Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/22a14724db51a49ccdd1c4f945be4c5c9eb9e57a.roa
File:                     22a14724db51a49ccdd1c4f945be4c5c9eb9e57a.roa (raw, json)
Hash identifier:          YvcmVdw/qobRUM7IMeXlW9xHQMxfQhPvpue/D1TJnkE=
Subject key identifier:   AC:03:15:78:90:51:0D:EB:FB:C4:75:48:7F:90:67:AE:A6:4F:8B:A9
Certificate issuer:       /CN=3a95f00c30d4360b8734d44d748537fafcb56a34
Certificate serial:       123CF5
Authority key identifier: 67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/22a14724db51a49ccdd1c4f945be4c5c9eb9e57a.roa
Signing time:             Thu 14 Mar 2024 08:30:02 +0000
ROA not before:           Thu 14 Mar 2024 08:30:02 +0000
ROA not after:            Sat 14 Mar 2026 08:30:02 +0000
asID:                     64117
IP address blocks:        45.185.220.0/22 maxlen: 24
                          2803:d360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195253 (0x123cf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a95f00c30d4360b8734d44d748537fafcb56a34
        Validity
            Not Before: Mar 14 08:30:02 2024 GMT
            Not After : Mar 14 08:30:02 2026 GMT
        Subject: CN=22a14724db51a49ccdd1c4f945be4c5c9eb9e57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:4b:e5:de:f1:ac:19:0b:28:41:0c:d5:f4:
                    45:85:fa:00:42:49:48:e7:fa:96:2a:df:b6:f9:a2:
                    58:a7:a0:80:a3:74:cd:d8:8b:5e:b3:84:c4:9c:66:
                    90:c0:20:6e:20:84:35:94:ca:cc:08:86:39:b9:4b:
                    c5:08:61:8e:c2:de:cd:ee:4b:c2:02:8b:c1:d3:f6:
                    ef:90:05:d7:2f:aa:b8:3f:70:61:2c:02:99:a6:54:
                    99:21:b2:9b:cb:87:9f:92:74:55:b1:f1:29:c8:f9:
                    37:90:d0:5a:af:7a:74:1f:b4:fe:2b:a2:89:a6:aa:
                    33:9b:bb:db:e1:70:66:30:84:43:d6:23:e9:13:e1:
                    56:57:d4:38:b0:0c:f1:ee:19:e1:dc:74:63:27:3a:
                    6c:aa:c7:73:e7:08:37:84:3a:d2:8b:e5:5a:3e:ac:
                    2e:88:68:22:82:d2:0d:84:86:cf:c1:bd:5b:53:84:
                    41:e7:3d:aa:82:ed:9d:0e:28:e4:2b:08:08:76:54:
                    3e:b7:ec:ca:fe:c0:7f:8f:19:4a:d8:da:db:19:97:
                    48:cd:06:08:a9:51:de:06:cc:b3:90:59:f1:11:3a:
                    c6:05:8e:53:6b:f7:f9:36:5f:05:4b:1f:97:38:a5:
                    15:f8:cc:e1:d1:d1:b9:89:aa:f0:a1:16:d3:93:99:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:15:78:90:51:0D:EB:FB:C4:75:48:7F:90:67:AE:A6:4F:8B:A9
            X509v3 Authority Key Identifier:
                keyid:67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/22a14724db51a49ccdd1c4f945be4c5c9eb9e57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22
                IPv6:
                  2803:d360::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:04:a7:2e:80:7c:70:19:69:ef:86:10:39:e3:54:7c:a2:27:
         3c:6b:3a:e5:86:5d:80:9d:d3:b5:f6:c1:56:1f:9c:68:62:3b:
         58:87:09:1e:0c:40:80:0d:3d:85:a7:ee:f9:33:20:74:20:26:
         5b:8b:07:f8:42:7e:03:4c:6d:21:dd:61:59:aa:67:e4:47:15:
         94:61:74:3c:3b:b5:89:b6:0a:4a:15:58:7a:ca:d2:4b:d1:e0:
         f3:ea:87:dc:ee:46:0a:62:be:c2:2c:fd:b8:c1:c8:24:b4:92:
         11:4b:78:9f:30:92:1d:a1:e9:d4:ab:3c:cc:22:6d:1e:7a:06:
         9e:fe:65:f3:93:47:a0:61:3c:bd:3d:34:fc:a3:4b:33:79:4a:
         fd:99:f3:82:b8:5b:c1:da:b0:e7:50:1c:8f:94:06:5a:ce:c9:
         fa:f3:5d:51:92:89:ec:9b:28:6b:dc:ec:3b:85:68:6c:83:ef:
         da:91:3f:6c:e8:4c:b5:ff:32:b6:c6:5e:5b:f3:85:ec:03:77:
         d3:10:6b:a2:e3:47:91:25:e1:94:5d:ab:b7:e5:72:ce:92:ab:
         33:3e:52:dc:e9:f3:8b:04:1d:c8:06:a4:f0:e6:ff:4e:7a:24:
         12:00:4c:6a:a5:c9:bd:76:01:54:07:b8:5b:bc:f3:7b:33:6c:
         a0:55:3f:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEjz1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
OTVmMDBjMzBkNDM2MGI4NzM0ZDQ0ZDc0ODUzN2ZhZmNiNTZhMzQwHhcNMjQwMzE0
MDgzMDAyWhcNMjYwMzE0MDgzMDAyWjAzMTEwLwYDVQQDEygyMmExNDcyNGRiNTFh
NDljY2RkMWM0Zjk0NWJlNGM1YzllYjllNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn4xL5d7xrBkLKEEM1fRFhfoAQklI5/qWKt+2+aJYp6CAo3TN
2Ites4TEnGaQwCBuIIQ1lMrMCIY5uUvFCGGOwt7N7kvCAovB0/bvkAXXL6q4P3Bh
LAKZplSZIbKby4efknRVsfEpyPk3kNBar3p0H7T+K6KJpqozm7vb4XBmMIRD1iPp
E+FWV9Q4sAzx7hnh3HRjJzpsqsdz5wg3hDrSi+VaPqwuiGgigtINhIbPwb1bU4RB
5z2qgu2dDijkKwgIdlQ+t+zK/sB/jxlK2NrbGZdIzQYIqVHeBsyzkFnxETrGBY5T
a/f5Nl8FSx+XOKUV+Mzh0dG5iarwoRbTk5lkZwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKwDFXiQUQ3r+8R1SH+QZ66mT4upMB8GA1UdIwQYMBaAFGe2uvcfev95zLAo
mF0zKyS/zcB0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E5NWYw
MGMzMGQ0MzYwYjg3MzRkNDRkNzQ4NTM3ZmFmY2I1NmEzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzI2ODBhNTItZTQ2MS00OTAzLWIzYzMtNTNkNGY0
YmIzYTkyLzIyYTE0NzI0ZGI1MWE0OWNjZGQxYzRmOTQ1YmU0YzVjOWViOWU1N2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MjY4MGE1Mi1lNDYxLTQ5MDMtYjNjMy01M2Q0
ZjRiYjNhOTIvM2E5NWYwMGMzMGQ0MzYwYjg3MzRkNDRkNzQ4NTM3ZmFmY2I1NmEz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi253DANBAIAAjAHAwUAKAPTYDANBgkqhkiG9w0BAQsFAAOC
AQEABwSnLoB8cBlp74YQOeNUfKInPGs65YZdgJ3TtfbBVh+caGI7WIcJHgxAgA09
hafu+TMgdCAmW4sH+EJ+A0xtId1hWapn5EcVlGF0PDu1ibYKShVYesrSS9Hg8+qH
3O5GCmK+wiz9uMHIJLSSEUt4nzCSHaHp1Ks8zCJtHnoGnv5l85NHoGE8vT00/KNL
M3lK/Znzgrhbwdqw51Acj5QGWs7J+vNdUZKJ7Jsoa9zsO4VobIPv2pE/bOhMtf8y
tsZeW/OF7AN30xBrouNHkSXhlF2rt+VyzpKrMz5S3OnziwQdyAak8Ob/TnokEgBM
aqXJvXYBVAe4W7zzezNsoFU/Qw==
-----END CERTIFICATE-----