Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/e2609fe110ebecf131fab623660c78377a583a11.roa
File:                     e2609fe110ebecf131fab623660c78377a583a11.roa (raw, json)
Hash identifier:          /gCONXcD8hIbb0k3wN7P2ObCPg/0rtTn+z9FSZRvXm0=
Subject key identifier:   19:33:9A:0A:86:59:F0:26:62:F1:72:9C:D4:5F:22:1A:5E:2A:57:40
Certificate issuer:       /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial:       288400
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/e2609fe110ebecf131fab623660c78377a583a11.roa
Signing time:             Thu 28 Mar 2024 19:01:43 +0000
ROA not before:           Thu 28 Mar 2024 03:00:00 +0000
ROA not after:            Sat 28 Mar 2026 03:00:00 +0000
asID:                     264668
IP address blocks:        45.225.104.0/22 maxlen: 24
                          2803:aa20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2655232 (0x288400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
        Validity
            Not Before: Mar 28 03:00:00 2024 GMT
            Not After : Mar 28 03:00:00 2026 GMT
        Subject: CN=e2609fe110ebecf131fab623660c78377a583a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:57:a1:d1:aa:84:6f:f0:44:4b:c2:28:48:
                    b1:0d:8c:0e:62:42:51:9a:85:43:f3:95:0b:28:19:
                    8d:d0:bc:7a:39:29:99:1c:e1:4b:e6:c1:8e:b1:6d:
                    26:d1:4d:38:08:44:af:3b:fb:c7:4d:f1:76:c7:3e:
                    e9:8e:78:e5:c8:f6:2f:e4:39:10:e6:10:9b:81:0a:
                    4a:3e:67:c1:31:a5:04:d7:49:86:d5:32:3c:86:0e:
                    4a:d5:18:12:1d:e1:22:e0:13:a0:a9:ce:33:e4:05:
                    f1:b4:b5:de:fa:51:2e:e0:26:3e:33:50:24:2b:2e:
                    1f:d2:87:c4:ec:48:28:a9:de:53:15:c2:81:82:4e:
                    a1:6b:e0:d9:ea:62:38:65:26:2b:0b:1a:1f:94:98:
                    de:32:9d:b8:92:6a:33:b0:f7:b2:46:78:1f:28:d7:
                    f0:df:93:e4:2d:a9:23:74:f1:b8:ab:ca:8c:79:f7:
                    bf:7a:8b:28:81:57:4d:02:39:0f:2c:4c:89:5f:52:
                    b8:d8:16:c6:2f:7c:ef:e6:4d:59:a0:03:28:02:e8:
                    9c:70:34:82:94:e6:46:4e:3d:f2:c2:23:17:d6:a8:
                    d7:ed:4c:93:10:4c:10:bc:cb:82:82:05:b0:43:0c:
                    da:7d:8c:ad:a6:08:59:2c:b1:5c:35:21:9b:d9:3a:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:9A:0A:86:59:F0:26:62:F1:72:9C:D4:5F:22:1A:5E:2A:57:40
            X509v3 Authority Key Identifier:
                keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/e2609fe110ebecf131fab623660c78377a583a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22
                IPv6:
                  2803:aa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:14:bd:a2:a9:0a:47:c5:ab:28:83:23:02:bc:73:41:95:41:
         65:65:af:e2:70:cb:d4:0c:5b:4e:60:c4:5c:9f:4d:3c:34:74:
         32:5c:f0:48:6d:df:cf:13:bf:74:fd:77:a0:51:1c:f8:7c:e0:
         02:a5:3a:7f:05:d5:69:a5:af:69:ce:7c:55:cd:28:9e:53:8d:
         f3:16:20:a3:b4:fb:3a:57:5f:91:d2:fc:1f:fb:b5:98:9a:a6:
         7b:90:fa:73:7b:b1:f5:ae:52:89:e9:ad:01:0b:bb:38:ea:33:
         b8:26:0e:ef:d1:46:6d:6b:94:e8:af:5c:b2:e1:5e:3a:b7:6c:
         32:26:6f:ee:d1:ae:2b:38:d7:a6:1a:e8:a1:9b:61:96:a3:2b:
         e0:a6:8a:6c:47:67:b0:bf:dd:9e:6d:45:6c:65:24:45:3f:8b:
         f9:7a:81:ea:64:d7:de:bf:32:08:fd:69:2a:f1:15:9b:fc:b5:
         9d:2a:28:6f:13:5c:d0:a4:61:2d:44:17:bb:9f:78:1f:5e:21:
         37:cc:4b:a5:b8:4e:d5:ee:72:7e:ae:37:06:53:db:9c:1e:4e:
         9c:b5:dd:db:b0:1a:ed:ac:55:dd:3a:1a:f0:19:df:79:6e:c2:
         ba:24:b6:be:cf:ab:7c:10:65:df:71:b6:ec:e8:27:ff:8f:2f:
         d0:84:64:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDKIQAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
MWZlMGM0ZTY1MGEzMzhlODBiNDA2NmUzMWU0OWU4MTIyY2RlYjEwHhcNMjQwMzI4
MDMwMDAwWhcNMjYwMzI4MDMwMDAwWjAzMTEwLwYDVQQDEyhlMjYwOWZlMTEwZWJl
Y2YxMzFmYWI2MjM2NjBjNzgzNzdhNTgzYTExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhWpXodGqhG/wREvCKEixDYwOYkJRmoVD85ULKBmN0Lx6OSmZ
HOFL5sGOsW0m0U04CESvO/vHTfF2xz7pjnjlyPYv5DkQ5hCbgQpKPmfBMaUE10mG
1TI8hg5K1RgSHeEi4BOgqc4z5AXxtLXe+lEu4CY+M1AkKy4f0ofE7Egoqd5TFcKB
gk6ha+DZ6mI4ZSYrCxoflJjeMp24kmozsPeyRngfKNfw35PkLakjdPG4q8qMefe/
eosogVdNAjkPLEyJX1K42BbGL3zv5k1ZoAMoAuiccDSClOZGTj3ywiMX1qjX7UyT
EEwQvMuCggWwQwzafYytpghZLLFcNSGb2To7SQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBkzmgqGWfAmYvFynNRfIhpeKldAMB8GA1UdIwQYMBaAFOz7MiMnJia//GJW
1tjVhZ/+q+gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkxZmUw
YzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGViMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzUzZDZmNjMtOTFlMS00NGVkLWFmY2QtMTYyMjA2
MGM3ODRjL2UyNjA5ZmUxMTBlYmVjZjEzMWZhYjYyMzY2MGM3ODM3N2E1ODNhMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNTNkNmY2My05MWUxLTQ0ZWQtYWZjZC0xNjIy
MDYwYzc4NGMvZDkxZmUwYzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGVi
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3haDANBAIAAjAHAwUAKAOqIDANBgkqhkiG9w0BAQsFAAOC
AQEAVRS9oqkKR8WrKIMjArxzQZVBZWWv4nDL1AxbTmDEXJ9NPDR0MlzwSG3fzxO/
dP13oFEc+HzgAqU6fwXVaaWvac58Vc0onlON8xYgo7T7OldfkdL8H/u1mJqme5D6
c3ux9a5SiemtAQu7OOozuCYO79FGbWuU6K9csuFeOrdsMiZv7tGuKzjXphrooZth
lqMr4KaKbEdnsL/dnm1FbGUkRT+L+XqB6mTX3r8yCP1pKvEVm/y1nSoobxNc0KRh
LUQXu594H14hN8xLpbhO1e5yfq43BlPbnB5OnLXd27Aa7axV3Toa8BnfeW7CuiS2
vs+rfBBl33G27Ogn/48v0IRkIg==
-----END CERTIFICATE-----