Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/6eb5cfbecdc6104f066d6e75558145c75f1ef694.roa
File:                     6eb5cfbecdc6104f066d6e75558145c75f1ef694.roa (raw, json)
Hash identifier:          SQLZ6TXQTlvsOe1H5ibROoSPGSxqVIP+tDCw7ZSpI4o=
Subject key identifier:   27:B3:2B:CC:56:C3:12:B7:B5:94:39:DA:1D:C6:A0:AE:2B:99:23:53
Certificate issuer:       /CN=65dc67335c4cd12864224099a750c7822b83afa2
Certificate serial:       24FF
Authority key identifier: 16:9B:E1:30:FD:AB:16:3E:17:F6:BC:8C:4D:5D:4B:83:FB:B7:EA:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65dc67335c4cd12864224099a750c7822b83afa2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/6eb5cfbecdc6104f066d6e75558145c75f1ef694.roa
Signing time:             Mon 26 Jun 2023 18:45:14 +0000
ROA not before:           Sun 25 Jun 2023 18:45:14 +0000
ROA not after:            Thu 26 Jun 2025 18:45:14 +0000
asID:                     265610
IP address blocks:        45.189.156.0/22 maxlen: 24
                          2806:367::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9471 (0x24ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc67335c4cd12864224099a750c7822b83afa2
        Validity
            Not Before: Jun 25 18:45:14 2023 GMT
            Not After : Jun 26 18:45:14 2025 GMT
        Subject: CN=6eb5cfbecdc6104f066d6e75558145c75f1ef694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:71:95:38:fd:36:0d:fc:44:dc:d1:a6:09:
                    cf:d6:7f:0b:7a:0b:22:ab:3e:c2:3f:6d:7a:73:04:
                    d5:b1:76:a9:50:71:75:00:fb:67:fe:6f:4d:53:63:
                    fc:f8:80:d7:e6:27:39:4b:d2:7a:aa:e6:7b:15:06:
                    90:60:ac:88:0b:5b:46:d7:a8:72:d2:fc:4a:22:ce:
                    e8:7e:e6:5e:47:0a:38:c2:bc:a2:90:41:c7:86:21:
                    ca:05:42:9d:af:89:35:a8:36:84:37:03:c1:ba:f1:
                    0d:70:7a:ee:0d:c8:fe:5c:00:59:14:1f:93:e9:5c:
                    0a:a9:63:f1:ba:eb:8e:c4:f9:e0:e0:ef:f5:67:d2:
                    0e:73:37:eb:8e:e1:63:a6:9b:d3:00:06:3e:ca:34:
                    16:57:4a:12:eb:1d:90:ca:95:7a:12:7f:ed:b8:5c:
                    c2:dc:30:db:28:df:4b:30:b0:71:de:a8:90:12:11:
                    7c:74:36:f9:8b:aa:93:48:e1:99:78:c6:5c:1f:9e:
                    7e:5b:bf:52:0f:70:08:4a:b2:74:d3:a0:10:29:b6:
                    b6:44:90:5c:51:52:b6:d9:e8:60:8d:f5:10:72:ba:
                    ad:dc:6b:76:a2:ce:98:ce:be:a4:87:8a:9f:86:b7:
                    9e:41:89:1b:37:9d:ca:d8:f3:db:c4:f0:36:10:2b:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B3:2B:CC:56:C3:12:B7:B5:94:39:DA:1D:C6:A0:AE:2B:99:23:53
            X509v3 Authority Key Identifier:
                keyid:16:9B:E1:30:FD:AB:16:3E:17:F6:BC:8C:4D:5D:4B:83:FB:B7:EA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65dc67335c4cd12864224099a750c7822b83afa2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/6eb5cfbecdc6104f066d6e75558145c75f1ef694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/65dc67335c4cd12864224099a750c7822b83afa2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.156.0/22
                IPv6:
                  2806:367::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:3c:4a:e9:cc:d5:c7:4a:d5:d4:70:97:fa:b2:3f:1d:d5:
         11:a3:3b:90:e1:e6:1a:64:59:ae:30:af:ef:ff:55:11:69:e3:
         9b:a1:db:ac:79:98:45:4c:95:34:32:cd:8e:a5:fb:57:31:9b:
         56:9c:03:e7:31:63:af:99:1f:36:ef:39:b9:dc:e6:e9:ba:fd:
         79:b2:76:2e:c4:aa:d7:6f:08:0a:ef:2a:e7:70:f6:d1:96:18:
         10:ed:52:86:81:a7:66:1e:93:ac:bd:cb:41:85:72:66:5d:af:
         d5:64:2f:7c:0d:9a:98:88:1d:86:b3:a2:b5:7f:58:6e:0a:68:
         30:7d:0e:5c:0d:ff:e4:ea:6e:da:ed:c2:0a:06:bf:81:28:18:
         13:14:ad:41:a3:4d:39:c6:fb:d9:ee:e5:3e:9d:dc:6b:e6:a6:
         b9:22:bf:e6:8f:33:10:fa:c3:85:3d:b2:e9:5b:08:06:8f:3f:
         88:5e:4a:b4:ad:80:75:41:3a:63:9a:20:23:cd:81:7f:b4:e8:
         62:95:ae:76:e5:94:1a:d9:8a:eb:97:2f:b7:9a:47:e8:ff:e6:
         ee:3a:b0:25:de:37:8f:18:31:a3:80:0d:0f:66:3c:ec:bb:94:
         dd:2d:66:9d:fe:f7:26:93:5e:30:06:7c:ae:1b:8c:73:85:58:
         2b:e5:e5:70
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICJP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVk
YzY3MzM1YzRjZDEyODY0MjI0MDk5YTc1MGM3ODIyYjgzYWZhMjAeFw0yMzA2MjUx
ODQ1MTRaFw0yNTA2MjYxODQ1MTRaMDMxMTAvBgNVBAMTKDZlYjVjZmJlY2RjNjEw
NGYwNjZkNmU3NTU1ODE0NWM3NWYxZWY2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCKtHGVOP02DfxE3NGmCc/Wfwt6CyKrPsI/bXpzBNWxdqlQcXUA
+2f+b01TY/z4gNfmJzlL0nqq5nsVBpBgrIgLW0bXqHLS/Eoizuh+5l5HCjjCvKKQ
QceGIcoFQp2viTWoNoQ3A8G68Q1weu4NyP5cAFkUH5PpXAqpY/G6647E+eDg7/Vn
0g5zN+uO4WOmm9MABj7KNBZXShLrHZDKlXoSf+24XMLcMNso30swsHHeqJASEXx0
NvmLqpNI4Zl4xlwfnn5bv1IPcAhKsnTToBAptrZEkFxRUrbZ6GCN9RByuq3ca3ai
zpjOvqSHip+Gt55BiRs3ncrY89vE8DYQKyy1AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUJ7MrzFbDEre1lDnaHcagriuZI1MwHwYDVR0jBBgwFoAUFpvhMP2rFj4X9ryM
TV1Lg/u36hUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82NWRjNjcz
MzVjNGNkMTI4NjQyMjQwOTlhNzUwYzc4MjJiODNhZmEyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mM2U4NzcxNS1mYTczLTRhMjktOThiMy00YjE5ZDdl
NzIxM2QvNmViNWNmYmVjZGM2MTA0ZjA2NmQ2ZTc1NTU4MTQ1Yzc1ZjFlZjY5NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YzZTg3NzE1LWZhNzMtNGEyOS05OGIzLTRiMTlk
N2U3MjEzZC82NWRjNjczMzVjNGNkMTI4NjQyMjQwOTlhNzUwYzc4MjJiODNhZmEy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLb2cMA0EAgACMAcDBQAoBgNnMA0GCSqGSIb3DQEBCwUAA4IB
AQAYyjxK6czVx0rV1HCX+rI/HdURozuQ4eYaZFmuMK/v/1URaeOboduseZhFTJU0
Ms2OpftXMZtWnAPnMWOvmR827zm53Obpuv15snYuxKrXbwgK7yrncPbRlhgQ7VKG
gadmHpOsvctBhXJmXa/VZC98DZqYiB2Gs6K1f1huCmgwfQ5cDf/k6m7a7cIKBr+B
KBgTFK1Bo005xvvZ7uU+ndxr5qa5Ir/mjzMQ+sOFPbLpWwgGjz+IXkq0rYB1QTpj
miAjzYF/tOhila525ZQa2Yrrly+3mkfo/+buOrAl3jePGDGjgA0PZjzsu5TdLWad
/vcmk14wBnyuG4xzhVgr5eVw
-----END CERTIFICATE-----