Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/9644acac10a09c07ccd2253818cec832cf7741dc.roa
File:                     9644acac10a09c07ccd2253818cec832cf7741dc.roa (raw, json)
Hash identifier:          +q9qUnR36BUMHoobqo+mCkJvHJhYJC8E+DPCVCwBc9E=
Subject key identifier:   54:D0:17:42:4F:45:22:32:AE:51:90:FF:2C:52:61:28:7C:20:F0:56
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       2148FA
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/9644acac10a09c07ccd2253818cec832cf7741dc.roa
Signing time:             Sun 16 Apr 2023 18:32:20 +0000
ROA not before:           Fri 14 Apr 2023 18:26:42 +0000
ROA not after:            Wed 16 Apr 2025 18:26:42 +0000
asID:                     272121
IP address blocks:        45.71.252.0/24 maxlen: 24
                          2803:2220::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181370 (0x2148fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Apr 14 18:26:42 2023 GMT
            Not After : Apr 16 18:26:42 2025 GMT
        Subject: CN=9644acac10a09c07ccd2253818cec832cf7741dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:cc:e3:11:61:0d:14:80:d7:3c:51:2b:f9:
                    25:e5:34:ba:2c:dd:80:07:a2:68:5d:a5:e9:68:e7:
                    df:5d:96:cf:63:d9:1b:a5:c6:e0:f8:73:dc:29:b5:
                    16:6d:22:f0:4b:5a:44:be:0c:5c:ee:1a:fd:54:1d:
                    0b:da:35:42:d0:c4:10:32:79:e4:8c:00:e3:f0:7f:
                    ed:f5:f6:fd:23:1f:ef:a5:f0:9f:d4:34:06:0f:20:
                    f1:8c:d7:ae:dd:fb:b8:6d:2b:9a:25:9a:6d:66:28:
                    b3:eb:1d:d7:4e:d2:f0:c8:9b:80:af:3b:93:eb:66:
                    f3:a2:fb:2f:de:8e:11:68:09:15:1e:c2:65:64:23:
                    c2:cb:fc:49:1e:6c:74:64:01:79:7e:86:35:49:6e:
                    af:d0:ed:bd:c2:28:15:e9:f6:31:3e:b3:7d:d3:be:
                    df:90:73:ba:11:89:6b:20:8c:bb:1d:ca:78:f9:6e:
                    0c:35:ab:83:e3:87:68:ed:53:a2:47:46:92:7b:5b:
                    fa:a9:c7:d8:ba:d8:76:23:07:d1:cc:89:3a:7a:ee:
                    07:86:17:99:c8:f6:d7:40:f7:3b:2b:8b:98:b7:b7:
                    b9:80:ef:60:80:01:1c:29:cb:b3:09:46:74:b3:05:
                    f2:82:f2:8f:b3:0b:ca:e0:4a:8f:e2:05:84:5d:b2:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:17:42:4F:45:22:32:AE:51:90:FF:2C:52:61:28:7C:20:F0:56
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/9644acac10a09c07ccd2253818cec832cf7741dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.252.0/24
                IPv6:
                  2803:2220::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:91:22:23:29:a7:b3:f5:68:47:de:97:8a:7f:cd:fb:d2:
         85:8c:6a:9c:dd:93:54:75:cb:f7:14:07:6a:3e:0b:15:e9:29:
         21:4e:1f:5c:7a:e8:66:ec:60:fb:8b:47:08:12:fe:ef:b8:73:
         d2:e6:78:94:ab:1e:43:b3:45:7f:fb:68:d1:79:88:24:4b:52:
         cc:eb:05:ad:07:1e:d1:3c:9e:5c:97:12:fb:88:bc:17:c2:03:
         b0:72:77:91:0c:03:9c:cc:a1:c4:b0:aa:75:fc:e7:ed:8b:de:
         9c:7f:6d:c5:77:07:f9:9a:76:54:26:7a:d4:40:47:a1:ae:6d:
         62:eb:7c:26:c0:ab:65:cd:fe:55:80:d1:97:ff:bd:35:82:bb:
         28:92:fc:53:56:03:14:ee:f3:ba:7e:98:79:99:67:e5:61:13:
         e5:bb:11:53:6b:5e:cd:9a:47:dc:51:77:d6:06:ec:a5:09:d5:
         0c:9a:d2:15:be:9f:cd:b7:af:24:3f:ab:b0:f1:b1:e8:42:81:
         65:b0:14:54:29:0b:e4:35:8f:15:32:04:96:d9:85:2c:f7:77:
         74:a2:c2:04:80:9d:59:c1:bb:b3:2a:67:25:6f:5c:7a:34:79:
         20:42:23:68:60:14:cc:97:90:0a:0a:1d:40:c4:36:5b:eb:f0:
         36:bb:12:8d
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDIUj6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
YzMzY2I3OWY2NWMyZTFhYzg1YWE1MjRmZDg0ZDc0ZThjY2EyYTcwHhcNMjMwNDE0
MTgyNjQyWhcNMjUwNDE2MTgyNjQyWjAzMTEwLwYDVQQDEyg5NjQ0YWNhYzEwYTA5
YzA3Y2NkMjI1MzgxOGNlYzgzMmNmNzc0MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq63M4xFhDRSA1zxRK/kl5TS6LN2AB6JoXaXpaOffXZbPY9kb
pcbg+HPcKbUWbSLwS1pEvgxc7hr9VB0L2jVC0MQQMnnkjADj8H/t9fb9Ix/vpfCf
1DQGDyDxjNeu3fu4bSuaJZptZiiz6x3XTtLwyJuArzuT62bzovsv3o4RaAkVHsJl
ZCPCy/xJHmx0ZAF5foY1SW6v0O29wigV6fYxPrN9077fkHO6EYlrIIy7Hcp4+W4M
NauD44do7VOiR0aSe1v6qcfYuth2IwfRzIk6eu4HhheZyPbXQPc7K4uYt7e5gO9g
gAEcKcuzCUZ0swXygvKPswvK4EqP4gWEXbK0WwIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFFTQF0JPRSIyrlGQ/yxSYSh8IPBWMB8GA1UdIwQYMBaAFAfCv4K4sqyYwHmL
sDAfVkkV0zA1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzhjMzNj
Yjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1OTdjNjYtZjBjYi00YmVjLTk2NzUtZjM0MzVk
YzU1ZDU3Lzk2NDRhY2FjMTBhMDljMDdjY2QyMjUzODE4Y2VjODMyY2Y3NzQxZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTU5N2M2Ni1mMGNiLTRiZWMtOTY3NS1mMzQz
NWRjNTVkNTcvNzhjMzNjYjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEAC1H/DAOBAIAAjAIAwYHKAMiIAAwDQYJKoZIhvcNAQELBQAD
ggEBAB/KkSIjKaez9WhH3peKf8370oWMapzdk1R1y/cUB2o+CxXpKSFOH1x66Gbs
YPuLRwgS/u+4c9LmeJSrHkOzRX/7aNF5iCRLUszrBa0HHtE8nlyXEvuIvBfCA7By
d5EMA5zMocSwqnX85+2L3px/bcV3B/madlQmetRAR6GubWLrfCbAq2XN/lWA0Zf/
vTWCuyiS/FNWAxTu87p+mHmZZ+VhE+W7EVNrXs2aR9xRd9YG7KUJ1Qya0hW+n823
ryQ/q7DxsehCgWWwFFQpC+Q1jxUyBJbZhSz3d3SiwgSAnVnBu7MqZyVvXHo0eSBC
I2hgFMyXkAoKHUDENlvr8Da7Eo0=
-----END CERTIFICATE-----