Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/756082dac92ce9914c1a33915e9b6cb0ba1707cb.roa
File:                     756082dac92ce9914c1a33915e9b6cb0ba1707cb.roa (raw, json)
Hash identifier:          gHmMBzu4Z8cPzNNQcoaMOdLkH6iDYjm+v1LDbtifVQU=
Subject key identifier:   0E:F1:CA:20:C4:F9:8E:A5:9D:00:63:1B:28:2F:8C:3B:38:A2:F4:65
Certificate issuer:       /CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Certificate serial:       25BD9F
Authority key identifier: E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/756082dac92ce9914c1a33915e9b6cb0ba1707cb.roa
Signing time:             Wed 13 Dec 2023 20:33:46 +0000
ROA not before:           Wed 13 Dec 2023 20:33:46 +0000
ROA not after:            Sat 13 Dec 2025 20:33:46 +0000
asID:                     266894
IP address blocks:        45.71.114.136/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473375 (0x25bd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1b531b01cd5446453179b34a5c11c87131d8df
        Validity
            Not Before: Dec 13 20:33:46 2023 GMT
            Not After : Dec 13 20:33:46 2025 GMT
        Subject: CN=756082dac92ce9914c1a33915e9b6cb0ba1707cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:87:e5:8e:69:6d:98:41:79:3b:f2:b5:39:
                    a0:7f:96:b3:e3:30:d4:1b:a5:77:01:86:d9:43:77:
                    f8:c5:e0:1c:5e:30:e0:6f:fb:b2:a6:9e:60:cb:c7:
                    49:33:54:37:cd:03:68:01:00:80:4d:8d:76:bf:87:
                    76:04:13:98:0d:ab:f0:15:b0:e7:62:24:2c:14:d4:
                    1c:35:c9:7e:b7:7d:cf:aa:c2:ce:87:79:93:ae:26:
                    bd:7c:c2:1a:93:9e:b3:8f:23:05:52:c9:09:90:9b:
                    92:a8:04:d9:4e:4e:c9:1b:d7:bd:ce:9a:f7:20:f3:
                    59:f2:30:89:65:b3:4c:48:98:c3:bf:59:19:42:57:
                    c5:a6:c7:29:94:d9:46:79:36:9b:96:35:84:c7:6b:
                    d0:bd:b0:f3:21:a4:f1:41:02:1e:ef:66:79:5b:a9:
                    b8:90:03:63:b1:8f:28:bc:ba:c6:db:8f:09:aa:40:
                    a6:3b:bf:f0:bf:ce:ad:62:73:73:10:c2:29:1d:c1:
                    cf:08:02:52:39:03:52:e9:41:69:4a:56:5d:ce:8a:
                    45:54:c5:07:ce:9e:53:69:d4:1b:b9:bd:5d:ef:09:
                    d3:f3:b2:6f:23:13:eb:34:28:9e:69:64:5b:ba:a7:
                    a9:61:9d:43:e1:cb:36:76:c7:d7:d0:1b:01:9c:b7:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F1:CA:20:C4:F9:8E:A5:9D:00:63:1B:28:2F:8C:3B:38:A2:F4:65
            X509v3 Authority Key Identifier:
                keyid:E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/756082dac92ce9914c1a33915e9b6cb0ba1707cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.114.136/29

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:46:eb:fe:db:d1:7e:85:b4:a5:2b:34:da:cf:90:9d:e4:
         70:10:07:78:04:f1:44:76:ff:a0:f4:ea:75:1d:e0:f7:06:84:
         2a:b7:6a:cd:dc:6e:25:e7:3b:09:64:d9:13:7c:65:cb:7f:a9:
         93:2e:9e:54:75:58:e2:f4:53:c1:6b:b1:0f:ea:f5:bb:a1:33:
         af:51:cc:b8:aa:93:08:f5:6b:5e:b9:7e:a6:19:87:54:91:45:
         c2:48:8c:3e:44:41:44:59:a1:e0:95:77:63:1f:e4:23:e2:72:
         84:b1:71:03:26:e6:cd:1d:9e:c2:52:43:32:34:f6:c2:e3:cb:
         89:7a:8e:a1:20:c1:f6:ce:9c:5d:33:9e:70:9a:45:4a:e7:62:
         ac:88:88:e0:af:c6:c0:0a:d8:d2:d9:91:ca:17:7c:3f:63:fb:
         39:80:d9:dd:5e:63:61:7f:69:ac:43:c2:6c:dd:31:37:71:6e:
         f6:11:79:88:ee:f8:69:0f:28:0f:9c:25:4f:5b:c2:25:83:d0:
         a9:33:15:b5:60:68:f1:2c:c7:2f:ae:4b:fe:f3:ad:04:c7:2c:
         8a:9b:04:4f:d0:dc:6f:59:83:b7:74:6c:4e:71:77:87:c9:d3:
         2b:52:f9:48:e2:08:ed:1a:c2:ef:6b:25:36:f5:33:a9:c2:07:
         60:86:37:4e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJb2fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
MWI1MzFiMDFjZDU0NDY0NTMxNzliMzRhNWMxMWM4NzEzMWQ4ZGYwHhcNMjMxMjEz
MjAzMzQ2WhcNMjUxMjEzMjAzMzQ2WjAzMTEwLwYDVQQDEyg3NTYwODJkYWM5MmNl
OTkxNGMxYTMzOTE1ZTliNmNiMGJhMTcwN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkgqH5Y5pbZhBeTvytTmgf5az4zDUG6V3AYbZQ3f4xeAcXjDg
b/uypp5gy8dJM1Q3zQNoAQCATY12v4d2BBOYDavwFbDnYiQsFNQcNcl+t33PqsLO
h3mTria9fMIak56zjyMFUskJkJuSqATZTk7JG9e9zpr3IPNZ8jCJZbNMSJjDv1kZ
QlfFpscplNlGeTabljWEx2vQvbDzIaTxQQIe72Z5W6m4kANjsY8ovLrG248JqkCm
O7/wv86tYnNzEMIpHcHPCAJSOQNS6UFpSlZdzopFVMUHzp5TadQbub1d7wnT87Jv
IxPrNCieaWRbuqepYZ1D4cs2dsfX0BsBnLcApwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFA7xyiDE+Y6lnQBjGygvjDs4ovRlMB8GA1UdIwQYMBaAFOGZSj+kvs+ad1x3
d2P/52v6LKS6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGExYjUz
MWIwMWNkNTQ0NjQ1MzE3OWIzNGE1YzExYzg3MTMxZDhkZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcyNjE1ZTUtNTU1Yi00YTdjLTkzYWItY2U4YTk2
M2E3Yzc1Lzc1NjA4MmRhYzkyY2U5OTE0YzFhMzM5MTVlOWI2Y2IwYmExNzA3Y2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzI2MTVlNS01NTViLTRhN2MtOTNhYi1jZThh
OTYzYTdjNzUvNGExYjUzMWIwMWNkNTQ0NjQ1MzE3OWIzNGE1YzExYzg3MTMxZDhk
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFAy1HcogwDQYJKoZIhvcNAQELBQADggEBADb+Ruv+29F+hbSl
KzTaz5Cd5HAQB3gE8UR2/6D06nUd4PcGhCq3as3cbiXnOwlk2RN8Zct/qZMunlR1
WOL0U8FrsQ/q9buhM69RzLiqkwj1a165fqYZh1SRRcJIjD5EQURZoeCVd2Mf5CPi
coSxcQMm5s0dnsJSQzI09sLjy4l6jqEgwfbOnF0znnCaRUrnYqyIiOCvxsAK2NLZ
kcoXfD9j+zmA2d1eY2F/aaxDwmzdMTdxbvYReYju+GkPKA+cJU9bwiWD0KkzFbVg
aPEsxy+uS/7zrQTHLIqbBE/Q3G9Zg7d0bE5xd4fJ0ytS+UjiCO0awu9rJTb1M6nC
B2CGN04=
-----END CERTIFICATE-----