Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84abd501-7dc8-4423-960e-43a73e4a1a28/92f2264acb8ed81495fc5d1c2fcda2b59a8c1470.roa
File:                     92f2264acb8ed81495fc5d1c2fcda2b59a8c1470.roa (raw, json)
Hash identifier:          bBYwZsKwznWXyqfEcml5LPnYnhmoyzKs0qcJqy5Q1ZY=
Subject key identifier:   3B:AC:AC:38:77:88:AB:A3:39:2A:7E:7E:9C:DE:0E:37:90:87:58:DB
Certificate issuer:       /CN=e796ff993a6a82de09ad0c719dd17e5e74f3ec44
Certificate serial:       05D5BC
Authority key identifier: 69:42:CC:1D:DB:1A:3C:80:C6:8C:59:29:60:B5:8C:7B:C0:A0:0D:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e796ff993a6a82de09ad0c719dd17e5e74f3ec44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84abd501-7dc8-4423-960e-43a73e4a1a28/92f2264acb8ed81495fc5d1c2fcda2b59a8c1470.roa
Signing time:             Fri 29 Dec 2023 21:16:40 +0000
ROA not before:           Fri 29 Dec 2023 21:16:40 +0000
ROA not after:            Mon 29 Dec 2025 21:16:40 +0000
asID:                     20473
IP address blocks:        45.174.104.0/22 maxlen: 24
                          2803:2860::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382396 (0x5d5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ff993a6a82de09ad0c719dd17e5e74f3ec44
        Validity
            Not Before: Dec 29 21:16:40 2023 GMT
            Not After : Dec 29 21:16:40 2025 GMT
        Subject: CN=92f2264acb8ed81495fc5d1c2fcda2b59a8c1470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:76:93:9d:4c:f3:9c:cf:d7:cc:a3:74:c5:
                    dc:c4:39:91:50:e4:2d:66:58:9f:a0:9e:2b:5b:0d:
                    0d:c7:df:bf:f1:13:5b:03:c5:0a:6b:0f:31:40:62:
                    55:2d:13:b7:63:60:15:7e:29:8e:6f:42:fc:18:4c:
                    d5:f6:4d:e5:1f:72:47:73:ac:e5:3e:ff:03:5f:ab:
                    98:93:fc:83:30:4e:3f:a4:46:35:44:3a:27:69:bd:
                    61:f8:f2:6d:d1:94:ba:11:95:88:1c:75:a2:d1:20:
                    0a:7d:78:ba:f9:bf:e2:4d:20:2b:91:00:28:84:44:
                    7a:aa:67:21:7c:6b:80:82:0c:69:5e:d3:6d:9b:10:
                    27:79:ea:45:bf:09:6e:f8:53:52:a8:9c:49:53:bc:
                    47:ad:31:cc:87:92:f7:c4:91:9d:92:61:52:69:7b:
                    3a:52:85:1d:1d:27:4c:49:14:0e:7c:ec:e8:bc:3e:
                    03:3e:db:78:2b:22:ed:73:58:f0:6d:a9:2c:36:af:
                    a7:28:0f:ff:45:39:e1:e7:13:26:38:b8:d6:a4:99:
                    22:6f:6d:81:19:81:ff:87:05:34:68:f4:86:f7:07:
                    91:32:03:c4:ab:44:56:ac:14:4b:2c:7a:e0:98:e1:
                    7b:88:68:c5:44:0f:6b:c9:f5:c7:50:48:8f:83:01:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:AC:38:77:88:AB:A3:39:2A:7E:7E:9C:DE:0E:37:90:87:58:DB
            X509v3 Authority Key Identifier:
                keyid:69:42:CC:1D:DB:1A:3C:80:C6:8C:59:29:60:B5:8C:7B:C0:A0:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e796ff993a6a82de09ad0c719dd17e5e74f3ec44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84abd501-7dc8-4423-960e-43a73e4a1a28/92f2264acb8ed81495fc5d1c2fcda2b59a8c1470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84abd501-7dc8-4423-960e-43a73e4a1a28/e796ff993a6a82de09ad0c719dd17e5e74f3ec44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.104.0/22
                IPv6:
                  2803:2860::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:fb:97:27:22:cf:56:b9:27:3e:ba:4e:93:8b:ce:d4:59:
         e4:87:4a:76:f6:a5:52:78:39:6d:ba:ab:85:05:b9:54:5c:c0:
         e9:2f:95:a1:16:c4:ce:f3:07:6d:80:fd:d6:53:63:2d:93:01:
         eb:8a:94:77:f2:a2:f8:93:cb:02:27:d6:c3:13:e6:72:44:84:
         fc:97:b9:3b:20:d2:14:f5:98:03:d4:c7:eb:b4:65:21:56:29:
         1d:2c:73:ff:3b:3d:b9:e7:e0:a4:c7:73:07:a3:d6:bb:7b:34:
         0a:4e:a1:ee:9e:f6:65:03:0f:68:c7:56:1c:41:a0:d2:6e:88:
         f5:28:82:18:c4:bb:9b:eb:16:21:5e:48:67:02:53:9d:a1:1a:
         f9:7d:81:78:f1:39:41:2a:b0:f5:f8:5f:c7:b0:7d:5e:c4:a9:
         c3:37:82:1c:60:4b:fa:0a:00:94:69:83:f4:bf:1d:0f:b1:f3:
         b3:e3:f7:f6:43:07:f6:16:d9:6f:9a:0e:29:ad:b9:c8:91:f3:
         a7:60:b8:66:89:2f:c3:b8:21:07:2b:df:18:63:91:79:60:48:
         90:2f:f4:b3:b7:b6:18:e9:ae:6e:30:22:75:8a:33:75:d1:76:
         34:4f:4e:d3:e4:12:3e:34:a1:e7:fd:ad:cf:d6:1d:09:af:0d:
         db:bf:58:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBdW8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU3
OTZmZjk5M2E2YTgyZGUwOWFkMGM3MTlkZDE3ZTVlNzRmM2VjNDQwHhcNMjMxMjI5
MjExNjQwWhcNMjUxMjI5MjExNjQwWjAzMTEwLwYDVQQDEyg5MmYyMjY0YWNiOGVk
ODE0OTVmYzVkMWMyZmNkYTJiNTlhOGMxNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4uJ2k51M85zP18yjdMXcxDmRUOQtZlifoJ4rWw0Nx9+/8RNb
A8UKaw8xQGJVLRO3Y2AVfimOb0L8GEzV9k3lH3JHc6zlPv8DX6uYk/yDME4/pEY1
RDonab1h+PJt0ZS6EZWIHHWi0SAKfXi6+b/iTSArkQAohER6qmchfGuAggxpXtNt
mxAneepFvwlu+FNSqJxJU7xHrTHMh5L3xJGdkmFSaXs6UoUdHSdMSRQOfOzovD4D
Ptt4KyLtc1jwbaksNq+nKA//RTnh5xMmOLjWpJkib22BGYH/hwU0aPSG9weRMgPE
q0RWrBRLLHrgmOF7iGjFRA9ryfXHUEiPgwGOiwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDusrDh3iKujOSp+fpzeDjeQh1jbMB8GA1UdIwQYMBaAFGlCzB3bGjyAxoxZ
KWC1jHvAoA0oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTc5NmZm
OTkzYTZhODJkZTA5YWQwYzcxOWRkMTdlNWU3NGYzZWM0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRhYmQ1MDEtN2RjOC00NDIzLTk2MGUtNDNhNzNl
NGExYTI4LzkyZjIyNjRhY2I4ZWQ4MTQ5NWZjNWQxYzJmY2RhMmI1OWE4YzE0NzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGFiZDUwMS03ZGM4LTQ0MjMtOTYwZS00M2E3
M2U0YTFhMjgvZTc5NmZmOTkzYTZhODJkZTA5YWQwYzcxOWRkMTdlNWU3NGYzZWM0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2uaDANBAIAAjAHAwUAKAMoYDANBgkqhkiG9w0BAQsFAAOC
AQEALvz7lyciz1a5Jz66TpOLztRZ5IdKdvalUng5bbqrhQW5VFzA6S+VoRbEzvMH
bYD91lNjLZMB64qUd/Ki+JPLAifWwxPmckSE/Je5OyDSFPWYA9TH67RlIVYpHSxz
/zs9uefgpMdzB6PWu3s0Ck6h7p72ZQMPaMdWHEGg0m6I9SiCGMS7m+sWIV5IZwJT
naEa+X2BePE5QSqw9fhfx7B9XsSpwzeCHGBL+goAlGmD9L8dD7Hzs+P39kMH9hbZ
b5oOKa25yJHzp2C4Zokvw7ghByvfGGOReWBIkC/0s7e2GOmubjAidYozddF2NE9O
0+QSPjSh5/2tz9YdCa8N279Y+g==
-----END CERTIFICATE-----