Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/e914ee4552716b6be4445b8f883cbded5e820220.roa
File:                     e914ee4552716b6be4445b8f883cbded5e820220.roa (raw, json)
Hash identifier:          dvRKUclRU68Cht1pHvE54KK0mu/VJSQ23tH3fSrmbdY=
Subject key identifier:   D3:32:62:6F:8C:E9:4E:8F:5C:3F:66:3A:2E:E8:26:33:69:BC:7F:00
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       247A3E
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/e914ee4552716b6be4445b8f883cbded5e820220.roa
Signing time:             Sun 12 Nov 2023 14:05:56 +0000
ROA not before:           Sun 12 Nov 2023 14:05:56 +0000
ROA not after:            Wed 12 Nov 2025 14:05:56 +0000
asID:                     263779
IP address blocks:        200.107.82.0/23 maxlen: 24
                          45.231.54.0/24 maxlen: 24
                          200.10.176.0/23 maxlen: 24
                          2801:1d:a004::/48 maxlen: 48
                          2001:13c7:7004::/48 maxlen: 64
                          2801:1d:a001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390590 (0x247a3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Nov 12 14:05:56 2023 GMT
            Not After : Nov 12 14:05:56 2025 GMT
        Subject: CN=e914ee4552716b6be4445b8f883cbded5e820220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:48:d9:1a:05:72:cd:a2:b3:3e:04:fe:b4:
                    f5:26:55:de:a4:15:45:52:e1:68:63:10:c4:76:84:
                    79:64:30:51:0b:7b:53:d5:3f:fb:ee:86:8d:27:cc:
                    38:8d:e4:0f:fb:a1:41:99:98:68:bd:11:72:b2:8c:
                    96:af:0e:54:ee:b7:44:80:01:66:f0:8d:9d:e7:66:
                    22:4e:0a:11:8b:52:fb:24:a7:5c:ff:e4:bc:2b:ab:
                    5d:52:f1:1a:53:d0:d2:5f:21:f5:86:cc:9d:63:b7:
                    8f:56:9a:9c:90:28:06:73:f8:3b:0d:ec:76:31:c3:
                    47:2d:df:f6:af:26:6f:81:d5:d2:9f:de:d0:1c:aa:
                    fa:a0:15:d2:4c:c3:6c:ab:50:89:cf:6d:03:5b:6f:
                    7c:c6:a8:f8:12:40:31:4b:42:a2:ad:7a:bc:8d:84:
                    b0:f4:33:43:1d:05:a3:c2:2c:f7:59:3c:dd:b1:ff:
                    02:fd:01:83:c2:63:ab:ec:0d:cd:a1:14:c4:f9:b2:
                    14:65:50:af:5a:10:25:79:5a:ad:ee:f7:bf:ae:58:
                    44:fd:60:0e:a4:b3:1f:e7:cf:af:0c:89:01:f6:ea:
                    ac:4a:5b:7d:5b:d3:ef:a2:cd:ce:0e:9e:ba:33:9b:
                    f7:7a:4c:7f:fb:ba:4d:12:ca:81:a8:41:04:b4:32:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:62:6F:8C:E9:4E:8F:5C:3F:66:3A:2E:E8:26:33:69:BC:7F:00
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/e914ee4552716b6be4445b8f883cbded5e820220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24
                  200.10.176.0/23
                  200.107.82.0/23
                IPv6:
                  2001:13c7:7004::/48
                  2801:1d:a001::/48
                  2801:1d:a004::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:b9:9f:4a:3f:c6:eb:21:f0:b4:79:b6:83:7c:d2:52:da:
         bf:4c:2b:5c:a6:64:28:de:9f:a4:a9:68:61:14:19:e7:9e:98:
         85:c9:54:7c:d5:cd:36:4f:32:3e:31:58:aa:4a:47:4c:5a:2a:
         5d:a3:42:36:de:5f:63:56:65:19:39:14:a3:81:56:d8:5d:2f:
         78:2d:cb:78:97:bf:6b:9f:90:6a:e7:cc:03:3c:dc:29:16:7c:
         8e:f9:19:5d:fe:b5:08:bb:c8:07:18:09:04:59:ce:76:a0:9f:
         c8:81:2c:98:fb:80:bd:6a:c7:05:67:80:8f:f1:6f:2c:94:9c:
         30:45:11:35:17:01:1a:4e:c9:09:dc:5a:8d:65:cc:39:88:ca:
         5b:1f:24:3f:b0:10:81:b7:2b:9d:de:ce:05:af:4a:46:dc:43:
         4a:94:32:43:cf:41:c9:bc:29:f5:be:8e:38:5a:c7:17:48:7e:
         a0:b6:3e:d5:82:7a:f1:74:3d:b0:b6:cb:7e:0a:f7:18:e0:ad:
         2f:06:6d:cc:03:d5:aa:7b:cd:32:a8:ec:0e:97:c8:bb:82:be:
         53:8a:2c:00:94:fd:81:67:a1:1d:37:8c:2c:56:75:f2:2f:70:
         72:68:a9:31:41:cf:23:78:be:f8:8f:df:7d:f2:de:32:14:eb:
         78:1a:06:8e
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDJHo+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NDUzNmY4YmE3OGVhOGE3YTAwZDk5ZjZlZjk5NDI3NGI0YTEwOTIwHhcNMjMxMTEy
MTQwNTU2WhcNMjUxMTEyMTQwNTU2WjAzMTEwLwYDVQQDEyhlOTE0ZWU0NTUyNzE2
YjZiZTQ0NDViOGY4ODNjYmRlZDVlODIwMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmzlI2RoFcs2isz4E/rT1JlXepBVFUuFoYxDEdoR5ZDBRC3tT
1T/77oaNJ8w4jeQP+6FBmZhovRFysoyWrw5U7rdEgAFm8I2d52YiTgoRi1L7JKdc
/+S8K6tdUvEaU9DSXyH1hsydY7ePVpqckCgGc/g7Dex2McNHLd/2ryZvgdXSn97Q
HKr6oBXSTMNsq1CJz20DW298xqj4EkAxS0KirXq8jYSw9DNDHQWjwiz3WTzdsf8C
/QGDwmOr7A3NoRTE+bIUZVCvWhAleVqt7ve/rlhE/WAOpLMf58+vDIkB9uqsSlt9
W9Pvos3ODp66M5v3ekx/+7pNEsqBqEEEtDJh+wIDAQABo4ICijCCAoYwHQYDVR0O
BBYEFNMyYm+M6U6PXD9mOi7oJjNpvH8AMB8GA1UdIwQYMBaAFFfWhTwMDHIQRVAr
tkN3UmvH0FAJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ0NTM2
ZjhiYTc4ZWE4YTdhMDBkOTlmNmVmOTk0Mjc0YjRhMTA5Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWZkOGZhMGYtYTViZS00YjhkLTk2ZmItM2YzYzNi
ODY4ZWYwL2U5MTRlZTQ1NTI3MTZiNmJlNDQ0NWI4Zjg4M2NiZGVkNWU4MjAyMjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZmQ4ZmEwZi1hNWJlLTRiOGQtOTZmYi0zZjNj
M2I4NjhlZjAvNGQ0NTM2ZjhiYTc4ZWE4YTdhMDBkOTlmNmVmOTk0Mjc0YjRhMTA5
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/
MD0wGAQCAAEwEgMEAC3nNgMEAcgKsAMEAchrUjAhBAIAAjAbAwcAIAETx3AEAwcA
KAEAHaABAwcAKAEAHaAEMA0GCSqGSIb3DQEBCwUAA4IBAQA7qrmfSj/G6yHwtHm2
g3zSUtq/TCtcpmQo3p+kqWhhFBnnnpiFyVR81c02TzI+MViqSkdMWipdo0I23l9j
VmUZORSjgVbYXS94Lct4l79rn5Bq58wDPNwpFnyO+Rld/rUIu8gHGAkEWc52oJ/I
gSyY+4C9ascFZ4CP8W8slJwwRRE1FwEaTskJ3FqNZcw5iMpbHyQ/sBCBtyud3s4F
r0pG3ENKlDJDz0HJvCn1vo44WscXSH6gtj7VgnrxdD2wtst+CvcY4K0vBm3MA9Wq
e80yqOwOl8i7gr5TiiwAlP2BZ6EdN4wsVnXyL3ByaKkxQc8jeL74j9998t4yFOt4
GgaO
-----END CERTIFICATE-----