Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/8747765bf7327e310d6bb0eca2c13f413324241d.roa
File:                     8747765bf7327e310d6bb0eca2c13f413324241d.roa (raw, json)
Hash identifier:          sHbUvzVhpNDU60A5bqv4BJES4T6pXLR5Y2X7H6V9b8M=
Subject key identifier:   9B:7B:99:30:8D:C0:ED:13:3B:F1:C8:C8:7E:42:8A:10:8F:8F:2A:91
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       237EF0
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/8747765bf7327e310d6bb0eca2c13f413324241d.roa
Signing time:             Thu 06 Jul 2023 04:48:53 +0000
ROA not before:           Wed 05 Jul 2023 04:48:52 +0000
ROA not after:            Sun 06 Jul 2025 04:48:52 +0000
asID:                     52468
IP address blocks:        45.225.44.0/22 maxlen: 24
                          2803:d220::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326256 (0x237ef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Jul  5 04:48:52 2023 GMT
            Not After : Jul  6 04:48:52 2025 GMT
        Subject: CN=8747765bf7327e310d6bb0eca2c13f413324241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:2e:cc:65:ea:e3:4a:2b:06:c3:f8:22:8a:
                    4c:72:d0:7c:c1:f6:7e:f0:67:d2:a5:24:a7:a8:a6:
                    61:62:fb:9a:1f:85:0b:4f:56:04:b1:6c:71:ce:84:
                    dc:12:3c:19:0c:d7:6d:19:47:f1:28:b8:3b:4b:7f:
                    ad:7d:bd:93:3a:6c:f4:29:7b:09:16:07:aa:79:1d:
                    bf:ba:fd:1c:2c:60:97:13:0d:fc:70:34:dc:5d:5a:
                    63:61:28:fc:9d:0d:91:2d:45:c8:d7:09:84:40:03:
                    8b:d8:90:c0:f0:5f:a9:d4:ef:83:27:08:c6:3d:77:
                    4c:f7:44:d4:0e:68:be:67:6f:25:04:40:31:e7:01:
                    42:c9:91:b0:ec:d0:00:9a:b0:ac:be:9e:29:0e:2e:
                    ef:90:01:86:08:f4:f1:5c:66:ed:76:ac:01:76:ec:
                    4f:5c:58:ac:8a:a5:48:8e:69:67:b5:f1:1f:ba:36:
                    65:78:0e:a8:a8:30:44:64:c2:92:fd:e3:69:26:e1:
                    b6:4e:46:3b:fd:4a:26:55:6d:b4:41:be:47:7f:ba:
                    e5:9e:00:7e:b2:d1:cc:ab:63:d1:d8:fd:b4:83:f3:
                    65:bd:0f:5d:62:77:5a:77:e6:78:a9:95:44:ee:9f:
                    46:ef:b4:ad:3d:9f:2f:75:3f:da:e6:5a:f1:a7:f0:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:99:30:8D:C0:ED:13:3B:F1:C8:C8:7E:42:8A:10:8F:8F:2A:91
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/8747765bf7327e310d6bb0eca2c13f413324241d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.44.0/22
                IPv6:
                  2803:d220::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:88:a1:24:04:8a:ef:2d:00:0d:0a:7f:ec:1e:66:a2:d3:
         5f:a1:92:79:b4:86:c1:9f:94:55:1c:40:4b:5c:99:ab:31:de:
         aa:04:52:66:da:bd:f0:82:85:66:e7:8e:3a:52:3d:5a:bd:9e:
         76:5c:c7:7d:e0:3e:34:0c:7c:cd:a2:94:ab:93:0c:fd:d5:a5:
         33:36:04:3f:60:c5:b7:d6:7a:81:4f:09:90:f0:04:0d:9c:c8:
         d3:23:1d:ef:40:95:ae:a3:2d:8c:ec:2a:b9:55:85:34:9f:f1:
         46:92:05:4f:f9:30:5f:09:2e:df:17:83:0f:ee:b3:5a:d3:05:
         4b:10:84:01:53:fe:61:cb:cc:96:ee:ed:5a:79:bc:46:28:29:
         25:c4:d5:28:ff:d7:8e:b7:5a:71:04:8a:2d:eb:8e:20:29:db:
         32:06:10:dc:ff:c7:a9:3b:d9:df:a3:64:0f:23:20:fc:6e:9f:
         6b:3d:7e:74:cf:ec:7f:36:0f:57:9d:a8:2f:65:bc:e8:1a:26:
         d1:9d:ff:3a:fe:a6:dc:6f:63:8e:06:bb:fb:8e:2d:e4:64:f4:
         57:f1:02:c5:2b:e6:3b:2f:9d:2c:11:4e:97:7b:fd:95:12:6c:
         53:59:42:69:7a:51:fd:d8:a7:a8:4f:d3:32:d7:a8:0a:58:be:
         5e:08:c1:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDI37wMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
M2ExZDdmZmUyYTU0M2I2NjE3NTljNzI4ZDkyNzRjZmFhNDA2MWYwHhcNMjMwNzA1
MDQ0ODUyWhcNMjUwNzA2MDQ0ODUyWjAzMTEwLwYDVQQDEyg4NzQ3NzY1YmY3MzI3
ZTMxMGQ2YmIwZWNhMmMxM2Y0MTMzMjQyNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA32EuzGXq40orBsP4IopMctB8wfZ+8GfSpSSnqKZhYvuaH4UL
T1YEsWxxzoTcEjwZDNdtGUfxKLg7S3+tfb2TOmz0KXsJFgeqeR2/uv0cLGCXEw38
cDTcXVpjYSj8nQ2RLUXI1wmEQAOL2JDA8F+p1O+DJwjGPXdM90TUDmi+Z28lBEAx
5wFCyZGw7NAAmrCsvp4pDi7vkAGGCPTxXGbtdqwBduxPXFisiqVIjmlntfEfujZl
eA6oqDBEZMKS/eNpJuG2TkY7/UomVW20Qb5Hf7rlngB+stHMq2PR2P20g/NlvQ9d
Yndad+Z4qZVE7p9G77StPZ8vdT/a5lrxp/B+EQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJt7mTCNwO0TO/HIyH5CihCPjyqRMB8GA1UdIwQYMBaAFBiUvFB4+kwxapCu
YsWCAjD1oR5cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDEzYTFk
N2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZhNGE0ODktYWNlYS00YzYwLThmNGUtMzQ5YzYz
ODdlZWViLzg3NDc3NjViZjczMjdlMzEwZDZiYjBlY2EyYzEzZjQxMzMyNDI0MWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmE0YTQ4OS1hY2VhLTRjNjAtOGY0ZS0zNDlj
NjM4N2VlZWIvNDEzYTFkN2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3hLDANBAIAAjAHAwUAKAPSIDANBgkqhkiG9w0BAQsFAAOC
AQEAANWIoSQEiu8tAA0Kf+weZqLTX6GSebSGwZ+UVRxAS1yZqzHeqgRSZtq98IKF
ZueOOlI9Wr2edlzHfeA+NAx8zaKUq5MM/dWlMzYEP2DFt9Z6gU8JkPAEDZzI0yMd
70CVrqMtjOwquVWFNJ/xRpIFT/kwXwku3xeDD+6zWtMFSxCEAVP+YcvMlu7tWnm8
RigpJcTVKP/XjrdacQSKLeuOICnbMgYQ3P/HqTvZ36NkDyMg/G6faz1+dM/sfzYP
V52oL2W86Bom0Z3/Ov6m3G9jjga7+44t5GT0V/ECxSvmOy+dLBFOl3v9lRJsU1lC
aXpR/dinqE/TMteoCli+XgjBrw==
-----END CERTIFICATE-----