Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/cb34b6cd7178d77734ce5743d4923253957579d6.roa
File:                     cb34b6cd7178d77734ce5743d4923253957579d6.roa (raw, json)
Hash identifier:          5cmNIEyxyc1KlZYtvmXOnYmcBgnJJeV7ioPqnEDC1cs=
Subject key identifier:   E6:40:30:B4:BF:B0:50:1F:99:B3:F5:21:18:EE:84:15:7F:F7:4C:95
Certificate issuer:       /CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
Certificate serial:       0B85B1
Authority key identifier: 0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/cb34b6cd7178d77734ce5743d4923253957579d6.roa
Signing time:             Thu 21 Mar 2024 15:03:59 +0000
ROA not before:           Thu 21 Mar 2024 15:03:59 +0000
ROA not after:            Sat 21 Mar 2026 15:03:59 +0000
asID:                     267912
IP address blocks:        45.179.72.0/22 maxlen: 24
                          2803:f660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755121 (0xb85b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
        Validity
            Not Before: Mar 21 15:03:59 2024 GMT
            Not After : Mar 21 15:03:59 2026 GMT
        Subject: CN=cb34b6cd7178d77734ce5743d4923253957579d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:8c:c5:19:44:ca:8f:da:89:a1:aa:89:ee:
                    64:8a:c6:fd:5a:72:72:68:28:a4:3a:f7:f3:9d:64:
                    b2:f5:2e:d2:d1:85:4a:c9:7c:f2:49:2e:d9:a3:c1:
                    53:ab:47:7e:7f:fc:6e:4b:b5:93:b2:bf:53:82:32:
                    1e:9e:4c:40:6a:d2:ab:74:65:6c:7e:45:c3:ec:fd:
                    9d:3d:f4:6b:57:2c:13:6e:72:64:09:ae:86:e0:04:
                    e8:3f:5b:3c:78:b4:95:c1:e4:50:5b:eb:49:42:06:
                    8f:49:c6:e6:70:14:9f:b6:8e:9e:92:48:6c:45:de:
                    db:4b:43:90:12:1d:38:46:d5:f3:9d:22:8e:4b:fc:
                    10:dc:77:05:4c:fa:61:cc:30:5c:cc:3f:29:ea:6c:
                    64:5f:ed:f1:c5:e5:6b:25:33:94:f5:b8:8e:2e:5e:
                    19:50:a0:b7:ac:f5:6e:2b:ff:e3:23:3f:54:bb:2a:
                    6d:b3:23:a2:01:69:81:a4:ec:2d:70:05:11:ca:8c:
                    32:d5:f2:d1:4c:01:ab:5a:6f:75:77:8d:04:a5:5d:
                    10:83:81:b6:21:b2:52:21:03:f2:fe:e8:a2:e5:ac:
                    a7:5c:b3:8f:d5:10:05:67:05:2b:e5:02:b1:db:d3:
                    fe:38:a4:d2:01:59:69:66:fb:23:21:d8:9c:0f:6b:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:40:30:B4:BF:B0:50:1F:99:B3:F5:21:18:EE:84:15:7F:F7:4C:95
            X509v3 Authority Key Identifier:
                keyid:0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/cb34b6cd7178d77734ce5743d4923253957579d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.72.0/22
                IPv6:
                  2803:f660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:75:57:2f:b4:93:0a:51:e9:5a:f5:25:ea:ee:30:cb:69:
         76:42:5a:07:a0:38:cd:53:dd:37:c6:98:3e:3b:df:4b:0c:35:
         a2:80:86:0c:c4:7a:2e:4d:41:fe:b8:d2:e1:99:ab:80:f6:2d:
         9d:d9:f2:3e:fd:87:8b:aa:6e:2c:2a:41:9f:f9:56:df:c6:9d:
         17:54:0b:0a:22:bc:6c:64:b4:c5:87:7a:42:61:8f:a9:c3:57:
         85:f7:54:92:27:e0:92:8e:0c:6b:ac:1e:c2:e6:7d:e3:0f:3f:
         05:57:28:7a:17:ea:35:15:c8:67:81:47:0e:9b:c4:32:2a:ae:
         05:f3:08:d7:b1:36:24:8d:d7:46:cc:9b:ed:fd:7e:39:83:5a:
         31:ff:1a:fe:00:17:8f:8d:f9:f3:81:07:46:fe:cb:37:9d:d5:
         af:7c:32:50:22:3f:96:89:c7:68:e7:08:1a:3d:03:89:07:94:
         16:99:de:0c:21:ec:67:b4:aa:ca:05:00:8b:63:55:28:d4:83:
         07:ef:d9:bd:61:90:cf:cc:69:f7:3d:29:11:b1:4c:0a:ed:08:
         79:5c:49:9b:03:dc:31:23:f8:57:79:c0:06:a7:d9:27:e4:ec:
         e0:54:d0:dd:21:06:61:da:2c:0f:c5:85:e5:51:37:ba:10:f8:
         d6:d3:57:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC4WxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
OWFhN2E5NzBlYTk3ZTNhMjhmOGViNGE5N2M4YWQ2MGI2MjlhNzcwHhcNMjQwMzIx
MTUwMzU5WhcNMjYwMzIxMTUwMzU5WjAzMTEwLwYDVQQDEyhjYjM0YjZjZDcxNzhk
Nzc3MzRjZTU3NDNkNDkyMzI1Mzk1NzU3OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAosGMxRlEyo/aiaGqie5kisb9WnJyaCikOvfznWSy9S7S0YVK
yXzySS7Zo8FTq0d+f/xuS7WTsr9TgjIenkxAatKrdGVsfkXD7P2dPfRrVywTbnJk
Ca6G4AToP1s8eLSVweRQW+tJQgaPScbmcBSfto6ekkhsRd7bS0OQEh04RtXznSKO
S/wQ3HcFTPphzDBczD8p6mxkX+3xxeVrJTOU9biOLl4ZUKC3rPVuK//jIz9Uuypt
syOiAWmBpOwtcAURyowy1fLRTAGrWm91d40EpV0Qg4G2IbJSIQPy/uii5aynXLOP
1RAFZwUr5QKx29P+OKTSAVlpZvsjIdicD2vZjwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOZAMLS/sFAfmbP1IRjuhBV/90yVMB8GA1UdIwQYMBaAFAyj0n+KWYrKXmLD
Ghne+HT2Hie7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGM5YWE3
YTk3MGVhOTdlM2EyOGY4ZWI0YTk3YzhhZDYwYjYyOWE3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDY3OTllNTgtMGI2NS00ZmU4LTk0NGUtN2JmZGE0
M2Q2NDBmL2NiMzRiNmNkNzE3OGQ3NzczNGNlNTc0M2Q0OTIzMjUzOTU3NTc5ZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNjc5OWU1OC0wYjY1LTRmZTgtOTQ0ZS03YmZk
YTQzZDY0MGYvMGM5YWE3YTk3MGVhOTdlM2EyOGY4ZWI0YTk3YzhhZDYwYjYyOWE3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2zSDANBAIAAjAHAwUAKAP2YDANBgkqhkiG9w0BAQsFAAOC
AQEAW8J1Vy+0kwpR6Vr1JeruMMtpdkJaB6A4zVPdN8aYPjvfSww1ooCGDMR6Lk1B
/rjS4ZmrgPYtndnyPv2Hi6puLCpBn/lW38adF1QLCiK8bGS0xYd6QmGPqcNXhfdU
kifgko4Ma6wewuZ94w8/BVcoehfqNRXIZ4FHDpvEMiquBfMI17E2JI3XRsyb7f1+
OYNaMf8a/gAXj43584EHRv7LN53Vr3wyUCI/lonHaOcIGj0DiQeUFpneDCHsZ7Sq
ygUAi2NVKNSDB+/ZvWGQz8xp9z0pEbFMCu0IeVxJmwPcMSP4V3nABqfZJ+Ts4FTQ
3SEGYdosD8WF5VE3uhD41tNXbA==
-----END CERTIFICATE-----