Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/406cefe0852d7df748da94e3dc47e8032d41eff5.roa
File:                     406cefe0852d7df748da94e3dc47e8032d41eff5.roa (raw, json)
Hash identifier:          pmhjpeqn4Wn8iKSkz8iutyw6+dugjhdGedkivdu/GT0=
Subject key identifier:   C6:2C:AA:F1:18:05:11:34:B3:35:35:76:92:B6:03:BC:7B:DA:6A:71
Certificate issuer:       /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial:       0389
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/406cefe0852d7df748da94e3dc47e8032d41eff5.roa
Signing time:             Fri 11 Nov 2022 19:13:28 +0000
ROA not before:           Thu 10 Nov 2022 18:43:28 +0000
ROA not after:            Mon 11 Nov 2024 18:43:28 +0000
asID:                     267768
IP address blocks:        45.170.232.0/22 maxlen: 22
                          2803:bba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Validity
            Not Before: Nov 10 18:43:28 2022 GMT
            Not After : Nov 11 18:43:28 2024 GMT
        Subject: CN=406cefe0852d7df748da94e3dc47e8032d41eff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:d6:f5:c1:d8:64:ce:8b:f4:1c:de:b4:7e:
                    61:98:11:3f:15:04:90:24:be:55:13:72:7a:1c:2b:
                    02:b1:0e:4d:1d:c1:65:1f:ed:6b:c4:15:31:d8:23:
                    2e:9d:a9:06:82:b5:e2:dc:84:70:13:c7:f3:3f:08:
                    e0:39:2e:6e:d9:dc:36:3c:0e:d3:9f:80:12:1c:66:
                    82:68:26:0d:f0:6a:6e:38:22:03:fb:8c:46:ee:8b:
                    41:b9:14:aa:96:6a:72:da:8f:27:59:ca:27:b0:4f:
                    16:cc:ce:e0:c2:fa:bb:08:f9:1b:f4:bd:90:eb:48:
                    e7:01:4e:a1:31:61:58:55:a1:d1:62:23:4a:03:78:
                    fc:ac:25:b6:0e:d1:e1:fd:2a:57:89:bd:a3:da:9c:
                    77:ee:c6:3a:e8:39:e3:e7:99:84:e9:ab:43:a9:97:
                    39:bf:ff:93:90:91:77:72:38:08:49:0a:44:bd:64:
                    83:b7:16:66:b0:58:27:76:a6:65:f6:47:7c:b8:d7:
                    b8:62:38:81:c0:be:04:e3:fe:3f:22:c7:44:d1:b0:
                    99:64:02:bb:ea:54:16:59:bf:0e:e4:24:36:8f:d2:
                    f7:9f:06:b4:c5:6d:b2:9f:40:ec:05:c7:f2:1e:3b:
                    37:32:ec:84:18:76:cf:46:ee:e8:1b:23:3f:21:b5:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:AA:F1:18:05:11:34:B3:35:35:76:92:B6:03:BC:7B:DA:6A:71
            X509v3 Authority Key Identifier:
                keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/406cefe0852d7df748da94e3dc47e8032d41eff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f4:58:f0:e2:00:f4:98:86:b5:96:cb:99:b6:4d:06:46:38:
         1f:fd:bc:9f:1d:3c:5e:fb:b6:91:1d:8e:4e:a8:4b:6b:e3:fc:
         a1:8e:95:08:5d:a6:0d:d2:cc:2b:04:9c:3a:ed:f5:ac:d4:1e:
         03:96:33:1d:a2:73:4e:f1:58:be:37:b8:12:99:2a:f9:89:f7:
         64:72:d8:da:a3:90:8e:c3:0f:01:20:87:b7:e0:c1:c9:38:88:
         00:14:71:be:22:f6:21:42:33:cc:24:a9:f6:85:d8:6d:27:f2:
         af:30:ca:94:26:8a:f9:f4:c5:a7:5b:a3:e0:64:0a:9a:e9:1b:
         d1:6e:75:e7:c2:9e:45:be:cd:47:95:2f:8f:e9:52:62:52:f6:
         d1:a3:a5:29:f1:05:68:f5:78:1c:65:3d:15:98:f7:57:53:ed:
         3d:3b:9c:89:a1:af:62:17:30:86:dd:85:cd:2e:51:f8:29:35:
         37:0b:0f:f6:84:be:49:45:13:d8:ab:d0:e7:f8:f3:bf:5e:10:
         e7:94:64:66:5f:dc:cd:c0:f7:21:1f:95:c6:a4:88:11:7e:15:
         e7:ba:14:94:34:30:bf:ad:4e:1f:dd:24:c5:fc:e8:13:88:5d:
         3c:7f:1a:b0:c2:ed:ca:e2:6c:68:f4:34:47:67:c0:29:ee:c9:
         ff:5f:28:c2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZGUx
ZDEzMmRjZWU0NDBiMmM4ZTQ5NDEyZjIyMTg2ZmIzOWY3Yzg0ODAeFw0yMjExMTAx
ODQzMjhaFw0yNDExMTExODQzMjhaMDMxMTAvBgNVBAMTKDQwNmNlZmUwODUyZDdk
Zjc0OGRhOTRlM2RjNDdlODAzMmQ0MWVmZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCS6db1wdhkzov0HN60fmGYET8VBJAkvlUTcnocKwKxDk0dwWUf
7WvEFTHYIy6dqQaCteLchHATx/M/COA5Lm7Z3DY8DtOfgBIcZoJoJg3wam44IgP7
jEbui0G5FKqWanLajydZyiewTxbMzuDC+rsI+Rv0vZDrSOcBTqExYVhVodFiI0oD
ePysJbYO0eH9KleJvaPanHfuxjroOePnmYTpq0Oplzm//5OQkXdyOAhJCkS9ZIO3
FmawWCd2pmX2R3y417hiOIHAvgTj/j8ix0TRsJlkArvqVBZZvw7kJDaP0vefBrTF
bbKfQOwFx/IeOzcy7IQYds9G7ugbIz8htbMvAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUxiyq8RgFETSzNTV2krYDvHvaanEwHwYDVR0jBBgwFoAUTEAkUAJ1Ie5uIGMh
c5jhofU8bcQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kZTFkMTMy
ZGNlZTQ0MGIyYzhlNDk0MTJmMjIxODZmYjM5ZjdjODQ4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xMWZmODlhMS0wNjAzLTQyYTEtOTFkZi02ZDEwODBm
OGM1YTQvNDA2Y2VmZTA4NTJkN2RmNzQ4ZGE5NGUzZGM0N2U4MDMyZDQxZWZmNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzExZmY4OWExLTA2MDMtNDJhMS05MWRmLTZkMTA4
MGY4YzVhNC9kZTFkMTMyZGNlZTQ0MGIyYzhlNDk0MTJmMjIxODZmYjM5ZjdjODQ4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLaroMA0EAgACMAcDBQAoA7ugMA0GCSqGSIb3DQEBCwUAA4IB
AQAR9Fjw4gD0mIa1lsuZtk0GRjgf/byfHTxe+7aRHY5OqEtr4/yhjpUIXaYN0swr
BJw67fWs1B4DljMdonNO8Vi+N7gSmSr5ifdkctjao5COww8BIIe34MHJOIgAFHG+
IvYhQjPMJKn2hdhtJ/KvMMqUJor59MWnW6PgZAqa6RvRbnXnwp5Fvs1HlS+P6VJi
UvbRo6Up8QVo9XgcZT0VmPdXU+09O5yJoa9iFzCG3YXNLlH4KTU3Cw/2hL5JRRPY
q9Dn+PO/XhDnlGRmX9zNwPchH5XGpIgRfhXnuhSUNDC/rU4f3STF/OgTiF08fxqw
wu3K4mxo9DRHZ8Ap7sn/XyjC
-----END CERTIFICATE-----