Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/8c2a0aa8c9cd8b4c19093ada11e5bd01210ada10.roa
File:                     8c2a0aa8c9cd8b4c19093ada11e5bd01210ada10.roa (raw, json)
Hash identifier:          Sl9nmklAI29uT63vWYUI4ttuYN5fVk1sJM3YqRyspJU=
Subject key identifier:   47:7C:7B:96:B0:6C:AE:E8:50:C9:1A:EE:74:3D:67:4A:C9:98:61:1F
Certificate issuer:       /CN=49e352d14129558da17025255f13358c2326ee25
Certificate serial:       25728C
Authority key identifier: 4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/8c2a0aa8c9cd8b4c19093ada11e5bd01210ada10.roa
Signing time:             Fri 26 Jan 2024 20:10:57 +0000
ROA not before:           Fri 26 Jan 2024 20:10:57 +0000
ROA not after:            Mon 26 Jan 2026 20:10:57 +0000
asID:                     267905
IP address blocks:        45.178.48.0/22 maxlen: 24
                          2803:3660::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454156 (0x25728c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e352d14129558da17025255f13358c2326ee25
        Validity
            Not Before: Jan 26 20:10:57 2024 GMT
            Not After : Jan 26 20:10:57 2026 GMT
        Subject: CN=8c2a0aa8c9cd8b4c19093ada11e5bd01210ada10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:e7:7b:7c:43:80:7f:91:da:8d:a4:51:05:
                    e6:53:fc:43:ab:67:2c:76:37:7e:4b:0b:7c:b9:40:
                    1b:29:1e:a0:e0:52:04:52:66:fb:42:40:49:c1:a4:
                    dc:e5:d1:f8:85:7c:23:9d:2d:2b:db:ae:4c:fd:71:
                    05:ea:60:18:5d:1d:94:d2:65:a8:e4:e9:84:65:c2:
                    61:0b:be:21:0c:d6:c6:f5:d2:18:0c:11:f9:1c:a2:
                    e9:e7:43:e9:19:76:40:08:f0:b0:8b:95:07:dd:76:
                    96:56:65:19:65:8a:8e:e5:f4:55:aa:10:cf:91:cb:
                    49:07:b7:11:a7:f1:09:2e:40:5d:f3:23:94:52:2f:
                    bc:cc:69:d2:35:39:7e:64:12:f1:55:f7:03:30:50:
                    89:00:dc:b4:4e:1b:88:c0:81:38:dd:85:24:43:3d:
                    f5:07:4f:82:f3:89:60:fb:f3:67:71:cf:2d:cb:33:
                    42:cb:e5:40:e2:4f:14:b0:bb:03:a1:a0:d0:84:5c:
                    8f:54:32:d3:85:28:8e:c5:80:d8:07:cd:0a:8d:13:
                    59:47:88:03:22:98:4d:b0:6d:5d:28:c8:b8:28:66:
                    9f:22:09:50:a6:c7:0d:0c:13:8f:db:1b:38:3b:84:
                    eb:76:08:50:8d:fb:9f:95:a7:f4:d2:95:fc:91:ca:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:7B:96:B0:6C:AE:E8:50:C9:1A:EE:74:3D:67:4A:C9:98:61:1F
            X509v3 Authority Key Identifier:
                keyid:4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/8c2a0aa8c9cd8b4c19093ada11e5bd01210ada10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/49e352d14129558da17025255f13358c2326ee25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.48.0/22
                IPv6:
                  2803:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:7b:76:57:23:c0:d6:16:6e:13:28:96:50:6c:4b:6b:7e:
         6f:64:41:f5:21:a8:0b:71:51:a4:33:a4:f0:43:4c:43:bd:bd:
         fc:11:6e:56:04:50:9f:29:36:34:9f:62:c8:c9:ef:76:5f:44:
         de:2b:e2:76:8f:08:86:cb:5f:a2:c4:af:e6:1c:ca:aa:f1:6f:
         0c:4e:e9:3c:5f:c7:8a:96:7a:96:e8:5d:6b:00:4c:70:56:c5:
         52:eb:f5:a1:f8:6f:ae:53:4e:3f:e7:70:9d:20:a6:9e:d7:f7:
         25:24:13:a3:ba:53:53:6d:5d:68:bf:02:55:ac:ac:08:9c:60:
         25:75:5f:44:e4:cd:a1:f4:8f:8f:c6:86:4a:e0:01:92:25:80:
         10:bf:bc:d6:a7:64:01:f3:9f:c6:19:1e:39:49:3c:00:20:cd:
         7d:22:f0:7f:5d:e4:27:3f:dc:e5:18:7b:90:d0:49:da:63:1a:
         2b:90:b3:32:8b:90:69:97:f8:6f:8e:b7:a8:d0:df:40:07:bc:
         c4:52:46:ff:e1:02:ce:0d:10:32:66:7d:c3:c1:c4:54:c2:d3:
         c5:58:15:19:62:44:ff:1e:b0:87:d7:db:e3:1f:68:e9:12:e3:
         a4:3a:36:fa:ea:b8:a8:0a:50:47:6d:74:8c:47:70:ae:cb:41:
         52:d6:2b:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJXKMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
ZTM1MmQxNDEyOTU1OGRhMTcwMjUyNTVmMTMzNThjMjMyNmVlMjUwHhcNMjQwMTI2
MjAxMDU3WhcNMjYwMTI2MjAxMDU3WjAzMTEwLwYDVQQDEyg4YzJhMGFhOGM5Y2Q4
YjRjMTkwOTNhZGExMWU1YmQwMTIxMGFkYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjnbne3xDgH+R2o2kUQXmU/xDq2csdjd+Swt8uUAbKR6g4FIE
Umb7QkBJwaTc5dH4hXwjnS0r265M/XEF6mAYXR2U0mWo5OmEZcJhC74hDNbG9dIY
DBH5HKLp50PpGXZACPCwi5UH3XaWVmUZZYqO5fRVqhDPkctJB7cRp/EJLkBd8yOU
Ui+8zGnSNTl+ZBLxVfcDMFCJANy0ThuIwIE43YUkQz31B0+C84lg+/Nncc8tyzNC
y+VA4k8UsLsDoaDQhFyPVDLThSiOxYDYB80KjRNZR4gDIphNsG1dKMi4KGafIglQ
pscNDBOP2xs4O4TrdghQjfuflaf00pX8kconmwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFEd8e5awbK7oUMka7nQ9Z0rJmGEfMB8GA1UdIwQYMBaAFE60fbxRHzKD8EOV
2+yR3iGnoZCuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDllMzUy
ZDE0MTI5NTU4ZGExNzAyNTI1NWYxMzM1OGMyMzI2ZWUyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQ2Nzc2MmQtNzMwYy00N2FhLWE5MTEtNmM4NzY0
ZjIwZTRiLzhjMmEwYWE4YzljZDhiNGMxOTA5M2FkYTExZTViZDAxMjEwYWRhMTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDY3NzYyZC03MzBjLTQ3YWEtYTkxMS02Yzg3
NjRmMjBlNGIvNDllMzUyZDE0MTI5NTU4ZGExNzAyNTI1NWYxMzM1OGMyMzI2ZWUy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2yMDANBAIAAjAHAwUAKAM2YDANBgkqhkiG9w0BAQsFAAOC
AQEAA+57dlcjwNYWbhMollBsS2t+b2RB9SGoC3FRpDOk8ENMQ729/BFuVgRQnyk2
NJ9iyMnvdl9E3ivido8IhstfosSv5hzKqvFvDE7pPF/HipZ6luhdawBMcFbFUuv1
ofhvrlNOP+dwnSCmntf3JSQTo7pTU21daL8CVaysCJxgJXVfROTNofSPj8aGSuAB
kiWAEL+81qdkAfOfxhkeOUk8ACDNfSLwf13kJz/c5Rh7kNBJ2mMaK5CzMouQaZf4
b463qNDfQAe8xFJG/+ECzg0QMmZ9w8HEVMLTxVgVGWJE/x6wh9fb4x9o6RLjpDo2
+uq4qApQR210jEdwrstBUtYrNQ==
-----END CERTIFICATE-----