Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/64aff6d0f6d37383d54978f5e72b1ddb1622cf07.roa
File:                     64aff6d0f6d37383d54978f5e72b1ddb1622cf07.roa (raw, json)
Hash identifier:          IQRPDhCtQ5BAgc6+nTKzUUO3xFq0XytQMwOfj8fHHgM=
Subject key identifier:   62:2C:42:82:05:19:FA:21:E0:94:28:91:1C:8E:7E:66:B9:4F:D4:20
Certificate issuer:       /CN=713466eb5a3bd118b72f0078eea3bb990f763363
Certificate serial:       24FE1F
Authority key identifier: A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/64aff6d0f6d37383d54978f5e72b1ddb1622cf07.roa
Signing time:             Mon 22 Jan 2024 18:36:55 +0000
ROA not before:           Mon 22 Jan 2024 18:36:54 +0000
ROA not after:            Thu 22 Jan 2026 18:36:54 +0000
asID:                     267829
IP address blocks:        45.179.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424351 (0x24fe1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713466eb5a3bd118b72f0078eea3bb990f763363
        Validity
            Not Before: Jan 22 18:36:54 2024 GMT
            Not After : Jan 22 18:36:54 2026 GMT
        Subject: CN=64aff6d0f6d37383d54978f5e72b1ddb1622cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e3:f4:6b:14:9d:32:5a:06:37:05:ab:a5:b6:
                    43:df:b9:4e:82:ae:3e:a7:14:e6:d4:9d:7e:be:a9:
                    ad:70:c1:f6:4b:0f:35:d6:52:17:f3:86:f9:b4:c7:
                    9d:8c:63:67:8b:18:8e:02:dd:9f:98:eb:24:9e:6a:
                    01:87:ec:ef:92:2d:96:15:84:f8:2c:cf:31:0a:f9:
                    fb:e4:52:d3:a0:c8:03:3d:8e:92:a0:5f:be:8e:dd:
                    ad:ad:ff:c4:18:41:01:2b:c5:cd:9f:2f:8b:78:31:
                    a7:63:d7:46:ca:a2:26:79:76:91:02:56:06:34:73:
                    42:e6:14:02:19:5a:98:c4:d7:7c:7d:98:71:9d:15:
                    90:93:55:28:49:22:8a:e1:a4:e9:3d:cf:29:a7:24:
                    b9:59:81:16:48:21:07:fb:18:2a:71:40:5b:46:60:
                    5e:d2:69:66:93:5d:11:cd:1f:03:fa:a5:da:0b:8e:
                    81:b2:94:50:1c:6b:2c:25:47:99:cf:fb:04:68:03:
                    64:11:94:38:70:33:43:dd:a2:7e:b5:6d:23:81:ea:
                    5b:81:5f:73:80:a5:2a:14:27:d2:5c:1d:47:bc:32:
                    21:1a:7f:ac:ff:e8:2a:9d:2c:b0:6c:c2:2b:77:ff:
                    b0:1c:01:92:1a:6f:83:dc:b0:51:b4:8b:a1:19:c7:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2C:42:82:05:19:FA:21:E0:94:28:91:1C:8E:7E:66:B9:4F:D4:20
            X509v3 Authority Key Identifier:
                keyid:A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/64aff6d0f6d37383d54978f5e72b1ddb1622cf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:69:a9:96:cc:ea:17:5c:b4:92:39:9b:98:b2:05:ca:2b:00:
         62:92:23:a5:af:27:64:4f:0c:2f:b0:e1:82:04:fb:54:d5:56:
         93:f8:c9:be:28:f7:07:f8:bd:ec:d2:4e:ee:2b:48:e3:8f:54:
         01:8e:ea:fd:bf:53:4f:bf:7f:45:08:8b:db:dd:dc:f9:d4:63:
         2c:09:f9:94:9f:17:4a:89:54:65:2a:65:4f:2b:90:90:e9:23:
         04:f5:7d:74:01:ed:dd:bb:1c:9a:d9:71:41:da:5c:83:89:2e:
         8c:80:ee:2f:7e:c9:14:5f:2d:87:f1:f2:aa:34:bd:ef:c1:9e:
         79:ac:fc:9f:41:e8:68:b3:b4:5e:bd:dd:91:40:c2:26:e2:e3:
         35:b1:e5:e1:d1:f2:f2:4d:e3:67:18:88:26:90:2b:55:b6:d9:
         04:f5:61:c4:1c:1f:7b:06:ab:6b:3e:91:8b:bd:ec:ce:95:d4:
         92:6c:3b:35:96:0f:f1:b5:e8:83:74:ba:d9:27:ca:41:fd:f9:
         8d:59:e9:d6:e4:db:aa:7c:a0:a4:26:71:52:0d:11:cc:37:3f:
         f0:0c:a0:8a:b9:60:3b:a5:83:7b:ce:ec:9d:9c:3f:f7:34:2e:
         ee:a5:2c:41:ea:6f:7a:65:0f:93:57:6c:9a:60:d0:37:c4:96:
         f9:62:f5:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJP4fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
MzQ2NmViNWEzYmQxMThiNzJmMDA3OGVlYTNiYjk5MGY3NjMzNjMwHhcNMjQwMTIy
MTgzNjU0WhcNMjYwMTIyMTgzNjU0WjAzMTEwLwYDVQQDEyg2NGFmZjZkMGY2ZDM3
MzgzZDU0OTc4ZjVlNzJiMWRkYjE2MjJjZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjOP0axSdMloGNwWrpbZD37lOgq4+pxTm1J1+vqmtcMH2Sw81
1lIX84b5tMedjGNnixiOAt2fmOsknmoBh+zvki2WFYT4LM8xCvn75FLToMgDPY6S
oF++jt2trf/EGEEBK8XNny+LeDGnY9dGyqImeXaRAlYGNHNC5hQCGVqYxNd8fZhx
nRWQk1UoSSKK4aTpPc8ppyS5WYEWSCEH+xgqcUBbRmBe0mlmk10RzR8D+qXaC46B
spRQHGssJUeZz/sEaANkEZQ4cDND3aJ+tW0jgepbgV9zgKUqFCfSXB1HvDIhGn+s
/+gqnSywbMIrd/+wHAGSGm+D3LBRtIuhGceRLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGIsQoIFGfoh4JQokRyOfma5T9QgMB8GA1UdIwQYMBaAFKA3yoBUiJ7dJT8U
SQpNmB6zU9gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzEzNDY2
ZWI1YTNiZDExOGI3MmYwMDc4ZWVhM2JiOTkwZjc2MzM2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY5ZTVmYjgtOGIyZi00YWJhLWI1MjMtMmY1OTAw
Y2JjNGU4LzY0YWZmNmQwZjZkMzczODNkNTQ5NzhmNWU3MmIxZGRiMTYyMmNmMDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjllNWZiOC04YjJmLTRhYmEtYjUyMy0yZjU5
MDBjYmM0ZTgvNzEzNDY2ZWI1YTNiZDExOGI3MmYwMDc4ZWVhM2JiOTkwZjc2MzM2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2z/jANBgkqhkiG9w0BAQsFAAOCAQEAEWmplszqF1y0kjmb
mLIFyisAYpIjpa8nZE8ML7DhggT7VNVWk/jJvij3B/i97NJO7itI449UAY7q/b9T
T79/RQiL293c+dRjLAn5lJ8XSolUZSplTyuQkOkjBPV9dAHt3bscmtlxQdpcg4ku
jIDuL37JFF8th/HyqjS978Geeaz8n0HoaLO0Xr3dkUDCJuLjNbHl4dHy8k3jZxiI
JpArVbbZBPVhxBwfewaraz6Ri73szpXUkmw7NZYP8bXog3S62SfKQf35jVnp1uTb
qnygpCZxUg0RzDc/8AygirlgO6WDe87snZw/9zQu7qUsQepvemUPk1dsmmDQN8SW
+WL1/g==
-----END CERTIFICATE-----