Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/e015be24b4d500b29d86867ce1f3c4907b5b767f.roa
File:                     e015be24b4d500b29d86867ce1f3c4907b5b767f.roa (raw, json)
Hash identifier:          2kU+ERDDyxZFdqXVqf20MWmYR/iGHXKHmObf5AqmUoQ=
Subject key identifier:   A0:6B:30:20:29:AF:9F:EB:F6:99:5C:87:F9:2A:52:A7:D7:43:1C:C2
Certificate issuer:       /CN=9cd1fa487cf3249dd054f9956489b848d101a711
Certificate serial:       1BBB29
Authority key identifier: AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/e015be24b4d500b29d86867ce1f3c4907b5b767f.roa
Signing time:             Tue 20 Jun 2023 19:57:24 +0000
ROA not before:           Mon 19 Jun 2023 19:57:24 +0000
ROA not after:            Fri 20 Jun 2025 19:57:24 +0000
asID:                     262589
IP address blocks:        45.173.10.0/23 maxlen: 24
                          2803:f860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817385 (0x1bbb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd1fa487cf3249dd054f9956489b848d101a711
        Validity
            Not Before: Jun 19 19:57:24 2023 GMT
            Not After : Jun 20 19:57:24 2025 GMT
        Subject: CN=e015be24b4d500b29d86867ce1f3c4907b5b767f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:39:f2:53:32:ab:93:71:7a:07:f7:0d:35:
                    2f:1c:f0:39:f0:1e:03:d6:00:6b:f0:c2:ae:77:2c:
                    ae:08:d9:8c:06:b1:e6:a8:f6:aa:6f:4c:31:d9:f3:
                    32:06:e1:fd:c3:b9:bb:34:b3:33:e1:94:de:90:23:
                    0a:2d:c3:d8:92:25:0b:ae:ec:28:40:84:69:be:ba:
                    99:f1:02:c3:40:0f:86:a6:2e:78:3e:d4:d6:9f:04:
                    7b:7f:45:05:ee:04:5f:b7:03:ea:41:e2:0f:7d:0e:
                    84:c5:44:64:0f:28:3b:13:ae:a4:88:17:b3:e7:54:
                    e2:34:a3:43:0c:f5:96:5c:93:68:be:4e:56:89:18:
                    15:02:c9:f7:64:67:2d:22:76:88:3c:27:22:5b:b9:
                    07:b7:61:f6:af:de:13:4c:6b:6a:15:ea:53:15:52:
                    49:46:f8:00:ca:2f:38:7e:6d:29:4a:86:cf:0c:06:
                    ca:b6:23:2d:98:86:a2:17:0e:d1:58:e4:7a:73:73:
                    71:94:60:4d:f9:db:53:f1:20:dc:48:c2:fe:ff:b9:
                    21:f7:8f:58:5d:63:93:43:51:55:1f:27:1b:69:67:
                    42:a4:36:b3:d9:33:4b:cd:58:6c:51:3b:d7:ff:b4:
                    1f:1b:5c:61:1a:a1:55:49:1a:76:51:b5:a0:0d:53:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:30:20:29:AF:9F:EB:F6:99:5C:87:F9:2A:52:A7:D7:43:1C:C2
            X509v3 Authority Key Identifier:
                keyid:AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/e015be24b4d500b29d86867ce1f3c4907b5b767f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/9cd1fa487cf3249dd054f9956489b848d101a711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.10.0/23
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:91:7e:03:45:40:de:80:87:26:e1:62:69:cf:64:79:ef:1d:
         c6:f4:fd:8b:d0:da:4a:ca:83:3b:7b:25:f7:09:71:46:af:fe:
         d1:69:9e:93:b4:36:6e:c6:c0:97:ae:fc:65:9f:cb:60:19:f2:
         8a:15:ae:e2:c0:85:a5:42:47:3c:de:69:da:ed:89:14:23:7f:
         b0:86:8d:78:53:6c:b8:10:f2:0f:16:ca:a8:05:8c:ee:1a:f1:
         18:9c:8b:fc:3e:61:87:9c:ef:c7:4f:83:8b:13:79:d2:60:0a:
         2e:f4:88:a0:7b:d4:62:cd:40:57:c6:ea:09:52:70:d3:fa:b1:
         9f:cf:ae:e8:92:a2:e8:3f:00:22:b7:0f:53:58:a3:b1:fd:34:
         27:79:f2:3e:5c:7c:b0:e5:3e:d2:43:ee:6e:d7:26:c6:a2:42:
         37:79:a9:42:97:2c:e6:1e:03:b9:87:83:6e:e9:71:4a:7f:f5:
         5b:d8:11:74:70:02:ba:7e:64:fc:1d:25:40:37:d4:ec:6d:70:
         6e:89:4d:48:bd:94:48:92:8e:ff:b5:78:f2:ac:95:b2:b9:13:
         be:ae:82:70:75:ae:5f:ea:03:c6:b0:e8:f8:2b:7e:ef:9e:31:
         f4:f9:92:d1:ef:c4:7a:c5:ff:3b:13:81:09:e2:7b:d8:bc:fc:
         0f:54:36:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDG7spMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj
ZDFmYTQ4N2NmMzI0OWRkMDU0Zjk5NTY0ODliODQ4ZDEwMWE3MTEwHhcNMjMwNjE5
MTk1NzI0WhcNMjUwNjIwMTk1NzI0WjAzMTEwLwYDVQQDEyhlMDE1YmUyNGI0ZDUw
MGIyOWQ4Njg2N2NlMWYzYzQ5MDdiNWI3NjdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlhk58lMyq5Nxegf3DTUvHPA58B4D1gBr8MKudyyuCNmMBrHm
qPaqb0wx2fMyBuH9w7m7NLMz4ZTekCMKLcPYkiULruwoQIRpvrqZ8QLDQA+Gpi54
PtTWnwR7f0UF7gRftwPqQeIPfQ6ExURkDyg7E66kiBez51TiNKNDDPWWXJNovk5W
iRgVAsn3ZGctInaIPCciW7kHt2H2r94TTGtqFepTFVJJRvgAyi84fm0pSobPDAbK
tiMtmIaiFw7RWOR6c3NxlGBN+dtT8SDcSML+/7kh949YXWOTQ1FVHycbaWdCpDaz
2TNLzVhsUTvX/7QfG1xhGqFVSRp2UbWgDVMjswIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKBrMCApr5/r9plch/kqUqfXQxzCMB8GA1UdIwQYMBaAFKrZhKSLvhXqtJg2
RK7IDkdgdwemMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWNkMWZh
NDg3Y2YzMjQ5ZGQwNTRmOTk1NjQ4OWI4NDhkMTAxYTcxMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTliMDQ5NTItNzcwZC00OGZhLThhYWItYWFkMWU2
Y2IzZDgyL2UwMTViZTI0YjRkNTAwYjI5ZDg2ODY3Y2UxZjNjNDkwN2I1Yjc2N2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOWIwNDk1Mi03NzBkLTQ4ZmEtOGFhYi1hYWQx
ZTZjYjNkODIvOWNkMWZhNDg3Y2YzMjQ5ZGQwNTRmOTk1NjQ4OWI4NDhkMTAxYTcx
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAS2tCjANBAIAAjAHAwUAKAP4YDANBgkqhkiG9w0BAQsFAAOC
AQEAFpF+A0VA3oCHJuFiac9kee8dxvT9i9DaSsqDO3sl9wlxRq/+0Wmek7Q2bsbA
l678ZZ/LYBnyihWu4sCFpUJHPN5p2u2JFCN/sIaNeFNsuBDyDxbKqAWM7hrxGJyL
/D5hh5zvx0+DixN50mAKLvSIoHvUYs1AV8bqCVJw0/qxn8+u6JKi6D8AIrcPU1ij
sf00J3nyPlx8sOU+0kPubtcmxqJCN3mpQpcs5h4DuYeDbulxSn/1W9gRdHACun5k
/B0lQDfU7G1wbolNSL2USJKO/7V48qyVsrkTvq6CcHWuX+oDxrDo+Ct+754x9PmS
0e/EesX/OxOBCeJ72Lz8D1Q22Q==
-----END CERTIFICATE-----