Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/66135d06bfa69da8dadd12bc8353405cee27c067.roa
File:                     66135d06bfa69da8dadd12bc8353405cee27c067.roa (raw, json)
Hash identifier:          zHARY48oq28a6NljDRHYw0s3TvX0ykTSaKY8KjYIVis=
Subject key identifier:   7D:BB:9A:72:33:8A:32:12:5A:A2:A9:E1:A5:98:92:77:A8:EE:B7:25
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       1FCD0B
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/66135d06bfa69da8dadd12bc8353405cee27c067.roa
Signing time:             Mon 05 Jun 2023 21:09:25 +0000
ROA not before:           Sun 04 Jun 2023 21:09:25 +0000
ROA not after:            Thu 05 Jun 2025 21:09:25 +0000
asID:                     18678
IP address blocks:        45.176.232.0/22 maxlen: 24
                          2803:9260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084107 (0x1fcd0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Jun  4 21:09:25 2023 GMT
            Not After : Jun  5 21:09:25 2025 GMT
        Subject: CN=66135d06bfa69da8dadd12bc8353405cee27c067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:7f:31:f1:6c:78:97:9e:d6:2a:a9:94:b9:
                    aa:78:f1:63:8a:14:8e:bb:c5:a5:48:33:b5:05:f9:
                    0c:20:5f:43:a2:a8:1d:84:24:10:5c:cb:d9:cc:95:
                    e2:08:de:3f:00:cc:bf:b8:44:6f:94:45:d1:ff:87:
                    2c:52:e3:7c:4b:61:fd:50:ad:78:f0:dd:fd:53:21:
                    29:15:8d:a4:0f:14:24:4c:60:e0:7c:96:27:5b:0a:
                    88:25:0b:c7:26:5d:53:60:1b:71:cc:48:b3:e3:ed:
                    cc:82:d1:0e:8b:a3:45:33:ac:00:5d:9e:76:d3:c6:
                    a7:e9:b0:40:23:82:79:8e:63:3d:2b:f9:d6:b3:81:
                    6b:a7:db:7e:12:b3:9c:65:61:fa:76:4b:2a:a7:df:
                    27:69:36:e1:0f:5e:be:69:77:4e:5c:23:e9:b4:93:
                    94:77:01:55:e6:87:7b:e9:23:fc:24:95:78:3d:0c:
                    fc:1e:4b:d3:77:73:32:45:aa:72:6e:fd:ed:86:7e:
                    92:04:1a:47:8e:b5:56:66:77:aa:f8:e3:2b:e3:a9:
                    a8:01:c5:b6:86:07:8d:0d:31:bb:22:a6:fa:d9:a6:
                    f3:96:74:b7:98:23:ae:9e:07:6d:60:a4:66:51:bf:
                    77:5a:0b:43:eb:05:a9:10:b6:2c:54:93:1f:c3:73:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BB:9A:72:33:8A:32:12:5A:A2:A9:E1:A5:98:92:77:A8:EE:B7:25
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/66135d06bfa69da8dadd12bc8353405cee27c067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:1a:c9:69:d9:d8:f0:98:0d:1f:b6:21:93:0f:7b:68:ea:
         2e:06:c8:80:43:a9:a6:39:c1:a7:e3:13:6b:bf:3a:0c:57:f1:
         b2:de:46:84:11:c5:db:0a:08:81:f0:7b:f7:31:97:8c:b2:2f:
         72:46:5e:6c:5c:73:08:75:da:c1:b6:57:38:cf:b9:3e:46:b4:
         5f:c1:e0:90:a2:9c:7a:be:93:af:fa:46:e3:b5:1e:19:03:82:
         1d:a7:5c:70:ec:4d:a2:0b:42:48:97:27:f6:38:0f:41:2c:b9:
         e8:3d:1d:a8:b3:01:7e:05:2d:55:5d:c6:52:6e:e6:fb:80:67:
         3e:a6:19:a6:54:d2:8d:63:21:59:62:67:4d:ff:33:79:3c:4d:
         d6:cf:e2:ef:f5:ed:a1:af:f0:30:a5:b3:97:60:b6:61:2f:e7:
         f1:a0:ad:13:42:81:79:56:eb:24:4c:7f:58:33:d9:20:12:e0:
         27:81:10:94:54:ba:7f:eb:3d:04:2f:f4:29:15:e1:fe:8e:da:
         7c:9b:10:69:29:28:7f:5a:c3:ab:88:a0:25:2c:04:ff:ee:6f:
         be:ce:8e:b0:e8:32:2d:c0:b3:d2:c6:7f:e6:f5:4c:41:8e:d4:
         e7:5d:a8:e1:ba:50:df:82:09:87:a1:4c:d0:a0:67:f4:ef:d0:
         e9:4a:eb:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDH80LMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM1
OWJiYjA3ZDNmZTM4NGY5ZTJlZjZlZWJjZjk5MjgzODMzZjNjMGMwHhcNMjMwNjA0
MjEwOTI1WhcNMjUwNjA1MjEwOTI1WjAzMTEwLwYDVQQDEyg2NjEzNWQwNmJmYTY5
ZGE4ZGFkZDEyYmM4MzUzNDA1Y2VlMjdjMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArIN/MfFseJee1iqplLmqePFjihSOu8WlSDO1BfkMIF9Doqgd
hCQQXMvZzJXiCN4/AMy/uERvlEXR/4csUuN8S2H9UK148N39UyEpFY2kDxQkTGDg
fJYnWwqIJQvHJl1TYBtxzEiz4+3MgtEOi6NFM6wAXZ5208an6bBAI4J5jmM9K/nW
s4Frp9t+ErOcZWH6dksqp98naTbhD16+aXdOXCPptJOUdwFV5od76SP8JJV4PQz8
HkvTd3MyRapybv3thn6SBBpHjrVWZneq+OMr46moAcW2hgeNDTG7Iqb62abzlnS3
mCOungdtYKRmUb93WgtD6wWpELYsVJMfw3NxPQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFH27mnIzijISWqKp4aWYkneo7rclMB8GA1UdIwQYMBaAFOgt4+hAKTqOab0n
d8s2nUmiPnGmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzU5YmJi
MDdkM2ZlMzg0ZjllMmVmNmVlYmNmOTkyODM4MzNmM2MwYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2I2N2U5ZDEtMTI0My00NWM4LTlhM2ItNGI2ZGU1
MzU4MzIyLzY2MTM1ZDA2YmZhNjlkYThkYWRkMTJiYzgzNTM0MDVjZWUyN2MwNjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYjY3ZTlkMS0xMjQzLTQ1YzgtOWEzYi00YjZk
ZTUzNTgzMjIvMzU5YmJiMDdkM2ZlMzg0ZjllMmVmNmVlYmNmOTkyODM4MzNmM2Mw
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2w6DANBAIAAjAHAwUAKAOSYDANBgkqhkiG9w0BAQsFAAOC
AQEAG98ayWnZ2PCYDR+2IZMPe2jqLgbIgEOppjnBp+MTa786DFfxst5GhBHF2woI
gfB79zGXjLIvckZebFxzCHXawbZXOM+5Pka0X8HgkKKcer6Tr/pG47UeGQOCHadc
cOxNogtCSJcn9jgPQSy56D0dqLMBfgUtVV3GUm7m+4BnPqYZplTSjWMhWWJnTf8z
eTxN1s/i7/Xtoa/wMKWzl2C2YS/n8aCtE0KBeVbrJEx/WDPZIBLgJ4EQlFS6f+s9
BC/0KRXh/o7afJsQaSkof1rDq4igJSwE/+5vvs6OsOgyLcCz0sZ/5vVMQY7U512o
4bpQ34IJh6FM0KBn9O/Q6UrrTw==
-----END CERTIFICATE-----