Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82156cc1-f97a-4725-8c17-32c1581406cc/8678df0d6d9e70491c00ef829b25e1827f301a9a.roa
File:                     8678df0d6d9e70491c00ef829b25e1827f301a9a.roa (raw, json)
Hash identifier:          Z42TaJXM7fmAAgCOIe6L+zOtQkD+hrU7lPntwOOrnuw=
Subject key identifier:   0F:D4:34:8B:44:F0:CE:50:0F:40:42:56:61:51:1C:82:0D:3B:64:51
Certificate issuer:       /CN=666a3e187cae8a9e834b6869fd063ca41ca9b988
Certificate serial:       1E5FCD
Authority key identifier: 1E:FB:21:62:CD:D7:8D:59:B4:32:4E:D3:13:E4:5B:16:3C:18:D2:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/666a3e187cae8a9e834b6869fd063ca41ca9b988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82156cc1-f97a-4725-8c17-32c1581406cc/8678df0d6d9e70491c00ef829b25e1827f301a9a.roa
Signing time:             Wed 14 Jun 2023 08:30:06 +0000
ROA not before:           Tue 13 Jun 2023 08:30:06 +0000
ROA not after:            Thu 12 Jun 2025 08:30:06 +0000
asID:                     269797
IP address blocks:        45.183.184.0/22 maxlen: 24
                          2803:b60::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990605 (0x1e5fcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666a3e187cae8a9e834b6869fd063ca41ca9b988
        Validity
            Not Before: Jun 13 08:30:06 2023 GMT
            Not After : Jun 12 08:30:06 2025 GMT
        Subject: CN=8678df0d6d9e70491c00ef829b25e1827f301a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:32:5a:19:b8:85:05:96:dd:7a:c4:3f:5a:
                    72:fc:2d:af:b2:dd:90:7f:86:57:39:e3:f2:61:1d:
                    84:75:c0:22:b6:0a:a2:18:10:8c:e3:e3:ab:15:5e:
                    50:c0:89:08:fe:27:2e:9e:64:2c:f3:76:e9:6c:51:
                    b2:6d:f5:08:09:b4:0f:e7:ff:9b:d8:e6:c9:9c:14:
                    1d:92:b8:3a:46:3b:c8:d7:bc:fe:6f:4d:f4:91:de:
                    16:40:09:6d:68:56:36:3f:1f:75:21:3c:56:f8:c0:
                    90:b8:a1:bd:38:ab:4d:f6:1a:17:02:28:3a:79:a2:
                    67:a6:a5:28:87:85:4d:d3:a7:85:8f:34:e5:1d:1b:
                    92:58:6c:22:6a:34:1b:e3:e0:be:db:83:67:f0:ae:
                    24:b1:b9:f0:a3:2f:e7:9f:4d:2c:37:19:2b:43:ec:
                    a5:20:29:96:a7:a1:33:45:5d:49:2e:48:0f:5a:44:
                    fc:7c:76:bf:50:9e:46:65:78:fc:1e:32:b2:de:e9:
                    0e:31:48:ab:7c:2e:9e:63:ad:5d:18:05:09:48:80:
                    ba:cb:84:44:e0:9b:6f:e0:c9:22:cd:18:e3:ee:5e:
                    d3:9b:4c:50:12:72:56:2d:33:f5:be:85:f2:9f:d3:
                    40:0e:36:1a:97:3e:a9:b4:b5:67:18:bb:8c:eb:ef:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D4:34:8B:44:F0:CE:50:0F:40:42:56:61:51:1C:82:0D:3B:64:51
            X509v3 Authority Key Identifier:
                keyid:1E:FB:21:62:CD:D7:8D:59:B4:32:4E:D3:13:E4:5B:16:3C:18:D2:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/666a3e187cae8a9e834b6869fd063ca41ca9b988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82156cc1-f97a-4725-8c17-32c1581406cc/8678df0d6d9e70491c00ef829b25e1827f301a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82156cc1-f97a-4725-8c17-32c1581406cc/666a3e187cae8a9e834b6869fd063ca41ca9b988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.184.0/22
                IPv6:
                  2803:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:31:dd:2b:8c:16:0e:00:e1:3f:77:bd:bb:ca:17:cc:d9:
         43:ae:29:5e:9e:9e:59:18:34:5e:3c:d9:f8:f6:03:40:8b:82:
         42:94:ee:c2:4c:8c:84:ed:c1:e9:cb:b6:9d:bd:b2:a5:1c:82:
         2c:eb:ee:3c:4e:b5:66:39:fa:b8:04:d5:43:f2:86:ad:ee:5e:
         a3:eb:d0:6d:c3:58:72:06:a6:bc:9b:d8:9f:da:c1:b4:bd:ae:
         25:43:fd:e2:46:d9:3b:bf:12:e1:90:2b:0b:58:44:67:dd:69:
         e5:55:23:ef:ee:79:0d:85:1a:ca:8d:cc:7a:39:65:4c:02:b3:
         89:b3:66:05:1d:d1:0e:27:56:d4:ba:83:34:52:7d:2d:e6:ec:
         cb:21:38:10:ae:ac:30:14:59:98:69:d5:78:7e:49:ec:f7:4c:
         ce:08:4b:8a:98:c8:4c:e8:81:fb:c6:4c:cf:d3:e6:6c:d5:bc:
         85:b7:8b:f4:7c:0f:a7:19:97:dd:16:a7:39:9c:72:32:31:30:
         25:d6:31:3b:fe:51:3a:46:32:6e:66:a9:2d:b1:1a:8f:04:c6:
         37:eb:07:2a:7a:ec:dc:5a:d3:6c:e5:58:dc:93:af:bb:f0:ae:
         87:a8:46:83:99:8e:a4:53:5e:25:1a:02:1d:e1:f6:24:72:1c:
         fa:df:06:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHl/NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY2
NmEzZTE4N2NhZThhOWU4MzRiNjg2OWZkMDYzY2E0MWNhOWI5ODgwHhcNMjMwNjEz
MDgzMDA2WhcNMjUwNjEyMDgzMDA2WjAzMTEwLwYDVQQDEyg4Njc4ZGYwZDZkOWU3
MDQ5MWMwMGVmODI5YjI1ZTE4MjdmMzAxYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlU0yWhm4hQWW3XrEP1py/C2vst2Qf4ZXOePyYR2EdcAitgqi
GBCM4+OrFV5QwIkI/icunmQs83bpbFGybfUICbQP5/+b2ObJnBQdkrg6RjvI17z+
b030kd4WQAltaFY2Px91ITxW+MCQuKG9OKtN9hoXAig6eaJnpqUoh4VN06eFjzTl
HRuSWGwiajQb4+C+24Nn8K4ksbnwoy/nn00sNxkrQ+ylICmWp6EzRV1JLkgPWkT8
fHa/UJ5GZXj8HjKy3ukOMUirfC6eY61dGAUJSIC6y4RE4Jtv4MkizRjj7l7Tm0xQ
EnJWLTP1voXyn9NADjYalz6ptLVnGLuM6+/k4QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFA/UNItE8M5QD0BCVmFRHIINO2RRMB8GA1UdIwQYMBaAFB77IWLN141ZtDJO
0xPkWxY8GNJQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjY2YTNl
MTg3Y2FlOGE5ZTgzNGI2ODY5ZmQwNjNjYTQxY2E5Yjk4OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODIxNTZjYzEtZjk3YS00NzI1LThjMTctMzJjMTU4
MTQwNmNjLzg2NzhkZjBkNmQ5ZTcwNDkxYzAwZWY4MjliMjVlMTgyN2YzMDFhOWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MjE1NmNjMS1mOTdhLTQ3MjUtOGMxNy0zMmMx
NTgxNDA2Y2MvNjY2YTNlMTg3Y2FlOGE5ZTgzNGI2ODY5ZmQwNjNjYTQxY2E5Yjk4
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi23uDANBAIAAjAHAwUAKAMLYDANBgkqhkiG9w0BAQsFAAOC
AQEAS6Ux3SuMFg4A4T93vbvKF8zZQ64pXp6eWRg0XjzZ+PYDQIuCQpTuwkyMhO3B
6cu2nb2ypRyCLOvuPE61Zjn6uATVQ/KGre5eo+vQbcNYcgamvJvYn9rBtL2uJUP9
4kbZO78S4ZArC1hEZ91p5VUj7+55DYUayo3MejllTAKzibNmBR3RDidW1LqDNFJ9
LebsyyE4EK6sMBRZmGnVeH5J7PdMzghLipjITOiB+8ZMz9PmbNW8hbeL9HwPpxmX
3RanOZxyMjEwJdYxO/5ROkYybmapLbEajwTGN+sHKnrs3FrTbOVY3JOvu/Cuh6hG
g5mOpFNeJRoCHeH2JHIc+t8GhA==
-----END CERTIFICATE-----