Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/dc69abf87dd05d522cd2d24c088c5a9f315dfa83.roa
File:                     dc69abf87dd05d522cd2d24c088c5a9f315dfa83.roa (raw, json)
Hash identifier:          hxinLdJ70Q6SFXB3TI1haqDDz5rbm303OwfRkOXGKQ0=
Subject key identifier:   0C:87:D7:B5:CF:21:7F:B5:D4:FF:CF:8D:F3:43:40:4E:29:F1:DD:3E
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       2151E0
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/dc69abf87dd05d522cd2d24c088c5a9f315dfa83.roa
Signing time:             Sun 16 Apr 2023 18:33:33 +0000
ROA not before:           Fri 14 Apr 2023 18:26:42 +0000
ROA not after:            Wed 16 Apr 2025 18:26:42 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183648 (0x2151e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Apr 14 18:26:42 2023 GMT
            Not After : Apr 16 18:26:42 2025 GMT
        Subject: CN=dc69abf87dd05d522cd2d24c088c5a9f315dfa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:d5:85:62:66:ca:20:d8:d6:98:29:30:47:
                    16:8b:7e:89:d5:08:86:c7:21:d9:e0:5d:02:40:87:
                    e5:ec:34:e5:08:e0:b0:54:61:cf:59:3d:dd:c4:a2:
                    90:18:09:94:83:62:ab:bd:d3:00:e9:1e:47:40:91:
                    c9:2f:a9:32:de:24:c4:d7:cd:07:ca:87:c2:80:ca:
                    98:59:bf:52:f3:56:2c:aa:27:55:d5:e1:08:ed:f8:
                    b5:ab:cf:61:0f:42:88:0e:fe:31:10:ef:79:71:a6:
                    ea:b8:b2:18:a4:0b:69:cf:1f:1f:c4:44:fe:2b:52:
                    75:f9:27:0f:40:40:ad:c1:d5:c0:ea:d8:51:47:2a:
                    69:8f:45:cf:8b:f7:e3:74:30:dd:c2:60:1f:fd:14:
                    c0:3c:87:56:a3:c1:f8:f3:1e:17:de:29:5d:3f:05:
                    30:e7:aa:38:fd:6d:62:8a:d8:58:4f:d1:c4:f3:1f:
                    e6:1d:42:33:7a:a9:d0:a9:cc:d6:dd:4e:9b:03:3a:
                    3f:72:6b:7e:c5:f3:ff:65:f6:12:18:b1:30:8c:4b:
                    54:82:98:60:fa:75:03:09:a2:b7:ec:9e:d3:67:c0:
                    49:c0:94:d4:93:bf:49:77:12:d5:ce:01:7a:a7:2e:
                    4c:52:8e:27:dd:8f:55:88:5a:ff:ca:17:ba:8b:f8:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:D7:B5:CF:21:7F:B5:D4:FF:CF:8D:F3:43:40:4E:29:F1:DD:3E
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/dc69abf87dd05d522cd2d24c088c5a9f315dfa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:0d:3c:76:50:ef:e8:ea:11:64:14:84:19:9a:f0:8a:63:
         98:80:49:8f:ba:f5:9f:b8:89:f4:39:30:6c:31:31:48:01:cb:
         89:51:13:ea:99:bb:f2:e3:0a:c6:6d:85:db:d4:90:6f:83:7b:
         aa:79:91:0e:8d:06:63:71:dd:a0:35:30:82:79:68:42:7a:ce:
         ba:7e:2a:3e:0e:d6:9f:ed:68:ba:42:c5:7e:0c:86:04:b3:67:
         00:66:99:02:16:2a:0e:0a:e0:c7:25:15:3c:f2:69:ba:2a:35:
         c6:03:5c:35:17:ba:7e:8b:de:3c:57:53:50:70:30:58:24:6e:
         9a:c2:7a:d5:a0:6a:f1:21:9b:38:f7:f7:57:f6:56:be:c7:d2:
         ed:5f:85:67:01:71:49:63:57:41:29:12:56:e5:4a:7b:43:62:
         d1:10:11:37:9a:1a:57:ad:e7:36:1e:43:f4:ae:02:48:64:c9:
         e0:1a:09:19:93:5c:f8:e5:78:bd:e7:43:3c:3e:f9:f3:68:7f:
         1c:42:3d:7c:19:56:6f:e7:c1:da:0e:f5:3a:4c:b6:72:f6:f7:
         7f:ad:dc:5d:b0:49:0e:f5:cd:b9:cb:74:5d:ce:f5:e4:98:79:
         50:a3:64:b1:3f:dc:9f:49:d9:c5:7a:10:cf:e1:72:af:09:e6:
         8d:9d:7d:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIVHgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
YzMzY2I3OWY2NWMyZTFhYzg1YWE1MjRmZDg0ZDc0ZThjY2EyYTcwHhcNMjMwNDE0
MTgyNjQyWhcNMjUwNDE2MTgyNjQyWjAzMTEwLwYDVQQDEyhkYzY5YWJmODdkZDA1
ZDUyMmNkMmQyNGMwODhjNWE5ZjMxNWRmYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhj3VhWJmyiDY1pgpMEcWi36J1QiGxyHZ4F0CQIfl7DTlCOCw
VGHPWT3dxKKQGAmUg2KrvdMA6R5HQJHJL6ky3iTE180HyofCgMqYWb9S81YsqidV
1eEI7fi1q89hD0KIDv4xEO95cabquLIYpAtpzx8fxET+K1J1+ScPQECtwdXA6thR
Ryppj0XPi/fjdDDdwmAf/RTAPIdWo8H48x4X3ildPwUw56o4/W1iithYT9HE8x/m
HUIzeqnQqczW3U6bAzo/cmt+xfP/ZfYSGLEwjEtUgphg+nUDCaK37J7TZ8BJwJTU
k79JdxLVzgF6py5MUo4n3Y9ViFr/yhe6i/j/DwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAyH17XPIX+11P/PjfNDQE4p8d0+MB8GA1UdIwQYMBaAFAfCv4K4sqyYwHmL
sDAfVkkV0zA1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzhjMzNj
Yjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU1OTdjNjYtZjBjYi00YmVjLTk2NzUtZjM0MzVk
YzU1ZDU3L2RjNjlhYmY4N2RkMDVkNTIyY2QyZDI0YzA4OGM1YTlmMzE1ZGZhODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTU5N2M2Ni1mMGNiLTRiZWMtOTY3NS1mMzQz
NWRjNTVkNTcvNzhjMzNjYjc5ZjY1YzJlMWFjODVhYTUyNGZkODRkNzRlOGNjYTJh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS1H/jANBgkqhkiG9w0BAQsFAAOCAQEAa5INPHZQ7+jqEWQU
hBma8IpjmIBJj7r1n7iJ9DkwbDExSAHLiVET6pm78uMKxm2F29SQb4N7qnmRDo0G
Y3HdoDUwgnloQnrOun4qPg7Wn+1oukLFfgyGBLNnAGaZAhYqDgrgxyUVPPJpuio1
xgNcNRe6fovePFdTUHAwWCRumsJ61aBq8SGbOPf3V/ZWvsfS7V+FZwFxSWNXQSkS
VuVKe0Ni0RARN5oaV63nNh5D9K4CSGTJ4BoJGZNc+OV4vedDPD7582h/HEI9fBlW
b+fB2g71Oky2cvb3f63cXbBJDvXNuct0Xc715Jh5UKNksT/cn0nZxXoQz+Fyrwnm
jZ19iw==
-----END CERTIFICATE-----