Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/374b2c42d2ca7288129eaef7f6f690cc783f019c.roa
File:                     374b2c42d2ca7288129eaef7f6f690cc783f019c.roa (raw, json)
Hash identifier:          q1re7WRqb8mVi1xW9+PP3d/esWqB1VrOF5JabTULzl4=
Subject key identifier:   12:1A:58:DC:D5:5D:A7:81:B0:BF:93:5D:35:FF:E9:5A:35:01:9C:2E
Certificate issuer:       /CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
Certificate serial:       1AA17C
Authority key identifier: 0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/374b2c42d2ca7288129eaef7f6f690cc783f019c.roa
Signing time:             Fri 28 Apr 2023 12:07:26 +0000
ROA not before:           Thu 27 Apr 2023 12:07:26 +0000
ROA not after:            Mon 28 Apr 2025 12:07:26 +0000
asID:                     265695
IP address blocks:        45.5.8.0/22 maxlen: 24
                          2803:9c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745276 (0x1aa17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
        Validity
            Not Before: Apr 27 12:07:26 2023 GMT
            Not After : Apr 28 12:07:26 2025 GMT
        Subject: CN=374b2c42d2ca7288129eaef7f6f690cc783f019c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:8d:68:b2:f2:e7:59:42:db:7c:4f:c1:80:
                    d7:c4:f5:5f:c8:d1:af:df:83:bc:7b:8a:80:98:64:
                    f9:ad:43:85:21:00:91:dc:33:92:b3:b1:6c:fd:dc:
                    86:a8:a3:00:d1:ec:30:29:2f:05:5a:b0:8c:d6:28:
                    65:c2:ce:e7:63:c9:34:58:6f:eb:fd:5d:b2:09:b6:
                    ba:0c:22:ff:70:47:52:7d:b9:f7:d9:e6:3b:fe:72:
                    ad:42:20:2b:44:92:a7:af:5d:d3:e8:00:aa:3d:10:
                    65:a1:c2:f4:10:27:6f:77:0a:a0:6b:c0:3e:21:03:
                    59:d7:49:30:36:a5:0a:ff:70:86:67:bd:a5:9e:3b:
                    87:c7:6d:14:77:96:92:65:61:34:bf:12:64:93:a6:
                    f1:97:b5:c5:fb:35:ad:7c:3b:cf:b5:2e:22:a5:1e:
                    04:1f:f2:b3:9b:34:18:57:5c:10:2d:06:46:66:69:
                    50:ff:c7:2c:be:0e:1e:66:e4:7f:45:9b:a2:e2:01:
                    3a:5d:f7:9d:c9:8c:47:08:db:40:3d:d9:e9:23:f0:
                    a7:0d:22:2e:a7:31:93:b1:06:33:72:db:a6:6a:a1:
                    78:3a:5d:33:86:29:62:26:61:12:e7:d0:12:c6:7f:
                    2c:77:7d:2b:45:87:d1:4f:dc:e0:9d:71:a7:b8:16:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1A:58:DC:D5:5D:A7:81:B0:BF:93:5D:35:FF:E9:5A:35:01:9C:2E
            X509v3 Authority Key Identifier:
                keyid:0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/374b2c42d2ca7288129eaef7f6f690cc783f019c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:b6:14:82:29:74:5c:58:ef:86:01:30:20:95:6b:4d:ee:
         26:63:26:65:cd:06:12:b6:63:45:bd:29:a5:32:97:79:87:cb:
         b2:eb:a9:ef:44:63:10:bb:a9:eb:8c:60:0c:74:81:d4:e4:bf:
         cf:c1:50:4b:16:80:a9:9b:36:bc:e3:18:9c:5b:7e:a2:ea:40:
         45:06:3e:0d:fd:0d:d4:8b:23:16:83:38:4e:18:3e:f2:43:23:
         d8:49:b0:9a:91:db:df:ff:44:63:a4:3e:b0:2e:3b:e0:22:e9:
         0c:b3:71:1b:9c:f7:12:91:c0:7a:0b:89:db:ae:21:08:90:23:
         8c:0d:3f:a3:d1:66:88:bf:a9:c1:01:68:6c:35:80:d4:2e:10:
         b5:5e:71:99:17:f6:da:bf:8a:f2:7f:bf:1f:bd:72:78:ff:34:
         17:37:34:46:b2:4d:90:da:f4:05:9e:83:05:a3:d8:ed:b3:a1:
         d0:f5:b0:17:e4:c9:92:50:fb:b1:10:73:2b:c1:a9:48:41:3b:
         e8:ba:fb:07:68:9c:1e:89:91:e9:b0:80:aa:ea:dc:96:66:72:
         30:9d:1f:d7:76:2a:bc:45:16:23:96:05:be:b9:e8:22:e7:5e:
         fc:16:34:f4:9f:30:2d:6b:50:b8:83:73:5f:8f:62:4a:1e:ca:
         0e:f2:11:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGqF8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
NDRjMGE0NDY0OWI4ZGM1NzRmNjFkNDMxZTU2ZWQyNzNkZGI5ZjYwHhcNMjMwNDI3
MTIwNzI2WhcNMjUwNDI4MTIwNzI2WjAzMTEwLwYDVQQDEygzNzRiMmM0MmQyY2E3
Mjg4MTI5ZWFlZjdmNmY2OTBjYzc4M2YwMTljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtHmNaLLy51lC23xPwYDXxPVfyNGv34O8e4qAmGT5rUOFIQCR
3DOSs7Fs/dyGqKMA0ewwKS8FWrCM1ihlws7nY8k0WG/r/V2yCba6DCL/cEdSfbn3
2eY7/nKtQiArRJKnr13T6ACqPRBlocL0ECdvdwqga8A+IQNZ10kwNqUK/3CGZ72l
njuHx20Ud5aSZWE0vxJkk6bxl7XF+zWtfDvPtS4ipR4EH/KzmzQYV1wQLQZGZmlQ
/8csvg4eZuR/RZui4gE6XfedyYxHCNtAPdnpI/CnDSIupzGTsQYzctumaqF4Ol0z
hiliJmES59ASxn8sd30rRYfRT9zgnXGnuBbuUwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBIaWNzVXaeBsL+TXTX/6Vo1AZwuMB8GA1UdIwQYMBaAFArSV4LmXx6MGpfe
HlVysDC+Me1sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE0NGMw
YTQ0NjQ5YjhkYzU3NGY2MWQ0MzFlNTZlZDI3M2RkYjlmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzNiNDA4YWEtNmQ1YS00YTM5LTkyYjQtMTMyZjk4
ZTUxNzIzLzM3NGIyYzQyZDJjYTcyODgxMjllYWVmN2Y2ZjY5MGNjNzgzZjAxOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jM2I0MDhhYS02ZDVhLTRhMzktOTJiNC0xMzJm
OThlNTE3MjMvOTE0NGMwYTQ0NjQ5YjhkYzU3NGY2MWQ0MzFlNTZlZDI3M2RkYjlm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0FCDANBAIAAjAHAwUAKAMJwDANBgkqhkiG9w0BAQsFAAOC
AQEAWbe2FIIpdFxY74YBMCCVa03uJmMmZc0GErZjRb0ppTKXeYfLsuup70RjELup
64xgDHSB1OS/z8FQSxaAqZs2vOMYnFt+oupARQY+Df0N1IsjFoM4Thg+8kMj2Emw
mpHb3/9EY6Q+sC474CLpDLNxG5z3EpHAeguJ264hCJAjjA0/o9FmiL+pwQFobDWA
1C4QtV5xmRf22r+K8n+/H71yeP80Fzc0RrJNkNr0BZ6DBaPY7bOh0PWwF+TJklD7
sRBzK8GpSEE76Lr7B2icHomR6bCAqurclmZyMJ0f13YqvEUWI5YFvrnoIude/BY0
9J8wLWtQuINzX49iSh7KDvIRYw==
-----END CERTIFICATE-----