Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/24ad72cbf024f5642d1773266e712beebeca31bf.roa
File:                     24ad72cbf024f5642d1773266e712beebeca31bf.roa (raw, json)
Hash identifier:          0GQkALW2WhGCQC6eF+St4pq0NGB8qxUs1FyOc9UMJCo=
Subject key identifier:   F0:91:F9:BA:2B:97:B7:3C:1A:33:29:5F:B1:3F:4F:12:F1:05:B3:54
Certificate issuer:       /CN=f555abf6bc8d39ccbb5b53dbd3b407567c54d134
Certificate serial:       11B318
Authority key identifier: 5E:DF:E2:CF:D7:8D:80:3C:FD:93:6D:F6:E7:28:DA:94:C3:6E:C9:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f555abf6bc8d39ccbb5b53dbd3b407567c54d134.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/24ad72cbf024f5642d1773266e712beebeca31bf.roa
Signing time:             Tue 30 May 2023 08:30:03 +0000
ROA not before:           Mon 29 May 2023 08:30:03 +0000
ROA not after:            Wed 28 May 2025 08:30:03 +0000
asID:                     269807
IP address blocks:        45.185.148.0/24 maxlen: 24
                          45.185.184.0/23 maxlen: 24
                          45.185.185.0/24 maxlen: 24
                          2803:1b60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159960 (0x11b318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f555abf6bc8d39ccbb5b53dbd3b407567c54d134
        Validity
            Not Before: May 29 08:30:03 2023 GMT
            Not After : May 28 08:30:03 2025 GMT
        Subject: CN=24ad72cbf024f5642d1773266e712beebeca31bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:38:36:23:4a:95:01:64:d5:68:4e:28:38:
                    f3:2a:6b:9c:19:88:bb:9f:0f:84:d7:b6:45:9d:26:
                    6d:63:6e:93:07:ef:57:3e:4d:91:bd:d5:bf:80:a4:
                    57:a2:77:68:f0:12:9a:c8:9e:26:50:e6:f0:07:14:
                    fd:c1:77:14:fe:4a:f5:f4:7b:9a:0f:13:72:8f:a9:
                    d6:61:1e:f5:ca:65:9a:b7:27:a2:f1:d0:61:24:a0:
                    04:a0:98:ab:32:2e:fd:73:54:9e:60:d6:90:08:b7:
                    eb:41:64:1e:e2:e5:bb:25:0a:25:5b:fa:fd:49:bf:
                    f1:6c:9c:48:fa:1e:bd:33:02:f0:43:b4:c8:0d:7b:
                    62:b8:a7:07:c2:e7:cc:06:ff:ee:16:95:af:b6:a8:
                    6e:cf:64:41:ab:41:09:b0:2a:f2:78:42:f8:eb:d7:
                    d1:b8:76:bb:b9:b3:0e:c3:8d:6b:3a:1d:86:97:67:
                    50:5c:71:79:ae:c4:0c:db:60:7f:cf:a2:4a:0d:85:
                    2e:cd:bc:d2:27:48:eb:1d:bb:74:66:f0:1f:cd:77:
                    f2:c5:df:43:28:0c:5e:35:51:5d:1b:04:4e:f0:5f:
                    0c:08:27:6b:53:ad:01:c4:ac:ec:d6:a7:65:34:47:
                    b4:3b:af:6f:f5:03:37:8d:31:a0:ad:25:7f:f7:3d:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:F9:BA:2B:97:B7:3C:1A:33:29:5F:B1:3F:4F:12:F1:05:B3:54
            X509v3 Authority Key Identifier:
                keyid:5E:DF:E2:CF:D7:8D:80:3C:FD:93:6D:F6:E7:28:DA:94:C3:6E:C9:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f555abf6bc8d39ccbb5b53dbd3b407567c54d134.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/24ad72cbf024f5642d1773266e712beebeca31bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4b0c443-2e99-4756-ac20-37d7dc4270c9/f555abf6bc8d39ccbb5b53dbd3b407567c54d134.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.148.0/24
                  45.185.184.0/23
                IPv6:
                  2803:1b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:03:49:e0:88:8c:2f:ed:27:c6:33:41:f9:1d:1a:6e:b8:48:
         7f:4a:73:f9:f6:62:62:69:44:5c:fc:d4:16:a5:87:a2:77:22:
         48:cb:5c:46:a3:9d:06:e5:a9:f9:96:61:31:ab:8a:4c:cf:c8:
         e4:34:fc:0c:1f:04:f4:b4:bf:6e:4f:c6:13:bb:08:e8:d8:46:
         62:de:3f:c6:17:d3:d6:10:9a:33:0f:a3:a0:66:e5:d3:6b:fe:
         2e:98:9f:32:9c:51:1f:31:9d:18:1f:16:c0:8e:71:da:10:8b:
         18:d9:22:b7:fb:5d:aa:3a:d7:22:e2:01:f5:39:1d:6d:4d:a8:
         15:95:2f:d8:d9:96:db:ed:b7:e3:23:2e:39:d3:da:44:6c:e8:
         38:0c:86:2e:49:e2:34:b4:8f:61:85:c0:14:7a:90:e6:cd:26:
         5d:38:1a:f9:6b:ed:e3:78:29:49:75:bf:5f:57:ef:77:ca:c7:
         38:19:82:55:41:77:ed:c2:1e:57:10:95:6a:45:1f:2d:08:87:
         c1:74:bf:57:c3:69:a2:50:12:be:f2:a5:2f:92:88:43:14:78:
         ca:7f:e6:1b:22:57:0a:8e:3f:39:bd:8d:56:dd:9e:02:43:15:
         17:5d:e4:28:aa:ac:68:9e:5c:6f:de:24:21:28:3c:5e:89:e3:
         8e:55:9b:aa
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDEbMYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
NTVhYmY2YmM4ZDM5Y2NiYjViNTNkYmQzYjQwNzU2N2M1NGQxMzQwHhcNMjMwNTI5
MDgzMDAzWhcNMjUwNTI4MDgzMDAzWjAzMTEwLwYDVQQDEygyNGFkNzJjYmYwMjRm
NTY0MmQxNzczMjY2ZTcxMmJlZWJlY2EzMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkOM4NiNKlQFk1WhOKDjzKmucGYi7nw+E17ZFnSZtY26TB+9X
Pk2RvdW/gKRXondo8BKayJ4mUObwBxT9wXcU/kr19HuaDxNyj6nWYR71ymWatyei
8dBhJKAEoJirMi79c1SeYNaQCLfrQWQe4uW7JQolW/r9Sb/xbJxI+h69MwLwQ7TI
DXtiuKcHwufMBv/uFpWvtqhuz2RBq0EJsCryeEL469fRuHa7ubMOw41rOh2Gl2dQ
XHF5rsQM22B/z6JKDYUuzbzSJ0jrHbt0ZvAfzXfyxd9DKAxeNVFdGwRO8F8MCCdr
U60BxKzs1qdlNEe0O69v9QM3jTGgrSV/9z1CFwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFPCR+borl7c8GjMpX7E/TxLxBbNUMB8GA1UdIwQYMBaAFF7f4s/XjYA8/ZNt
9uco2pTDbslyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU1NWFi
ZjZiYzhkMzljY2JiNWI1M2RiZDNiNDA3NTY3YzU0ZDEzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjRiMGM0NDMtMmU5OS00NzU2LWFjMjAtMzdkN2Rj
NDI3MGM5LzI0YWQ3MmNiZjAyNGY1NjQyZDE3NzMyNjZlNzEyYmVlYmVjYTMxYmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNGIwYzQ0My0yZTk5LTQ3NTYtYWMyMC0zN2Q3
ZGM0MjcwYzkvZjU1NWFiZjZiYzhkMzljY2JiNWI1M2RiZDNiNDA3NTY3YzU0ZDEz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAC25lAMEAS25uDANBAIAAjAHAwUAKAMbYDANBgkqhkiG9w0B
AQsFAAOCAQEASANJ4IiML+0nxjNB+R0abrhIf0pz+fZiYmlEXPzUFqWHonciSMtc
RqOdBuWp+ZZhMauKTM/I5DT8DB8E9LS/bk/GE7sI6NhGYt4/xhfT1hCaMw+joGbl
02v+LpifMpxRHzGdGB8WwI5x2hCLGNkit/tdqjrXIuIB9TkdbU2oFZUv2NmW2+23
4yMuOdPaRGzoOAyGLkniNLSPYYXAFHqQ5s0mXTga+Wvt43gpSXW/X1fvd8rHOBmC
VUF37cIeVxCVakUfLQiHwXS/V8NpolASvvKlL5KIQxR4yn/mGyJXCo4/Ob2NVt2e
AkMVF13kKKqsaJ5cb94kISg8XonjjlWbqg==
-----END CERTIFICATE-----