Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/5552da250985180a51c623e2b5f9b4e559753642.roa
File:                     5552da250985180a51c623e2b5f9b4e559753642.roa (raw, json)
Hash identifier:          dOUKGy4lVMwCrYKEWdSg0m3vTpYlIABrz+XZmDhuoRE=
Subject key identifier:   1E:E7:52:FF:74:C6:11:67:3C:38:7A:79:FC:ED:DC:5B:10:60:99:EC
Certificate issuer:       /CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
Certificate serial:       2279DB
Authority key identifier: 5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/5552da250985180a51c623e2b5f9b4e559753642.roa
Signing time:             Thu 25 Jan 2024 21:10:25 +0000
ROA not before:           Thu 25 Jan 2024 21:10:25 +0000
ROA not after:            Sun 25 Jan 2026 21:10:25 +0000
asID:                     265620
IP address blocks:        45.189.60.0/22 maxlen: 24
                          2806:3a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259419 (0x2279db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
        Validity
            Not Before: Jan 25 21:10:25 2024 GMT
            Not After : Jan 25 21:10:25 2026 GMT
        Subject: CN=5552da250985180a51c623e2b5f9b4e559753642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:6c:71:80:66:66:b0:14:f7:23:2f:c8:07:
                    4e:a3:64:68:35:68:af:fb:4f:db:1f:f0:61:78:6a:
                    56:b9:4c:db:c0:69:f7:24:39:25:64:05:00:84:bc:
                    08:34:ec:c4:af:51:bb:c2:5d:6b:e9:73:47:92:bd:
                    20:66:d7:1b:2c:42:31:70:a8:2b:f4:5e:74:d1:03:
                    85:04:c5:b5:2b:e7:6d:c2:a6:d4:65:83:a7:00:9a:
                    a2:92:5d:7a:9b:a5:e7:59:4a:2c:1d:af:bd:a3:5e:
                    95:26:9e:a8:cc:59:b4:7f:bd:c2:60:d9:d6:b3:85:
                    cd:e2:45:1e:05:95:14:3c:48:cb:04:f5:bb:6c:f8:
                    f6:1a:c8:21:95:5b:fc:79:b8:83:16:ac:71:ae:75:
                    c6:0c:0d:e2:81:5b:fd:8f:ec:84:10:e4:52:d6:9c:
                    9a:f0:c9:d5:b7:a6:cd:e2:35:cf:26:00:a8:ab:71:
                    77:8a:41:9d:21:e2:80:91:ca:5e:05:13:22:6b:a9:
                    94:ea:27:67:e9:64:c4:f1:55:8a:83:3e:5f:23:0c:
                    a0:43:f7:0a:98:bb:27:05:ef:8f:c7:e3:97:ce:da:
                    6a:e8:b3:bd:08:1c:23:2b:58:0e:31:b7:04:7c:07:
                    b6:69:3e:15:63:09:7f:a9:e0:5f:d3:89:20:92:f4:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E7:52:FF:74:C6:11:67:3C:38:7A:79:FC:ED:DC:5B:10:60:99:EC
            X509v3 Authority Key Identifier:
                keyid:5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/5552da250985180a51c623e2b5f9b4e559753642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.60.0/22
                IPv6:
                  2806:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:15:ae:d8:6b:42:ae:a7:ae:da:63:da:e2:3f:cb:24:3a:
         6c:fc:67:06:55:25:4f:9d:c2:6f:32:6c:47:ae:43:20:e9:1f:
         8f:d8:8b:5e:21:d4:3b:ad:b6:d8:05:96:63:d1:62:f0:af:dc:
         a3:b6:ca:99:ca:a1:a4:27:3f:ec:00:e6:fb:ea:43:70:1c:a4:
         3b:f3:ef:ba:25:3f:00:53:5f:fd:78:1e:ad:f7:90:65:2b:97:
         63:e2:0c:d9:64:62:49:96:52:2e:83:91:27:93:d4:48:b3:c7:
         84:a3:42:84:b8:a8:80:06:6d:1a:87:09:dd:09:dd:2a:2a:f1:
         a5:c7:cf:31:9c:9c:fa:c9:47:93:b7:bc:52:93:2e:b0:c5:4e:
         1a:e1:de:dc:62:46:37:2e:6f:b9:0e:2b:bb:2c:ef:6e:35:0c:
         ea:fe:3b:c1:25:ee:97:5b:0d:64:e0:1b:fa:00:8c:c7:e7:f2:
         76:45:1f:d8:ce:65:8c:b6:8b:36:a2:2a:98:c5:81:c8:a6:9a:
         f5:6a:00:bc:d6:72:bd:08:85:d5:d5:05:b5:03:39:7f:dc:50:
         2b:ef:ad:65:b1:93:e9:e1:57:bf:fb:1f:cc:8f:31:17:a8:1a:
         ad:df:b7:db:43:d2:7a:c7:14:90:eb:58:88:43:a4:bc:1b:45:
         0b:9b:82:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDInnbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
ZDMwMTg3YzJjOGY4ZTFlNTBhNDRkNmU2YjM1ZjNhMWNhMTJhNGIwHhcNMjQwMTI1
MjExMDI1WhcNMjYwMTI1MjExMDI1WjAzMTEwLwYDVQQDEyg1NTUyZGEyNTA5ODUx
ODBhNTFjNjIzZTJiNWY5YjRlNTU5NzUzNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkuRscYBmZrAU9yMvyAdOo2RoNWiv+0/bH/BheGpWuUzbwGn3
JDklZAUAhLwINOzEr1G7wl1r6XNHkr0gZtcbLEIxcKgr9F500QOFBMW1K+dtwqbU
ZYOnAJqikl16m6XnWUosHa+9o16VJp6ozFm0f73CYNnWs4XN4kUeBZUUPEjLBPW7
bPj2GsghlVv8ebiDFqxxrnXGDA3igVv9j+yEEORS1pya8MnVt6bN4jXPJgCoq3F3
ikGdIeKAkcpeBRMia6mU6idn6WTE8VWKgz5fIwygQ/cKmLsnBe+Px+OXztpq6LO9
CBwjK1gOMbcEfAe2aT4VYwl/qeBf04kgkvTFOQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFB7nUv90xhFnPDh6efzt3FsQYJnsMB8GA1UdIwQYMBaAFF+mteyLqZ7Wi7+S
tY3O1uvn6I2BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWRkMzAx
ODdjMmM4ZjhlMWU1MGE0NGQ2ZTZiMzVmM2ExY2ExMmE0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzNiNTQzYTgtY2Y1Mi00YTMxLTgwMjgtM2JhMmE4
MWJjNmRmLzU1NTJkYTI1MDk4NTE4MGE1MWM2MjNlMmI1ZjliNGU1NTk3NTM2NDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83M2I1NDNhOC1jZjUyLTRhMzEtODAyOC0zYmEy
YTgxYmM2ZGYvYWRkMzAxODdjMmM4ZjhlMWU1MGE0NGQ2ZTZiMzVmM2ExY2ExMmE0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi29PDANBAIAAjAHAwUAKAYDoDANBgkqhkiG9w0BAQsFAAOC
AQEALuAVrthrQq6nrtpj2uI/yyQ6bPxnBlUlT53CbzJsR65DIOkfj9iLXiHUO622
2AWWY9Fi8K/co7bKmcqhpCc/7ADm++pDcBykO/PvuiU/AFNf/XgerfeQZSuXY+IM
2WRiSZZSLoORJ5PUSLPHhKNChLiogAZtGocJ3QndKirxpcfPMZyc+slHk7e8UpMu
sMVOGuHe3GJGNy5vuQ4ruyzvbjUM6v47wSXul1sNZOAb+gCMx+fydkUf2M5ljLaL
NqIqmMWByKaa9WoAvNZyvQiF1dUFtQM5f9xQK++tZbGT6eFXv/sfzI8xF6gard+3
20PSescUkOtYiEOkvBtFC5uC2w==
-----END CERTIFICATE-----