Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/b1b8ac1efda234a763ff6021ad51220806aa01d8.roa
File:                     b1b8ac1efda234a763ff6021ad51220806aa01d8.roa (raw, json)
Hash identifier:          mIM2YQmUD/laZKIDIQz2gUz5ebAdWSyYthf5XdeHFGI=
Subject key identifier:   DD:4B:B9:E5:AC:C0:F7:20:F9:D5:E4:EE:17:24:ED:1F:C8:F5:78:95
Certificate issuer:       /CN=efec64f7ac53e798e9b5922f62077081e72cc466
Certificate serial:       02E96F
Authority key identifier: CD:D2:B1:05:0B:37:BF:64:CE:59:8F:1F:50:1F:47:D0:7E:A1:3D:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efec64f7ac53e798e9b5922f62077081e72cc466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/b1b8ac1efda234a763ff6021ad51220806aa01d8.roa
Signing time:             Tue 16 May 2023 15:58:52 +0000
ROA not before:           Mon 15 May 2023 15:58:52 +0000
ROA not after:            Fri 16 May 2025 15:58:52 +0000
asID:                     265578
IP address blocks:        45.174.172.0/24 maxlen: 24
                          2806:332::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190831 (0x2e96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efec64f7ac53e798e9b5922f62077081e72cc466
        Validity
            Not Before: May 15 15:58:52 2023 GMT
            Not After : May 16 15:58:52 2025 GMT
        Subject: CN=b1b8ac1efda234a763ff6021ad51220806aa01d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:21:bf:b3:8b:db:2d:08:0e:ff:e7:b7:31:
                    19:6f:5f:2f:84:3a:81:b8:bd:27:da:46:4e:ab:93:
                    32:8a:53:a7:3f:66:b5:a9:f5:8a:c1:40:22:77:f6:
                    9c:b4:0c:f0:c6:6f:20:07:c3:1b:38:0e:21:2a:c4:
                    9d:db:fb:a1:02:0d:41:47:7d:e1:b8:e0:28:3e:bd:
                    5d:bb:33:0b:73:d3:b2:d9:9a:70:9c:8f:58:86:57:
                    90:5e:b5:76:dd:1f:21:6a:a5:8d:3e:2f:0f:ee:fe:
                    b5:78:c4:dc:44:6e:38:22:08:d2:0c:93:91:ec:9d:
                    28:75:59:63:c9:e8:20:a1:da:0c:cf:04:28:10:dc:
                    21:02:d2:2a:27:ca:28:de:c4:5d:85:6c:b4:fd:7f:
                    ce:bb:a7:53:94:b8:1b:49:f1:a8:c1:21:7c:f3:b4:
                    b8:a2:a8:4c:63:6a:59:cb:bb:38:48:24:58:00:f5:
                    1b:40:d5:a3:7d:5f:48:50:a3:b5:90:4d:cb:cc:df:
                    32:b2:e4:ac:f2:54:3a:ae:00:2d:6a:42:a5:c3:81:
                    b0:74:b4:62:84:08:91:76:d0:81:dc:5b:fb:01:50:
                    5f:f2:4c:fd:55:93:f9:78:1a:76:34:d8:07:55:91:
                    be:77:80:71:a9:60:16:d1:b2:03:43:76:b8:29:dd:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:B9:E5:AC:C0:F7:20:F9:D5:E4:EE:17:24:ED:1F:C8:F5:78:95
            X509v3 Authority Key Identifier:
                keyid:CD:D2:B1:05:0B:37:BF:64:CE:59:8F:1F:50:1F:47:D0:7E:A1:3D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efec64f7ac53e798e9b5922f62077081e72cc466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/b1b8ac1efda234a763ff6021ad51220806aa01d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/efec64f7ac53e798e9b5922f62077081e72cc466.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.172.0/24
                IPv6:
                  2806:332::/37

    Signature Algorithm: sha256WithRSAEncryption
         17:98:46:03:7a:0c:29:3e:27:5f:52:3d:f8:4e:d2:4a:64:2f:
         1d:d1:69:c2:d1:43:db:a4:0f:47:7d:bc:9d:5f:ea:4f:61:87:
         78:95:c6:f4:87:5d:c4:c8:c1:82:63:7f:f8:57:9f:4d:96:0e:
         29:52:6d:ff:ad:cf:e8:0c:71:73:fd:2e:c7:1e:47:2f:17:72:
         82:5c:78:2d:ae:06:ca:31:d9:bd:84:e8:b9:b6:6b:62:ad:f7:
         0e:a9:97:b9:e9:f4:b6:a5:19:05:03:79:e2:35:6b:0b:26:45:
         2e:db:a5:42:c0:0e:84:28:b4:33:82:99:74:01:2e:f3:7f:9d:
         db:1a:05:e1:41:a6:0d:c1:0e:3d:03:e6:02:11:83:16:3b:9e:
         96:89:54:f8:51:b5:78:f4:6e:a3:04:e5:94:bc:b1:13:57:51:
         1d:eb:45:74:93:75:a0:ef:93:47:05:37:9a:49:59:bb:cf:38:
         75:62:65:bc:a5:e0:4a:a1:b7:ae:8b:6a:6c:39:ad:f6:0d:24:
         77:43:23:4e:e0:8e:79:40:d2:54:bb:93:0f:7e:40:a2:36:52:
         0b:4b:eb:e6:cd:bd:ce:10:a6:ab:70:ad:c9:02:a6:ad:a4:a0:
         ce:ce:d7:7e:24:93:55:7d:ae:b1:c0:67:12:e0:b1:31:69:83:
         84:2c:9b:fe
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDAulvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
ZWM2NGY3YWM1M2U3OThlOWI1OTIyZjYyMDc3MDgxZTcyY2M0NjYwHhcNMjMwNTE1
MTU1ODUyWhcNMjUwNTE2MTU1ODUyWjAzMTEwLwYDVQQDEyhiMWI4YWMxZWZkYTIz
NGE3NjNmZjYwMjFhZDUxMjIwODA2YWEwMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2cYhv7OL2y0IDv/ntzEZb18vhDqBuL0n2kZOq5MyilOnP2a1
qfWKwUAid/actAzwxm8gB8MbOA4hKsSd2/uhAg1BR33huOAoPr1duzMLc9Oy2Zpw
nI9YhleQXrV23R8haqWNPi8P7v61eMTcRG44IgjSDJOR7J0odVljyeggodoMzwQo
ENwhAtIqJ8oo3sRdhWy0/X/Ou6dTlLgbSfGowSF887S4oqhMY2pZy7s4SCRYAPUb
QNWjfV9IUKO1kE3LzN8ysuSs8lQ6rgAtakKlw4GwdLRihAiRdtCB3Fv7AVBf8kz9
VZP5eBp2NNgHVZG+d4BxqWAW0bIDQ3a4Kd0L2QIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFN1LueWswPcg+dXk7hck7R/I9XiVMB8GA1UdIwQYMBaAFM3SsQULN79kzlmP
H1AfR9B+oT3RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWZlYzY0
ZjdhYzUzZTc5OGU5YjU5MjJmNjIwNzcwODFlNzJjYzQ2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGY3OTQ0NGMtMTQ5ZC00NmVmLThiMmItZWVlM2Fj
Zjc3YTFlL2IxYjhhYzFlZmRhMjM0YTc2M2ZmNjAyMWFkNTEyMjA4MDZhYTAxZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZjc5NDQ0Yy0xNDlkLTQ2ZWYtOGIyYi1lZWUz
YWNmNzdhMWUvZWZlYzY0ZjdhYzUzZTc5OGU5YjU5MjJmNjIwNzcwODFlNzJjYzQ2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEAC2urDAOBAIAAjAIAwYDKAYDMgAwDQYJKoZIhvcNAQELBQAD
ggEBABeYRgN6DCk+J19SPfhO0kpkLx3RacLRQ9ukD0d9vJ1f6k9hh3iVxvSHXcTI
wYJjf/hXn02WDilSbf+tz+gMcXP9LsceRy8XcoJceC2uBsox2b2E6Lm2a2Kt9w6p
l7np9LalGQUDeeI1awsmRS7bpULADoQotDOCmXQBLvN/ndsaBeFBpg3BDj0D5gIR
gxY7npaJVPhRtXj0bqME5ZS8sRNXUR3rRXSTdaDvk0cFN5pJWbvPOHViZbyl4Eqh
t66Lamw5rfYNJHdDI07gjnlA0lS7kw9+QKI2UgtL6+bNvc4QpqtwrckCpq2koM7O
134kk1V9rrHAZxLgsTFpg4Qsm/4=
-----END CERTIFICATE-----