Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/494e9b41328e73e933b565fe561e9c063ebe5f27.roa
File:                     494e9b41328e73e933b565fe561e9c063ebe5f27.roa (raw, json)
Hash identifier:          Yr28UBv7AVGXClsAF8qmD6hbEKpUWvnUexczAYMdx4E=
Subject key identifier:   53:58:7D:7C:B3:39:87:BF:35:B9:E4:C2:01:31:13:6E:EC:AD:A9:D9
Certificate issuer:       /CN=08208e4e8bb0af74452f35173d828d04b63e2d76
Certificate serial:       1FA0D8
Authority key identifier: F6:AD:02:26:86:12:DE:12:3F:62:7C:23:DB:92:EE:98:88:C0:C5:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08208e4e8bb0af74452f35173d828d04b63e2d76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/494e9b41328e73e933b565fe561e9c063ebe5f27.roa
Signing time:             Wed 30 Aug 2023 19:33:58 +0000
ROA not before:           Tue 29 Aug 2023 19:33:57 +0000
ROA not after:            Sat 30 Aug 2025 19:33:57 +0000
asID:                     270158
IP address blocks:        45.177.176.0/22 maxlen: 24
                          2806:33f::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072792 (0x1fa0d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08208e4e8bb0af74452f35173d828d04b63e2d76
        Validity
            Not Before: Aug 29 19:33:57 2023 GMT
            Not After : Aug 30 19:33:57 2025 GMT
        Subject: CN=494e9b41328e73e933b565fe561e9c063ebe5f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:e7:7d:e5:84:55:8c:0e:e7:4f:d8:51:81:
                    bb:9a:33:18:36:14:5c:1e:0d:7a:ef:cd:dc:e9:03:
                    f1:9c:bf:7f:ca:8c:ac:36:5e:67:4d:09:62:7b:21:
                    8a:f5:b9:00:c1:4b:23:20:82:85:f1:51:50:fe:9c:
                    09:34:12:c1:70:69:f0:60:46:23:a6:94:60:1c:cc:
                    c3:13:19:11:d3:18:8e:0f:27:7f:f7:55:84:f0:3d:
                    a1:8f:81:81:7a:72:5e:89:09:e1:88:f9:ac:85:99:
                    e3:ed:0c:00:ad:fb:5e:9e:ef:25:0e:01:9b:9b:be:
                    60:4f:84:ff:96:de:c1:cc:73:be:30:58:c0:d0:6e:
                    3f:d1:35:e2:bd:77:cf:3a:b5:79:10:b3:91:e5:b4:
                    a8:ef:58:66:2a:88:e6:1f:e7:39:c2:ce:89:0d:42:
                    b9:40:6f:b3:47:b0:ae:81:9f:d1:11:83:de:86:7e:
                    dd:a0:33:9f:e1:00:98:03:c1:42:68:6d:66:cb:dd:
                    63:16:87:94:50:96:5b:0d:13:93:dd:df:55:81:57:
                    5b:15:7a:78:05:c8:06:62:29:ea:2b:46:0c:87:61:
                    77:8d:db:a2:7d:7d:ce:87:e9:36:6f:3d:bc:81:b1:
                    80:6f:f2:1b:ba:86:a2:ae:5e:62:f0:93:bc:90:1b:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:58:7D:7C:B3:39:87:BF:35:B9:E4:C2:01:31:13:6E:EC:AD:A9:D9
            X509v3 Authority Key Identifier:
                keyid:F6:AD:02:26:86:12:DE:12:3F:62:7C:23:DB:92:EE:98:88:C0:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08208e4e8bb0af74452f35173d828d04b63e2d76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/494e9b41328e73e933b565fe561e9c063ebe5f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/08208e4e8bb0af74452f35173d828d04b63e2d76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.176.0/22
                IPv6:
                  2806:33f::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:92:73:cd:0e:c7:1f:22:43:bd:35:8c:39:51:04:20:67:
         72:b5:20:2b:d6:bc:b0:d0:9a:3b:96:a2:2e:11:84:1f:55:df:
         c2:54:87:71:87:72:a9:00:18:a3:88:f1:98:0e:db:99:65:e0:
         1e:fa:9d:9e:9c:87:07:0a:fe:1d:ab:b7:0e:e1:86:7c:10:16:
         03:d6:b7:d0:40:86:c9:dd:06:51:d4:f7:6d:33:04:11:0f:5d:
         d4:ab:a4:65:d3:3d:c6:65:3d:60:92:14:33:07:ac:9e:56:45:
         b1:11:59:5c:9b:32:90:1d:77:84:86:f5:6c:b4:ba:08:8a:b2:
         31:8d:6e:e7:b5:5f:5f:3a:c1:04:43:bf:56:27:06:00:da:eb:
         b3:21:c2:60:d9:b2:f2:d6:60:b1:eb:3e:e6:ec:c4:4d:a3:ac:
         98:3d:cd:f1:70:5f:6f:04:1f:20:8c:f0:e2:d8:e6:e9:49:cc:
         02:16:4c:08:e8:1f:b2:2c:db:4a:b1:09:b6:c7:6c:29:62:bb:
         4f:84:18:00:bc:ab:89:01:f7:a1:cc:96:d8:17:b4:29:03:b6:
         b9:29:4a:7a:a2:90:d1:48:21:b7:dd:1c:fa:8b:17:94:d0:35:
         7f:c4:c6:2f:93:07:0b:e1:81:cb:4b:eb:22:87:b9:a9:c0:ec:
         03:63:4f:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDH6DYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA4
MjA4ZTRlOGJiMGFmNzQ0NTJmMzUxNzNkODI4ZDA0YjYzZTJkNzYwHhcNMjMwODI5
MTkzMzU3WhcNMjUwODMwMTkzMzU3WjAzMTEwLwYDVQQDEyg0OTRlOWI0MTMyOGU3
M2U5MzNiNTY1ZmU1NjFlOWMwNjNlYmU1ZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkE/nfeWEVYwO50/YUYG7mjMYNhRcHg16783c6QPxnL9/yoys
Nl5nTQlieyGK9bkAwUsjIIKF8VFQ/pwJNBLBcGnwYEYjppRgHMzDExkR0xiODyd/
91WE8D2hj4GBenJeiQnhiPmshZnj7QwArftenu8lDgGbm75gT4T/lt7BzHO+MFjA
0G4/0TXivXfPOrV5ELOR5bSo71hmKojmH+c5ws6JDUK5QG+zR7CugZ/REYPehn7d
oDOf4QCYA8FCaG1my91jFoeUUJZbDROT3d9VgVdbFXp4BcgGYinqK0YMh2F3jdui
fX3Oh+k2bz28gbGAb/Ibuoairl5i8JO8kBvhlQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFNYfXyzOYe/NbnkwgExE27sranZMB8GA1UdIwQYMBaAFPatAiaGEt4SP2J8
I9uS7piIwMW2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDgyMDhl
NGU4YmIwYWY3NDQ1MmYzNTE3M2Q4MjhkMDRiNjNlMmQ3Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQxMWJmYmQtMzc4OS00MmRiLWI1MGItZGJkNzc3
MWI3YTJmLzQ5NGU5YjQxMzI4ZTczZTkzM2I1NjVmZTU2MWU5YzA2M2ViZTVmMjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDExYmZiZC0zNzg5LTQyZGItYjUwYi1kYmQ3
NzcxYjdhMmYvMDgyMDhlNGU4YmIwYWY3NDQ1MmYzNTE3M2Q4MjhkMDRiNjNlMmQ3
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2xsDANBAIAAjAHAwUAKAYDPzANBgkqhkiG9w0BAQsFAAOC
AQEAP/2Sc80Oxx8iQ701jDlRBCBncrUgK9a8sNCaO5aiLhGEH1XfwlSHcYdyqQAY
o4jxmA7bmWXgHvqdnpyHBwr+Hau3DuGGfBAWA9a30ECGyd0GUdT3bTMEEQ9d1Kuk
ZdM9xmU9YJIUMwesnlZFsRFZXJsykB13hIb1bLS6CIqyMY1u57VfXzrBBEO/VicG
ANrrsyHCYNmy8tZgses+5uzETaOsmD3N8XBfbwQfIIzw4tjm6UnMAhZMCOgfsizb
SrEJtsdsKWK7T4QYALyriQH3ocyW2Be0KQO2uSlKeqKQ0Ught90c+osXlNA1f8TG
L5MHC+GBy0vrIoe5qcDsA2NPoQ==
-----END CERTIFICATE-----