Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/d54d96e7405cbd27ac431b83d0af58f46682acac.roa
File:                     d54d96e7405cbd27ac431b83d0af58f46682acac.roa (raw, json)
Hash identifier:          yNs+eRMgU6V32+lfE6y4I+/Xqk26znVt3ytK2n6x6bs=
Subject key identifier:   7D:9B:73:3A:2A:09:67:01:5B:96:66:C6:FB:5E:F7:F1:01:A0:36:EA
Certificate issuer:       /CN=8dae7cc9c123ea75c4abe43c62f030719d39ed8d
Certificate serial:       222444
Authority key identifier: C0:D2:E6:0F:10:A1:E0:31:E5:71:B0:4A:18:F5:EA:B6:73:BE:A3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dae7cc9c123ea75c4abe43c62f030719d39ed8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/d54d96e7405cbd27ac431b83d0af58f46682acac.roa
Signing time:             Tue 08 Aug 2023 19:24:14 +0000
ROA not before:           Mon 07 Aug 2023 19:24:14 +0000
ROA not after:            Fri 08 Aug 2025 19:24:14 +0000
asID:                     265884
IP address blocks:        45.71.5.0/24 maxlen: 24
                          2801:12:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237508 (0x222444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dae7cc9c123ea75c4abe43c62f030719d39ed8d
        Validity
            Not Before: Aug  7 19:24:14 2023 GMT
            Not After : Aug  8 19:24:14 2025 GMT
        Subject: CN=d54d96e7405cbd27ac431b83d0af58f46682acac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:67:89:25:0c:d6:09:1d:a4:e3:49:88:b4:
                    22:58:b8:45:11:28:5e:31:0c:5f:8f:c4:30:b9:3c:
                    c0:83:72:ec:30:e0:01:1c:e3:d3:ee:5d:48:f4:4f:
                    0b:c0:58:f2:43:e3:c7:4f:8b:16:76:a1:05:bf:85:
                    85:34:d2:61:a2:df:d0:49:cc:f9:af:d1:c4:d5:9c:
                    de:92:34:fb:18:2b:4c:dc:39:7f:f2:51:19:52:57:
                    2c:2a:e3:9d:67:44:ca:bc:d5:d2:71:2d:01:bf:11:
                    30:f0:3a:18:1c:c3:53:28:d3:8f:b3:a9:c0:7c:02:
                    9b:b6:06:19:41:6e:78:a6:df:51:2a:50:08:0b:df:
                    ba:f1:39:2a:10:bd:78:01:20:ac:cb:8f:6e:d0:9e:
                    38:cf:17:2a:76:14:96:15:f1:b5:65:e0:2d:c0:31:
                    13:58:9e:62:61:e2:0a:10:c6:b1:db:9c:f5:29:7c:
                    fe:1f:6d:e7:66:27:58:7d:8b:5e:5d:e1:75:06:38:
                    b5:e6:f6:ce:a6:42:1f:c1:24:4f:57:73:f7:c5:79:
                    69:f1:f3:7d:a0:87:12:16:95:91:67:08:91:91:3f:
                    da:7a:41:1f:6b:ac:8a:0c:bb:b8:60:01:04:40:a6:
                    17:ef:0d:9c:9e:5c:df:36:db:01:b3:71:96:5f:31:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:73:3A:2A:09:67:01:5B:96:66:C6:FB:5E:F7:F1:01:A0:36:EA
            X509v3 Authority Key Identifier:
                keyid:C0:D2:E6:0F:10:A1:E0:31:E5:71:B0:4A:18:F5:EA:B6:73:BE:A3:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dae7cc9c123ea75c4abe43c62f030719d39ed8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/d54d96e7405cbd27ac431b83d0af58f46682acac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7faca3f9-1d8e-4ec5-b02a-e9cb1d49c59c/8dae7cc9c123ea75c4abe43c62f030719d39ed8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.5.0/24
                IPv6:
                  2801:12:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:d1:2d:e0:05:d9:46:99:ae:c2:58:5e:05:89:95:ee:89:95:
         6c:d0:28:9a:fe:8e:77:a4:88:74:c2:3c:17:d2:3d:91:15:0c:
         2a:cb:93:91:23:fb:b1:b4:39:d9:a6:b9:ed:bd:6e:de:ba:17:
         ea:d6:75:13:9e:32:05:6b:a2:7f:ff:54:e7:05:85:cf:e3:cf:
         56:77:a6:6a:ed:25:8e:d4:d1:6a:cc:76:ba:25:4a:7d:2d:cb:
         b7:d1:50:30:e0:52:2d:d1:2f:90:f2:ec:77:f0:ba:4d:01:93:
         60:f8:e5:eb:0a:f5:78:87:d3:2b:ee:ca:66:be:6c:15:74:6a:
         78:b0:be:87:53:59:f9:fe:3e:7d:c4:b8:44:92:31:7b:ca:d6:
         1b:06:f8:02:28:4b:8e:a8:73:da:de:61:4f:21:35:e4:03:39:
         ab:68:88:f1:67:7d:f1:96:d3:2f:86:da:5e:5a:67:65:06:f6:
         3c:a9:10:47:e7:69:a6:25:a3:47:04:a3:8f:05:22:35:89:8e:
         7b:d6:db:6c:84:c0:91:08:61:06:f1:7e:c3:30:af:83:c1:76:
         33:67:b1:4d:c2:3c:eb:4a:53:a2:ba:20:e1:22:50:55:47:c5:
         ab:13:9d:17:3d:13:a1:4e:73:52:50:77:c9:97:f3:3b:e5:29:
         f0:17:5b:a5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDIiREMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
YWU3Y2M5YzEyM2VhNzVjNGFiZTQzYzYyZjAzMDcxOWQzOWVkOGQwHhcNMjMwODA3
MTkyNDE0WhcNMjUwODA4MTkyNDE0WjAzMTEwLwYDVQQDEyhkNTRkOTZlNzQwNWNi
ZDI3YWM0MzFiODNkMGFmNThmNDY2ODJhY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsW5niSUM1gkdpONJiLQiWLhFESheMQxfj8QwuTzAg3LsMOAB
HOPT7l1I9E8LwFjyQ+PHT4sWdqEFv4WFNNJhot/QScz5r9HE1ZzekjT7GCtM3Dl/
8lEZUlcsKuOdZ0TKvNXScS0BvxEw8DoYHMNTKNOPs6nAfAKbtgYZQW54pt9RKlAI
C9+68TkqEL14ASCsy49u0J44zxcqdhSWFfG1ZeAtwDETWJ5iYeIKEMax25z1KXz+
H23nZidYfYteXeF1Bji15vbOpkIfwSRPV3P3xXlp8fN9oIcSFpWRZwiRkT/aekEf
a6yKDLu4YAEEQKYX7w2cnlzfNtsBs3GWXzGilwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFH2bczoqCWcBW5Zmxvte9/EBoDbqMB8GA1UdIwQYMBaAFMDS5g8QoeAx5XGw
Shj16rZzvqNgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGRhZTdj
YzljMTIzZWE3NWM0YWJlNDNjNjJmMDMwNzE5ZDM5ZWQ4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2ZhY2EzZjktMWQ4ZS00ZWM1LWIwMmEtZTljYjFk
NDljNTljL2Q1NGQ5NmU3NDA1Y2JkMjdhYzQzMWI4M2QwYWY1OGY0NjY4MmFjYWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZmFjYTNmOS0xZDhlLTRlYzUtYjAyYS1lOWNi
MWQ0OWM1OWMvOGRhZTdjYzljMTIzZWE3NWM0YWJlNDNjNjJmMDMwNzE5ZDM5ZWQ4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC1HBTAPBAIAAjAJAwcAKAEAErAAMA0GCSqGSIb3DQEBCwUA
A4IBAQDF0S3gBdlGma7CWF4FiZXuiZVs0Cia/o53pIh0wjwX0j2RFQwqy5ORI/ux
tDnZprntvW7euhfq1nUTnjIFa6J//1TnBYXP489Wd6Zq7SWO1NFqzHa6JUp9Lcu3
0VAw4FIt0S+Q8ux38LpNAZNg+OXrCvV4h9Mr7spmvmwVdGp4sL6HU1n5/j59xLhE
kjF7ytYbBvgCKEuOqHPa3mFPITXkAzmraIjxZ33xltMvhtpeWmdlBvY8qRBH52mm
JaNHBKOPBSI1iY571ttshMCRCGEG8X7DMK+DwXYzZ7FNwjzrSlOiuiDhIlBVR8Wr
E50XPROhTnNSUHfJl/M75SnwF1ul
-----END CERTIFICATE-----