Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/49494811c279c83617a9cf95ea1653e6a11eeb01.roa
File:                     49494811c279c83617a9cf95ea1653e6a11eeb01.roa (raw, json)
Hash identifier:          IDVQGivP0xUumMjSvXMpBfQBjt+PGALBZ6pJsR2JwN0=
Subject key identifier:   10:80:5C:10:3D:75:7C:9D:F4:83:E5:BB:24:98:64:45:BE:D9:61:BE
Certificate issuer:       /CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
Certificate serial:       1254B3
Authority key identifier: B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/49494811c279c83617a9cf95ea1653e6a11eeb01.roa
Signing time:             Fri 10 Nov 2023 07:30:05 +0000
ROA not before:           Fri 10 Nov 2023 07:30:05 +0000
ROA not after:            Sun 09 Nov 2025 07:30:05 +0000
asID:                     13959
IP address blocks:        45.167.12.0/22 maxlen: 24
                          2806:311::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201331 (0x1254b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
        Validity
            Not Before: Nov 10 07:30:05 2023 GMT
            Not After : Nov  9 07:30:05 2025 GMT
        Subject: CN=49494811c279c83617a9cf95ea1653e6a11eeb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:62:55:73:47:68:a4:d1:11:94:2c:fa:25:
                    cd:9b:72:a1:a5:e4:86:6d:f1:03:d6:a2:f4:8f:e0:
                    4a:ca:5e:0a:85:05:cc:61:ae:39:de:1c:b7:d5:4d:
                    51:d7:47:66:73:f5:9b:bf:36:da:0f:17:01:ce:9d:
                    e1:2a:05:31:86:dd:cf:fa:3f:8c:cc:67:dc:9a:0d:
                    bc:4c:d6:6f:c3:ab:cc:60:f2:44:4b:55:1e:f5:90:
                    8d:32:f8:55:23:ec:3e:16:f5:df:e3:70:18:48:d3:
                    21:d8:12:17:c3:2f:16:4c:bb:c6:f8:e1:a7:b4:90:
                    b1:34:69:c7:09:2f:ea:51:b7:76:fe:0f:90:6f:a0:
                    b6:13:63:ae:6f:9e:ca:13:31:6f:ae:f9:bc:69:ec:
                    66:f5:48:2d:c6:a3:53:04:ea:6b:b5:49:9d:1a:c4:
                    dc:14:b1:a2:9f:09:93:70:6b:88:70:2e:ba:66:6a:
                    aa:22:35:bb:7a:38:7d:f3:99:23:ce:bf:4c:35:0c:
                    8e:97:93:58:4b:85:a7:22:0a:3e:52:50:4f:14:22:
                    03:e7:8c:2f:63:36:e9:cd:5e:56:f7:cd:9e:ca:8c:
                    41:5f:14:88:56:3e:23:25:ff:16:54:5a:48:8d:6e:
                    b7:a5:1d:61:84:59:e0:a3:b7:ca:05:6c:a4:00:ff:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:5C:10:3D:75:7C:9D:F4:83:E5:BB:24:98:64:45:BE:D9:61:BE
            X509v3 Authority Key Identifier:
                keyid:B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/49494811c279c83617a9cf95ea1653e6a11eeb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22
                IPv6:
                  2806:311::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:11:d6:8f:7f:8c:ec:52:32:92:8b:3f:5c:e0:69:4c:7e:e4:
         12:9c:f5:8d:c7:28:4e:c2:f0:af:26:9e:d0:f3:de:af:5c:a0:
         38:ae:ae:08:02:01:db:e9:00:4c:c8:a2:bb:fe:6b:aa:a0:85:
         6e:e4:e9:3a:83:2c:e0:5a:8b:bb:90:9e:3a:a2:63:d9:85:73:
         5e:3a:bb:85:f7:0f:33:19:91:30:5b:fd:a8:df:3b:e6:78:73:
         3f:50:0e:c1:e8:f1:0c:7b:80:08:dd:0d:5e:78:78:ac:69:08:
         eb:d6:69:ce:4f:7a:3b:4f:17:a2:49:66:4b:f0:05:f9:25:49:
         e0:f3:91:c7:fb:f3:29:ff:cb:fe:55:4c:00:a2:82:d0:2e:e8:
         15:b0:23:74:0a:2b:f0:f0:a4:e2:a5:1e:96:3e:a8:0a:d5:c1:
         15:de:07:0f:a0:dd:a6:92:30:bb:35:bd:3f:94:8f:86:06:05:
         82:5f:e9:58:d7:00:39:2a:0a:a0:4d:cb:3f:e1:ef:fa:80:aa:
         3f:e6:5f:3f:5f:2a:84:83:df:60:66:93:c1:fd:78:24:f9:b4:
         00:3c:c9:04:30:38:62:f8:bb:95:75:11:00:29:4d:73:ad:06:
         91:a4:28:e7:e5:87:3f:6f:3e:8c:6e:c4:ad:5d:d8:1f:fa:a3:
         c5:4b:5a:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDElSzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhj
Yzc5MmU3NmRkZDliZmFmZjY1ZmZlNTYzYmY3NjU2N2JjNzkxNGMwHhcNMjMxMTEw
MDczMDA1WhcNMjUxMTA5MDczMDA1WjAzMTEwLwYDVQQDEyg0OTQ5NDgxMWMyNzlj
ODM2MTdhOWNmOTVlYTE2NTNlNmExMWVlYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk6liVXNHaKTREZQs+iXNm3KhpeSGbfED1qL0j+BKyl4KhQXM
Ya453hy31U1R10dmc/WbvzbaDxcBzp3hKgUxht3P+j+MzGfcmg28TNZvw6vMYPJE
S1Ue9ZCNMvhVI+w+FvXf43AYSNMh2BIXwy8WTLvG+OGntJCxNGnHCS/qUbd2/g+Q
b6C2E2Oub57KEzFvrvm8aexm9UgtxqNTBOprtUmdGsTcFLGinwmTcGuIcC66Zmqq
IjW7ejh985kjzr9MNQyOl5NYS4WnIgo+UlBPFCID54wvYzbpzV5W982eyoxBXxSI
Vj4jJf8WVFpIjW63pR1hhFngo7fKBWykAP88YwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBCAXBA9dXyd9IPluySYZEW+2WG+MB8GA1UdIwQYMBaAFLcYgeSPyXg9zaFn
HXu9BLcTYPZfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGNjNzky
ZTc2ZGRkOWJmYWZmNjVmZmU1NjNiZjc2NTY3YmM3OTE0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyZjdkNWYtMjc3My00Y2MxLWJiZDEtYTZiOGVj
MjE2MzkzLzQ5NDk0ODExYzI3OWM4MzYxN2E5Y2Y5NWVhMTY1M2U2YTExZWViMDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzJmN2Q1Zi0yNzczLTRjYzEtYmJkMS1hNmI4
ZWMyMTYzOTMvOGNjNzkyZTc2ZGRkOWJmYWZmNjVmZmU1NjNiZjc2NTY3YmM3OTE0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2nDDANBAIAAjAHAwUAKAYDETANBgkqhkiG9w0BAQsFAAOC
AQEAVRHWj3+M7FIykos/XOBpTH7kEpz1jccoTsLwryae0PPer1ygOK6uCAIB2+kA
TMiiu/5rqqCFbuTpOoMs4FqLu5CeOqJj2YVzXjq7hfcPMxmRMFv9qN875nhzP1AO
wejxDHuACN0NXnh4rGkI69Zpzk96O08XoklmS/AF+SVJ4PORx/vzKf/L/lVMAKKC
0C7oFbAjdAor8PCk4qUelj6oCtXBFd4HD6DdppIwuzW9P5SPhgYFgl/pWNcAOSoK
oE3LP+Hv+oCqP+ZfP18qhIPfYGaTwf14JPm0ADzJBDA4Yvi7lXURAClNc60GkaQo
5+WHP28+jG7ErV3YH/qjxUtaug==
-----END CERTIFICATE-----