Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/df505e97bea0e8c9d9f3cfaa771d9c8864ce00eb.roa
File:                     df505e97bea0e8c9d9f3cfaa771d9c8864ce00eb.roa (raw, json)
Hash identifier:          PprCOIEl9gBd8Sqn199ari5dMixfK+qVmWnth/0w/Vc=
Subject key identifier:   CD:08:14:59:C5:69:05:74:6D:9E:3B:99:94:C4:75:13:CD:70:07:9C
Certificate issuer:       /CN=b53271ee2840841c1d9b827c8a9b459c25cb2f8e
Certificate serial:       247ABC
Authority key identifier: AA:34:1B:1B:38:49:6B:1E:BC:C6:F7:6D:96:CB:19:AF:EB:8A:4F:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b53271ee2840841c1d9b827c8a9b459c25cb2f8e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/df505e97bea0e8c9d9f3cfaa771d9c8864ce00eb.roa
Signing time:             Fri 29 Dec 2023 13:48:44 +0000
ROA not before:           Fri 29 Dec 2023 13:48:44 +0000
ROA not after:            Mon 29 Dec 2025 13:48:44 +0000
asID:                     267885
IP address blocks:        45.177.16.0/22 maxlen: 24
                          2803:5a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390716 (0x247abc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53271ee2840841c1d9b827c8a9b459c25cb2f8e
        Validity
            Not Before: Dec 29 13:48:44 2023 GMT
            Not After : Dec 29 13:48:44 2025 GMT
        Subject: CN=df505e97bea0e8c9d9f3cfaa771d9c8864ce00eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:5f:84:3c:70:e9:85:a6:9f:b4:d6:eb:65:
                    b0:07:6d:3a:44:f5:cc:77:9e:ec:45:a7:0b:f5:7c:
                    c9:3d:30:10:8d:b1:b6:d4:db:b2:09:04:73:2d:48:
                    8c:15:de:3d:80:0b:21:d4:88:8a:f0:b4:fe:8e:11:
                    90:2a:e5:e5:ad:03:50:a1:5f:00:d8:d2:be:94:8f:
                    fb:a1:b0:17:b6:19:1d:f6:2c:a1:e0:9c:26:95:f7:
                    2f:22:4e:32:c8:9a:b3:b1:a7:41:9d:33:6d:b2:75:
                    76:76:1c:8b:1f:fc:bd:5a:c7:06:04:79:31:fc:9d:
                    ea:aa:c0:17:a3:6a:48:55:a8:3a:db:09:cd:ea:ec:
                    bd:ff:b4:34:62:61:7b:6b:7b:28:72:7d:70:63:ca:
                    2e:43:23:5b:d2:43:bb:a3:9e:d8:4a:10:fc:01:a3:
                    db:74:75:86:ac:73:f2:17:0c:82:1f:86:75:42:fc:
                    33:ed:33:78:44:c8:a1:fb:1c:4e:39:a9:da:b7:db:
                    4e:c1:37:3b:16:75:fa:c6:8d:2a:10:c4:8d:b6:6c:
                    6c:ca:f9:34:0f:5e:97:d9:4d:55:ad:be:e3:b3:91:
                    31:e6:b0:5f:1f:44:85:c2:48:a4:c2:0f:23:58:8a:
                    be:c8:d7:cd:46:1e:23:d3:ee:52:54:68:25:ef:0b:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:14:59:C5:69:05:74:6D:9E:3B:99:94:C4:75:13:CD:70:07:9C
            X509v3 Authority Key Identifier:
                keyid:AA:34:1B:1B:38:49:6B:1E:BC:C6:F7:6D:96:CB:19:AF:EB:8A:4F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b53271ee2840841c1d9b827c8a9b459c25cb2f8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/df505e97bea0e8c9d9f3cfaa771d9c8864ce00eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/b53271ee2840841c1d9b827c8a9b459c25cb2f8e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.16.0/22
                IPv6:
                  2803:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:a1:cd:07:1f:76:23:88:db:00:dd:1b:63:7c:3c:9d:ea:
         eb:07:f0:6b:d0:38:ac:fd:71:eb:91:2d:93:52:08:fe:5c:0f:
         37:c3:76:61:0a:f8:da:e2:ab:1f:34:eb:f8:b8:21:c9:6e:c4:
         08:9d:13:a3:56:a4:9c:f8:21:4c:57:73:cd:4f:ab:a7:2f:b0:
         68:4a:bb:f6:54:21:29:05:71:f1:ba:55:46:87:58:22:75:3b:
         43:7a:bf:4d:2f:53:2f:fb:1b:60:5c:f1:75:c9:7e:dc:e4:00:
         f3:21:38:ce:90:a8:3d:ef:70:1a:db:64:21:0d:57:b5:f6:ec:
         c2:e4:59:31:17:e4:1f:69:aa:b0:1d:b6:cf:c6:fe:00:3c:2f:
         4e:47:c2:76:dc:f5:a4:61:6b:c5:db:de:95:27:b5:a0:a5:32:
         3d:19:6c:05:95:e4:5c:54:b2:db:73:53:1c:df:b4:20:ec:c2:
         b8:c2:54:a9:9f:14:0c:3e:00:46:ef:65:16:a1:b2:34:dd:ba:
         f1:45:9f:7c:86:a1:a0:d0:a6:ce:00:d9:40:74:e2:6d:8b:ca:
         a2:f8:77:c1:91:ee:90:08:32:d4:d4:43:0f:db:63:8f:d9:08:
         50:12:e3:5e:ea:7f:8f:96:39:d7:8f:28:01:31:ea:be:57:77:
         66:3e:2a:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJHq8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
MzI3MWVlMjg0MDg0MWMxZDliODI3YzhhOWI0NTljMjVjYjJmOGUwHhcNMjMxMjI5
MTM0ODQ0WhcNMjUxMjI5MTM0ODQ0WjAzMTEwLwYDVQQDEyhkZjUwNWU5N2JlYTBl
OGM5ZDlmM2NmYWE3NzFkOWM4ODY0Y2UwMGViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyQhfhDxw6YWmn7TW62WwB206RPXMd57sRacL9XzJPTAQjbG2
1NuyCQRzLUiMFd49gAsh1IiK8LT+jhGQKuXlrQNQoV8A2NK+lI/7obAXthkd9iyh
4JwmlfcvIk4yyJqzsadBnTNtsnV2dhyLH/y9WscGBHkx/J3qqsAXo2pIVag62wnN
6uy9/7Q0YmF7a3socn1wY8ouQyNb0kO7o57YShD8AaPbdHWGrHPyFwyCH4Z1Qvwz
7TN4RMih+xxOOanat9tOwTc7FnX6xo0qEMSNtmxsyvk0D16X2U1Vrb7js5Ex5rBf
H0SFwkikwg8jWIq+yNfNRh4j0+5SVGgl7wsF8wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFM0IFFnFaQV0bZ47mZTEdRPNcAecMB8GA1UdIwQYMBaAFKo0Gxs4SWsevMb3
bZbLGa/rik+mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjUzMjcx
ZWUyODQwODQxYzFkOWI4MjdjOGE5YjQ1OWMyNWNiMmY4ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDA0ZTlmYzYtZGJhYy00ZGYxLThmNjUtNjFiZTk2
NTk3ZWIwL2RmNTA1ZTk3YmVhMGU4YzlkOWYzY2ZhYTc3MWQ5Yzg4NjRjZTAwZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMDRlOWZjNi1kYmFjLTRkZjEtOGY2NS02MWJl
OTY1OTdlYjAvYjUzMjcxZWUyODQwODQxYzFkOWI4MjdjOGE5YjQ1OWMyNWNiMmY4
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2xEDANBAIAAjAHAwUAKANaYDANBgkqhkiG9w0BAQsFAAOC
AQEAMfuhzQcfdiOI2wDdG2N8PJ3q6wfwa9A4rP1x65Etk1II/lwPN8N2YQr42uKr
HzTr+LghyW7ECJ0To1aknPghTFdzzU+rpy+waEq79lQhKQVx8bpVRodYInU7Q3q/
TS9TL/sbYFzxdcl+3OQA8yE4zpCoPe9wGttkIQ1XtfbswuRZMRfkH2mqsB22z8b+
ADwvTkfCdtz1pGFrxdvelSe1oKUyPRlsBZXkXFSy23NTHN+0IOzCuMJUqZ8UDD4A
Ru9lFqGyNN268UWffIahoNCmzgDZQHTibYvKovh3wZHukAgy1NRDD9tjj9kIUBLj
Xup/j5Y5148oATHqvld3Zj4qDw==
-----END CERTIFICATE-----