Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/877af6cf5ef67f85c0fa495ea5158697037525e7.roa
File:                     877af6cf5ef67f85c0fa495ea5158697037525e7.roa (raw, json)
Hash identifier:          gPhRYLEMp9k1p3ktASGLRg+E/8KH8laNleMgNa68Rxc=
Subject key identifier:   D0:2D:D0:1F:90:E6:92:7F:4F:A6:09:06:1B:83:60:B0:90:47:D9:FA
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       1D83F5
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/877af6cf5ef67f85c0fa495ea5158697037525e7.roa
Signing time:             Sat 25 Mar 2023 09:57:36 +0000
ROA not before:           Sun 17 Jul 2022 03:00:00 +0000
ROA not after:            Sun 18 Jul 2027 03:00:00 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          45.186.144.0/23 maxlen: 24
                          45.186.144.0/24 maxlen: 24
                          45.186.145.0/24 maxlen: 24
                          45.186.146.0/24 maxlen: 24
                          45.186.146.0/23 maxlen: 24
                          45.186.147.0/24 maxlen: 24
                          2803:f60::/32 maxlen: 48
                          2803:f60::/35 maxlen: 35
                          2803:f60::/40 maxlen: 40
                          2803:f60:100::/40 maxlen: 40
                          2803:f60:2000::/35 maxlen: 35
                          2803:f60:4000::/35 maxlen: 35
                          2803:f60:6000::/35 maxlen: 35
                          2803:f60:8000::/35 maxlen: 35
                          2803:f60:a000::/35 maxlen: 35
                          2803:f60:c000::/35 maxlen: 35
                          2803:f60:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934325 (0x1d83f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Jul 17 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2027 GMT
        Subject: CN=877af6cf5ef67f85c0fa495ea5158697037525e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5a:50:a7:55:9a:2c:b2:65:3c:cf:ac:99:8a:
                    c6:16:7e:39:37:dd:2f:76:18:ab:b8:4b:e7:99:34:
                    bc:db:57:55:2a:8f:91:de:d3:86:ba:8d:9f:ef:5b:
                    90:d6:18:65:fb:8d:dc:9c:10:4e:0d:40:f1:94:35:
                    ca:f7:07:c7:95:b6:62:7f:b2:b4:48:a7:95:e9:94:
                    3b:eb:4a:67:c8:5c:6c:f3:e3:f8:68:28:99:90:cd:
                    c9:2c:64:74:0b:d4:e5:3c:35:1b:2e:32:5c:6b:87:
                    48:ae:6c:23:ee:ce:46:c6:48:e3:15:1d:2a:3d:48:
                    13:5a:e6:cc:55:5a:c6:bf:93:46:8d:b9:ab:d9:49:
                    c9:4e:76:36:7f:57:27:47:5b:ba:17:27:1b:f8:f4:
                    4a:e3:dd:f4:c1:a5:1e:4b:d7:96:5c:2f:60:4d:8f:
                    4e:9d:75:d0:8a:ce:30:e0:d9:07:cd:f8:0a:52:41:
                    dc:82:9a:a1:a1:2a:25:6d:21:d0:9e:e0:2e:b0:9e:
                    45:ef:70:15:ef:21:3d:07:38:87:8e:14:fe:fe:40:
                    74:38:a3:3c:fb:64:39:bf:e2:a5:f1:c0:fa:2d:ca:
                    cf:f7:4d:87:dc:07:0c:2d:2b:1d:b7:b7:64:ca:d7:
                    b7:bd:0e:71:7c:e6:32:df:13:8e:0c:6a:12:9d:f6:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:D0:1F:90:E6:92:7F:4F:A6:09:06:1B:83:60:B0:90:47:D9:FA
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/877af6cf5ef67f85c0fa495ea5158697037525e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:9e:37:cb:6e:a4:64:a9:b9:51:22:68:b3:95:f8:91:ac:
         aa:ee:20:b1:77:2b:04:c8:14:2e:f7:fd:9d:32:51:9c:ee:5b:
         24:4e:b6:07:f1:77:02:b4:6f:eb:d9:9a:fe:19:3a:ca:0b:6f:
         71:91:96:3b:8a:5e:52:df:3c:6b:ef:c1:21:e2:e6:4a:5d:1d:
         2b:93:fd:c0:e9:0f:e7:78:25:5b:8e:5a:94:55:fa:98:b8:0c:
         b9:94:59:35:73:cb:75:0a:7e:fe:57:32:6d:92:16:55:ad:73:
         a0:9b:c1:b9:bf:87:dd:1b:33:21:3f:83:3d:90:e2:75:9e:75:
         2c:e1:23:5c:7a:71:94:cf:d5:e2:45:d7:89:d0:3f:c2:7e:f9:
         e9:37:5c:5f:f7:4a:94:bd:3b:e9:ed:f7:16:0d:29:fb:ce:23:
         2d:fe:7f:92:0c:93:9e:06:11:ca:b0:15:8d:83:22:75:7d:eb:
         17:c5:fc:c8:2a:cf:0a:34:fb:55:02:8b:3f:67:20:e5:c8:ac:
         a6:c3:33:ef:60:8b:46:95:48:e2:8c:31:78:b9:8c:23:66:d8:
         15:81:59:2c:a8:d9:f1:88:8a:59:13:50:18:25:1d:a2:09:2f:
         76:4c:09:88:67:44:72:ea:53:77:20:82:c0:88:ce:c3:a0:c5:
         42:5d:d2:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHYP1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdi
OTYyNTRmNzkwODExNzE5YmU5N2Q3ODNhZTMzYTMzNDNlNjljMTYwHhcNMjIwNzE3
MDMwMDAwWhcNMjcwNzE4MDMwMDAwWjAzMTEwLwYDVQQDEyg4NzdhZjZjZjVlZjY3
Zjg1YzBmYTQ5NWVhNTE1ODY5NzAzNzUyNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgFpQp1WaLLJlPM+smYrGFn45N90vdhiruEvnmTS821dVKo+R
3tOGuo2f71uQ1hhl+43cnBBODUDxlDXK9wfHlbZif7K0SKeV6ZQ760pnyFxs8+P4
aCiZkM3JLGR0C9TlPDUbLjJca4dIrmwj7s5GxkjjFR0qPUgTWubMVVrGv5NGjbmr
2UnJTnY2f1cnR1u6Fycb+PRK4930waUeS9eWXC9gTY9OnXXQis4w4NkHzfgKUkHc
gpqhoSolbSHQnuAusJ5F73AV7yE9BziHjhT+/kB0OKM8+2Q5v+Kl8cD6LcrP902H
3AcMLSsdt7dkyte3vQ5xfOYy3xOODGoSnfYWVQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNAt0B+Q5pJ/T6YJBhuDYLCQR9n6MB8GA1UdIwQYMBaAFKKA3Qdc1bdwJvuo
HsCF6bknXUfaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2I5NjI1
NGY3OTA4MTE3MTliZTk3ZDc4M2FlMzNhMzM0M2U2OWMxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWJhOTc0NzEtMjc4NC00MzgyLWI4YTktYTA3ZTNj
NDMxNmRjLzg3N2FmNmNmNWVmNjdmODVjMGZhNDk1ZWE1MTU4Njk3MDM3NTI1ZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYmE5NzQ3MS0yNzg0LTQzODItYjhhOS1hMDdl
M2M0MzE2ZGMvN2I5NjI1NGY3OTA4MTE3MTliZTk3ZDc4M2FlMzNhMzM0M2U2OWMx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26kDANBAIAAjAHAwUAKAMPYDANBgkqhkiG9w0BAQsFAAOC
AQEAi9KeN8tupGSpuVEiaLOV+JGsqu4gsXcrBMgULvf9nTJRnO5bJE62B/F3ArRv
69ma/hk6ygtvcZGWO4peUt88a+/BIeLmSl0dK5P9wOkP53glW45alFX6mLgMuZRZ
NXPLdQp+/lcybZIWVa1zoJvBub+H3RszIT+DPZDidZ51LOEjXHpxlM/V4kXXidA/
wn756TdcX/dKlL076e33Fg0p+84jLf5/kgyTngYRyrAVjYMidX3rF8X8yCrPCjT7
VQKLP2cg5cispsMz72CLRpVI4owxeLmMI2bYFYFZLKjZ8YiKWRNQGCUdogkvdkwJ
iGdEcupTdyCCwIjOw6DFQl3SBw==
-----END CERTIFICATE-----