS0xYTBl
YjgzYTgzOGIvNTkyYzczZGY4YTVlY2ZhMjJlZDk4NjQyYWI2YWUyZTQ2OTQ5ZGQ2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0G4DANBAIAAjAHAwUAKAOdwDANBgkqhkiG9w0BAQsFAAOC
AQEAdJoKzBObn7tzURvyCvFRj4cG+yEjxACFhe7PclDa6cQj/16pr5wheo2IE265
PF0A9OJkKZlZ9bzXhcoq2os8lSwuhCCDXvRzTZv8e0Q43fqO3uJeUzBhwYSTAy6+
D+4iEPs4mb8MF3ciGPtPRLkqKYyhr1MMJmxAwRbnzdn3pdAgDbafmdyEPIUxvoAi
+cpJP2XgLHQhoIktwW8jk46cuSHqP5f0bMZZ6vn9PcAzhEvijuU57qZMusA3a8pN
YR82Yg+As8+UHksfG+APtoY8bcOyrxnM9o1V9dNQXljYdb+Gb27nt40KV1Ru0i/Z
/a4ihtQvXvRBnY8u4q8DAcTKTQ==
-----END CERTIFICATE-----