Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/35ec689c797e2b2ec7aefa2185bd9930a3e15223.roa
File:                     35ec689c797e2b2ec7aefa2185bd9930a3e15223.roa (raw, json)
Hash identifier:          8r/b98BMwJCAG+TDr1SfjXyGMf5vcVkmSXI2IHP94nE=
Subject key identifier:   98:43:6F:D5:15:0C:00:AC:DB:79:99:A2:D3:B4:FE:FD:7C:0F:86:F4
Certificate issuer:       /CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Certificate serial:       23F671
Authority key identifier: 4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/35ec689c797e2b2ec7aefa2185bd9930a3e15223.roa
Signing time:             Wed 18 Oct 2023 00:44:54 +0000
ROA not before:           Tue 17 Oct 2023 00:44:54 +0000
ROA not after:            Sat 18 Oct 2025 00:44:54 +0000
asID:                     52468
IP address blocks:        45.224.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356849 (0x23f671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
        Validity
            Not Before: Oct 17 00:44:54 2023 GMT
            Not After : Oct 18 00:44:54 2025 GMT
        Subject: CN=35ec689c797e2b2ec7aefa2185bd9930a3e15223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:55:56:c7:36:15:28:65:b8:25:3b:ae:f9:
                    6e:c2:b4:7a:ae:0c:01:d7:03:da:ab:8c:d1:ef:b2:
                    d5:63:cd:4a:8b:cc:cf:4a:fd:b8:3c:e0:bd:d8:c0:
                    d0:c2:45:59:97:ee:b8:d4:e6:bb:b0:7c:a6:b7:bc:
                    6d:db:2d:cc:17:54:c5:7d:41:2d:6e:14:ac:9b:71:
                    b8:22:5d:f2:df:03:1b:a0:37:23:d4:13:2a:53:7b:
                    5d:ac:77:d9:bb:f2:4c:d1:7d:ad:7e:e2:64:0d:ed:
                    3b:91:14:04:14:6f:b8:c7:90:34:de:e9:84:eb:f3:
                    94:94:4e:42:03:e0:bf:3a:72:c3:4e:6d:0d:be:e2:
                    6b:40:aa:89:ae:c2:0d:bf:f3:96:1d:e2:cd:14:a5:
                    f8:1a:72:45:34:f0:76:5a:4e:78:53:97:35:30:7e:
                    f7:dc:f1:3f:7e:f2:bd:fd:61:4d:22:39:97:56:7f:
                    98:de:f6:14:56:ae:78:0d:77:59:75:96:14:23:b5:
                    73:79:11:2a:05:99:a2:f1:36:f7:bc:11:dc:1c:ef:
                    46:e3:62:cb:cf:de:1a:df:2b:9b:d0:73:64:c1:e8:
                    20:67:48:07:e8:68:5a:4b:c4:9f:67:a2:3b:8f:d5:
                    a1:93:a7:99:64:18:df:db:b6:49:f8:a7:46:0c:1f:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:43:6F:D5:15:0C:00:AC:DB:79:99:A2:D3:B4:FE:FD:7C:0F:86:F4
            X509v3 Authority Key Identifier:
                keyid:4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/35ec689c797e2b2ec7aefa2185bd9930a3e15223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:27:df:1f:f0:3b:47:30:3c:56:d9:1f:2d:aa:96:f4:12:
         b0:d1:48:82:1b:e2:63:e0:e7:5a:59:d9:df:a2:b0:9e:a3:71:
         f8:e9:ec:98:b0:e1:ab:19:2f:84:c0:72:9b:8f:c1:0c:6e:b5:
         b0:97:f9:df:ad:1b:dc:5c:e5:b9:77:80:5a:5d:da:10:b2:ba:
         f7:8d:99:84:aa:07:f2:a4:30:aa:38:21:45:80:3b:eb:52:7b:
         2d:b7:49:61:aa:15:16:c3:4a:2e:68:a9:13:09:ec:59:75:d8:
         9a:0b:f1:af:8a:4b:62:8a:68:6e:79:b8:1a:73:12:9f:39:d8:
         3f:3f:fd:74:cf:f4:a5:ec:20:c4:53:7e:e8:67:ab:75:72:b0:
         ed:cd:c1:53:02:5e:f9:05:d7:2d:00:ae:e8:56:22:9b:59:08:
         e4:f7:d3:6c:88:de:17:de:22:3d:16:43:a8:7c:ee:80:ca:4a:
         38:4b:e8:05:4d:e9:c5:78:7c:10:31:ef:13:19:3c:f9:bc:73:
         f1:ac:fb:7b:cd:d4:a1:87:66:97:29:5a:a2:85:37:3d:20:33:
         a5:45:5d:96:e3:d4:91:aa:3b:ca:7c:8e:36:ce:cb:9e:07:d6:
         ea:d0:57:a0:57:ce:ec:51:c5:8c:a9:0f:59:6a:c7:90:69:66:
         82:e2:9d:65
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI/ZxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
NjVkMWMzN2U0OTVhYjQ5NGVkYzNiYWQzMGIxYTZkNGY4OGUzODMwHhcNMjMxMDE3
MDA0NDU0WhcNMjUxMDE4MDA0NDU0WjAzMTEwLwYDVQQDEygzNWVjNjg5Yzc5N2Uy
YjJlYzdhZWZhMjE4NWJkOTkzMGEzZTE1MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAogZVVsc2FShluCU7rvluwrR6rgwB1wPaq4zR77LVY81Ki8zP
Sv24POC92MDQwkVZl+641Oa7sHymt7xt2y3MF1TFfUEtbhSsm3G4Il3y3wMboDcj
1BMqU3tdrHfZu/JM0X2tfuJkDe07kRQEFG+4x5A03umE6/OUlE5CA+C/OnLDTm0N
vuJrQKqJrsINv/OWHeLNFKX4GnJFNPB2Wk54U5c1MH733PE/fvK9/WFNIjmXVn+Y
3vYUVq54DXdZdZYUI7VzeREqBZmi8Tb3vBHcHO9G42LLz94a3yub0HNkweggZ0gH
6GhaS8SfZ6I7j9Whk6eZZBjf27ZJ+KdGDB9QhQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJhDb9UVDACs23mZotO0/v18D4b0MB8GA1UdIwQYMBaAFE0uMP3rL7PGb49n
Jgk2nXXZ3s9SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWY2NWQx
YzM3ZTQ5NWFiNDk0ZWRjM2JhZDMwYjFhNmQ0Zjg4ZTM4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM2ZmFlOTktMmZiNi00MWViLTlmYTktNWNkYTBm
NTNhMDRjLzM1ZWM2ODljNzk3ZTJiMmVjN2FlZmEyMTg1YmQ5OTMwYTNlMTUyMjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzZmYWU5OS0yZmI2LTQxZWItOWZhOS01Y2Rh
MGY1M2EwNGMvMWY2NWQxYzM3ZTQ5NWFiNDk0ZWRjM2JhZDMwYjFhNmQ0Zjg4ZTM4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3gFDANBgkqhkiG9w0BAQsFAAOCAQEAnosn3x/wO0cwPFbZ
Hy2qlvQSsNFIghviY+DnWlnZ36KwnqNx+OnsmLDhqxkvhMBym4/BDG61sJf5360b
3FzluXeAWl3aELK6942ZhKoH8qQwqjghRYA761J7LbdJYaoVFsNKLmipEwnsWXXY
mgvxr4pLYopobnm4GnMSnznYPz/9dM/0pewgxFN+6GerdXKw7c3BUwJe+QXXLQCu
6FYim1kI5PfTbIjeF94iPRZDqHzugMpKOEvoBU3pxXh8EDHvExk8+bxz8az7e83U
oYdmlylaooU3PSAzpUVdluPUkao7ynyONs7LngfW6tBXoFfO7FHFjKkPWWrHkGlm
guKdZQ==
-----END CERTIFICATE-----