Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/45661ac1e3c6462ddf8c4499a93e326633c28ca9.roa
File:                     45661ac1e3c6462ddf8c4499a93e326633c28ca9.roa (raw, json)
Hash identifier:          3NP8STkOCo8xLTFiIn2ZiFJ5HUJGTu2ZPjpbxyN5q0c=
Subject key identifier:   11:FE:87:DB:B2:E0:7C:51:9E:E8:1C:BE:37:A3:8A:7D:13:B0:23:21
Certificate issuer:       /CN=1579ac51896b95038727e3223b1d7ae2507073b5
Certificate serial:       23D5C9
Authority key identifier: 98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/45661ac1e3c6462ddf8c4499a93e326633c28ca9.roa
Signing time:             Fri 18 Aug 2023 02:50:55 +0000
ROA not before:           Thu 17 Aug 2023 02:50:54 +0000
ROA not after:            Mon 18 Aug 2025 02:50:54 +0000
asID:                     27796
IP address blocks:        138.186.142.0/24 maxlen: 24
                          2800:ba0:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348489 (0x23d5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1579ac51896b95038727e3223b1d7ae2507073b5
        Validity
            Not Before: Aug 17 02:50:54 2023 GMT
            Not After : Aug 18 02:50:54 2025 GMT
        Subject: CN=45661ac1e3c6462ddf8c4499a93e326633c28ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:01:a6:a3:16:4d:fc:d9:28:08:29:7f:f8:
                    9f:f8:cf:1e:7e:88:42:aa:4c:a0:dc:15:cc:c7:40:
                    4e:fc:7d:2b:39:38:d1:76:f4:f8:f9:48:42:40:d6:
                    c9:be:89:18:3d:45:3a:b9:dc:b2:eb:72:d3:3c:a8:
                    1b:20:4e:7d:f9:27:64:51:bd:23:f1:82:de:5e:23:
                    c6:ef:72:f8:cb:c3:57:ad:b7:f5:7b:8e:3c:17:3f:
                    6e:6b:82:6e:2d:3c:18:50:09:c3:b7:17:45:73:ad:
                    8f:55:8b:b1:90:c0:40:1d:69:ee:64:b1:2f:30:e0:
                    14:e1:b3:4c:a0:10:a8:17:d9:54:63:ab:59:10:e5:
                    bb:22:ac:67:a4:fb:55:c5:e0:04:84:f0:80:ff:05:
                    8f:f0:95:c0:38:67:f9:83:ae:66:f5:e4:57:29:d0:
                    97:96:90:ef:72:62:46:b7:5c:b3:fe:c1:3a:aa:ad:
                    4f:7f:98:7f:28:06:4a:ab:1a:81:c4:a6:b4:c4:e9:
                    ca:de:75:34:c6:53:75:ca:45:d0:b2:52:88:47:57:
                    c3:0a:19:84:5e:21:bb:1f:dc:30:28:55:0f:9c:64:
                    0b:65:60:df:47:35:ab:d5:30:bb:96:6e:bd:60:6f:
                    77:26:9a:9f:ee:b4:00:60:3b:b7:bf:0d:53:83:f6:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FE:87:DB:B2:E0:7C:51:9E:E8:1C:BE:37:A3:8A:7D:13:B0:23:21
            X509v3 Authority Key Identifier:
                keyid:98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/45661ac1e3c6462ddf8c4499a93e326633c28ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.142.0/24
                IPv6:
                  2800:ba0:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:fd:05:66:5d:88:81:14:97:89:7a:a1:e5:e9:d2:93:81:
         75:25:d7:80:15:fe:34:9a:81:b5:25:f9:41:5a:00:33:83:83:
         33:82:9f:b3:cf:ac:c9:6a:e7:71:96:2d:c0:a2:3f:5a:46:ee:
         25:5a:ac:10:ba:1e:72:87:bf:6a:18:30:c3:2a:57:fc:cf:b7:
         a7:1e:c4:75:7f:6a:74:a7:cf:c4:5f:55:ec:09:d5:50:cd:8b:
         c0:98:a4:aa:34:2a:fc:9f:df:4b:07:65:d7:7d:8e:d3:ed:50:
         dd:00:33:38:61:20:6a:22:d9:0c:84:06:26:17:df:d6:39:1e:
         03:ae:d8:a8:9c:37:7c:de:87:a2:9e:a9:eb:67:ef:e9:1f:7c:
         ac:28:d8:f2:d9:a3:b1:f3:46:8c:8c:00:97:39:81:3c:f1:ed:
         cc:83:4c:d5:e4:bc:3e:fd:2c:cb:1a:4b:01:b0:73:67:dd:e5:
         e4:b9:aa:22:27:6c:1a:6d:2f:37:8d:7e:ed:d5:25:01:6d:84:
         59:c5:74:49:1c:50:1e:fb:88:72:d3:a0:b0:87:ef:59:83:76:
         5a:b4:b0:c9:8f:dd:57:a3:dc:a1:23:04:75:d8:99:22:71:ac:
         6a:ed:94:e2:51:5d:79:ce:53:6e:4c:1d:a9:08:ce:ca:ba:2c:
         c4:c1:ab:46
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDI9XJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
NzlhYzUxODk2Yjk1MDM4NzI3ZTMyMjNiMWQ3YWUyNTA3MDczYjUwHhcNMjMwODE3
MDI1MDU0WhcNMjUwODE4MDI1MDU0WjAzMTEwLwYDVQQDEyg0NTY2MWFjMWUzYzY0
NjJkZGY4YzQ0OTlhOTNlMzI2NjMzYzI4Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo8kBpqMWTfzZKAgpf/if+M8efohCqkyg3BXMx0BO/H0rOTjR
dvT4+UhCQNbJvokYPUU6udyy63LTPKgbIE59+SdkUb0j8YLeXiPG73L4y8NXrbf1
e448Fz9ua4JuLTwYUAnDtxdFc62PVYuxkMBAHWnuZLEvMOAU4bNMoBCoF9lUY6tZ
EOW7IqxnpPtVxeAEhPCA/wWP8JXAOGf5g65m9eRXKdCXlpDvcmJGt1yz/sE6qq1P
f5h/KAZKqxqBxKa0xOnK3nU0xlN1ykXQslKIR1fDChmEXiG7H9wwKFUPnGQLZWDf
RzWr1TC7lm69YG93Jpqf7rQAYDu3vw1Tg/ZxjwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFBH+h9uy4HxRnugcvjejin0TsCMhMB8GA1UdIwQYMBaAFJhC/GGjcU7jwFMr
KvNkkjsXF9OSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTU3OWFj
NTE4OTZiOTUwMzg3MjdlMzIyM2IxZDdhZTI1MDcwNzNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmZiOWI3ZmUtZThmZi00ZGE4LTkyNTYtZGY1OWYx
NjVmOTFkLzQ1NjYxYWMxZTNjNjQ2MmRkZjhjNDQ5OWE5M2UzMjY2MzNjMjhjYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZmI5YjdmZS1lOGZmLTRkYTgtOTI1Ni1kZjU5
ZjE2NWY5MWQvMTU3OWFjNTE4OTZiOTUwMzg3MjdlMzIyM2IxZDdhZTI1MDcwNzNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAIq6jjAPBAIAAjAJAwcAKAALoAAUMA0GCSqGSIb3DQEBCwUA
A4IBAQBec/0FZl2IgRSXiXqh5enSk4F1JdeAFf40moG1JflBWgAzg4Mzgp+zz6zJ
audxli3Aoj9aRu4lWqwQuh5yh79qGDDDKlf8z7enHsR1f2p0p8/EX1XsCdVQzYvA
mKSqNCr8n99LB2XXfY7T7VDdADM4YSBqItkMhAYmF9/WOR4DrtionDd83oeinqnr
Z+/pH3ysKNjy2aOx80aMjACXOYE88e3Mg0zV5Lw+/SzLGksBsHNn3eXkuaoiJ2wa
bS83jX7t1SUBbYRZxXRJHFAe+4hy06Cwh+9Zg3ZatLDJj91Xo9yhIwR12Jkicaxq
7ZTiUV15zlNuTB2pCM7KuizEwatG
-----END CERTIFICATE-----