Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3234203d3e20323635383136.roa
File:                     34352e3137352e34302e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          PEzwWQxngieQKTNFxJUdbfLiOdi+GfW68mKJQN3XzRE=
Subject key identifier:   67:F9:53:07:59:61:5A:91:19:3A:27:48:D3:03:18:B3:F0:10:A0:3A
Certificate issuer:       /CN=9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996
Certificate serial:       7EAF9396F53768B5D967B39C861A27C6BD7817F7
Authority key identifier: 9F:9A:55:54:E1:BA:C2:CE:4F:27:F7:B2:8B:3D:29:01:6A:1B:99:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3234203d3e20323635383136.roa
Signing time:             Wed 22 Jan 2025 13:45:00 +0000
ROA not before:           Wed 22 Jan 2025 13:40:00 +0000
ROA not after:            Wed 21 Jan 2026 13:45:00 +0000
asID:                     265816
IP address blocks:        45.175.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:af:93:96:f5:37:68:b5:d9:67:b3:9c:86:1a:27:c6:bd:78:17:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996
        Validity
            Not Before: Jan 22 13:40:00 2025 GMT
            Not After : Jan 21 13:45:00 2026 GMT
        Subject: CN=67F9530759615A91193A2748D30318B3F010A03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:cb:9e:16:10:24:43:fc:45:d0:b8:ff:ba:
                    95:42:6d:5c:c0:25:13:22:31:bf:20:54:15:45:73:
                    5b:4a:b1:ab:58:59:5e:8d:27:fd:ca:a0:8a:02:6e:
                    31:a5:50:63:47:25:48:77:dd:8a:a5:1f:29:11:1c:
                    ca:83:cc:7e:56:dc:84:77:03:8b:ee:d1:1c:6d:44:
                    d1:b0:5b:3e:c7:7e:e3:bb:8d:5d:79:b3:eb:d0:3d:
                    56:f6:68:79:c0:1b:01:e3:29:99:a3:89:91:dd:60:
                    b3:a2:63:53:c8:b5:c1:81:fc:f4:46:27:37:1c:c5:
                    ad:fe:3d:ef:42:48:9d:af:56:e0:34:94:c8:19:15:
                    b5:2a:c2:70:15:30:46:5f:02:9e:5e:a3:03:1b:ff:
                    fc:3f:67:92:68:7e:1b:ca:bf:0f:1d:a1:a5:69:7b:
                    d9:f4:9b:31:56:d3:db:c3:a8:d5:92:da:df:f2:33:
                    9b:22:01:ac:5d:c2:98:af:48:0d:f0:06:9b:0d:4a:
                    da:be:6f:7b:c8:f6:29:6f:03:ae:3a:d9:ee:84:02:
                    90:11:b6:d1:20:a0:95:75:59:e8:e4:15:6c:6d:e7:
                    49:d3:62:a3:0d:cd:4f:81:f6:c2:72:06:ed:23:0f:
                    2e:15:82:94:af:2e:d9:5e:d2:0e:68:5d:72:ce:6f:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:53:07:59:61:5A:91:19:3A:27:48:D3:03:18:B3:F0:10:A0:3A
            X509v3 Authority Key Identifier:
                keyid:9F:9A:55:54:E1:BA:C2:CE:4F:27:F7:B2:8B:3D:29:01:6A:1B:99:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:34:af:e5:35:ad:76:84:3f:38:8d:d0:fa:85:88:34:94:
         c1:68:d7:fa:2a:cc:9d:4b:0d:95:02:85:74:d8:7b:bf:07:5f:
         80:6b:9a:22:dc:d1:a1:4e:9c:dd:bf:71:c5:a5:99:1e:7e:9c:
         60:cb:da:be:a1:75:a9:25:14:34:a6:bc:b2:4f:e2:a3:0b:80:
         5d:1c:4b:ba:24:77:08:c4:2b:9c:81:97:6e:f8:a7:db:a8:a0:
         12:dc:bc:b3:90:89:b2:a6:04:f1:bb:fb:a4:00:4d:d0:66:01:
         bb:8d:1d:db:48:f7:cc:56:bc:85:1d:62:06:93:36:fb:8f:ec:
         7b:6e:f3:ea:00:d4:13:66:6d:4e:96:61:44:9d:a9:53:47:ac:
         3a:5a:71:b9:ab:2c:dd:98:8b:ad:7c:55:de:b2:d8:d0:ca:84:
         00:43:31:82:40:a0:69:38:c6:ca:b0:9f:4a:a0:68:7e:2e:fb:
         a0:a3:7b:60:94:45:fc:7e:1e:df:32:11:83:ba:a3:4a:24:ff:
         be:1b:6e:ac:24:e2:a4:02:97:27:11:01:0d:81:8c:d8:75:cb:
         8b:2a:d6:35:04:2f:b9:8a:d4:20:93:75:db:06:9c:58:82:17:
         68:cc:cf:b9:46:f8:c7:49:8a:3e:6a:7b:db:8e:6a:0f:5d:df:
         f6:8b:3a:47
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfq+TlvU3aLXZZ7Ochhonxr14F/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY5QTU1NTRFMUJBQzJDRTRGMjdGN0IyOEIzRDI5MDE2
QTFCOTk5NjAeFw0yNTAxMjIxMzQwMDBaFw0yNjAxMjExMzQ1MDBaMDMxMTAvBgNV
BAMTKDY3Rjk1MzA3NTk2MTVBOTExOTNBMjc0OEQzMDMxOEIzRjAxMEEwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7MueFhAkQ/xF0Lj/upVCbVzA
JRMiMb8gVBVFc1tKsatYWV6NJ/3KoIoCbjGlUGNHJUh33YqlHykRHMqDzH5W3IR3
A4vu0RxtRNGwWz7HfuO7jV15s+vQPVb2aHnAGwHjKZmjiZHdYLOiY1PItcGB/PRG
Jzccxa3+Pe9CSJ2vVuA0lMgZFbUqwnAVMEZfAp5eowMb//w/Z5JofhvKvw8doaVp
e9n0mzFW09vDqNWS2t/yM5siAaxdwpivSA3wBpsNStq+b3vI9ilvA6462e6EApAR
ttEgoJV1WejkFWxt50nTYqMNzU+B9sJyBu0jDy4VgpSvLtle0g5oXXLOb/gLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZ/lTB1lhWpEZOidI0wMYs/AQoDowHwYDVR0j
BBgwFoAUn5pVVOG6ws5PJ/eyiz0pAWobmZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MUI2NjFCMDAxRkVCMEI2RTYzQ0M0Rjc2Mzc2QUQ1Qjk0
NUE5MjQyRTBEMDI1ODk1MzEzRTgyRjZDQTIxQTMyLzAvOUY5QTU1NTRFMUJBQzJD
RTRGMjdGN0IyOEIzRDI5MDE2QTFCOTk5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjlBNTU1NEUxQkFDMkNFNEYy
N0Y3QjI4QjNEMjkwMTZBMUI5OTk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTFCNjYxQjAwMUZFQjBCNkU2M0NDNEY3NjM3NkFENUI5NDVBOTI0MkUw
RDAyNTg5NTMxM0U4MkY2Q0EyMUEzMi8wLzM0MzUyZTMxMzczNTJlMzQzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2vKDAN
BgkqhkiG9w0BAQsFAAOCAQEABF80r+U1rXaEPziN0PqFiDSUwWjX+irMnUsNlQKF
dNh7vwdfgGuaItzRoU6c3b9xxaWZHn6cYMvavqF1qSUUNKa8sk/iowuAXRxLuiR3
CMQrnIGXbvin26igEty8s5CJsqYE8bv7pABN0GYBu40d20j3zFa8hR1iBpM2+4/s
e27z6gDUE2ZtTpZhRJ2pU0esOlpxuass3ZiLrXxV3rLY0MqEAEMxgkCgaTjGyrCf
SqBofi77oKN7YJRF/H4e3zIRg7qjSiT/vhturCTipAKXJxEBDYGM2HXLiyrWNQQv
uYrUIJN12wacWIIXaMzPuUb4x0mKPmp7245qD13f9os6Rw==
-----END CERTIFICATE-----