Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc8b65e-c841-48c9-8708-ae0d3da610f6/e9aa5a39c54e3ae20832d63ffd30904759f3b4e8.roa
File:                     e9aa5a39c54e3ae20832d63ffd30904759f3b4e8.roa (raw, json)
Hash identifier:          wbatCDa1Id4a+D7kFAIzUOn2kGiCmwa6tnTadNoqlfw=
Subject key identifier:   BD:27:5C:E2:F7:AD:2C:EE:38:C0:78:11:CA:58:2C:C7:6C:70:06:07
Certificate issuer:       /CN=e9904ee0293640039b087a62df3a75d0c43f5cf1
Certificate serial:       0C2612
Authority key identifier: EC:89:95:72:25:A5:9C:66:42:B4:FB:35:82:D9:36:C0:44:17:8E:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9904ee0293640039b087a62df3a75d0c43f5cf1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc8b65e-c841-48c9-8708-ae0d3da610f6/e9aa5a39c54e3ae20832d63ffd30904759f3b4e8.roa
Signing time:             Wed 24 Mar 2021 14:37:00 +0000
ROA not before:           Wed 24 Mar 2021 14:36:59 +0000
ROA not after:            Tue 24 Mar 2026 14:36:59 +0000
asID:                     267682
IP address blocks:        45.162.82.0/23 maxlen: 23
                          45.162.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796178 (0xc2612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9904ee0293640039b087a62df3a75d0c43f5cf1
        Validity
            Not Before: Mar 24 14:36:59 2021 GMT
            Not After : Mar 24 14:36:59 2026 GMT
        Subject: CN=e9aa5a39c54e3ae20832d63ffd30904759f3b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:59:8d:f4:54:8b:63:75:ef:65:5c:f6:41:
                    5f:2e:04:ad:87:a8:9a:88:f9:8b:44:22:17:d6:e8:
                    72:19:4d:32:8a:42:65:2a:48:b8:54:95:63:cb:00:
                    86:9c:e6:d5:14:da:f0:9c:81:cb:59:d7:ae:6f:c8:
                    61:da:5d:61:8d:61:8c:25:dd:34:a4:b1:54:92:9b:
                    e4:9e:21:7b:42:9b:17:14:1a:40:a4:73:dd:dc:61:
                    bb:08:59:1a:90:bd:5a:a1:c2:4f:ee:63:e3:23:03:
                    ae:76:62:ad:a9:04:3c:a7:93:e2:88:ca:af:c5:5f:
                    79:4e:c5:25:47:01:c4:1c:b5:7e:28:5b:6c:e5:ba:
                    af:70:17:da:9d:30:d3:e1:b9:3f:c8:42:65:d3:c6:
                    9f:76:7e:5b:1b:eb:3a:f0:30:3e:9a:97:5a:1c:ed:
                    db:a6:c2:53:4f:f3:46:65:3e:31:f2:26:8a:19:31:
                    1e:9f:85:ac:13:c7:ca:65:23:4e:96:5f:bc:c4:5d:
                    c7:a1:21:ba:73:ec:8c:db:83:20:f7:de:2a:52:01:
                    00:3c:86:ec:22:cb:87:ba:4b:34:4e:c7:41:37:a7:
                    79:71:12:a1:8a:4a:d0:5e:f3:0a:05:00:a1:27:61:
                    2c:d5:c3:e5:35:5e:b8:07:df:d1:6b:c5:85:7e:f8:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:5C:E2:F7:AD:2C:EE:38:C0:78:11:CA:58:2C:C7:6C:70:06:07
            X509v3 Authority Key Identifier:
                keyid:EC:89:95:72:25:A5:9C:66:42:B4:FB:35:82:D9:36:C0:44:17:8E:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9904ee0293640039b087a62df3a75d0c43f5cf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc8b65e-c841-48c9-8708-ae0d3da610f6/e9aa5a39c54e3ae20832d63ffd30904759f3b4e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc8b65e-c841-48c9-8708-ae0d3da610f6/e9904ee0293640039b087a62df3a75d0c43f5cf1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.82.0-45.162.84.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:37:bc:82:f4:fb:5f:91:b4:4d:66:ba:db:cb:b9:aa:1f:
         50:45:83:b5:7f:58:9c:6e:f8:43:b1:e2:d7:f5:d9:f1:90:0e:
         93:22:b8:26:d2:58:0e:57:f6:c3:ae:ed:59:e1:0f:89:08:84:
         fe:40:17:2c:1d:8b:7b:2f:bc:ff:c5:25:91:42:15:50:46:d1:
         44:d2:c6:42:37:d2:3b:8b:85:8e:f2:d0:b0:8a:9d:96:c4:fc:
         30:77:49:d2:a8:72:01:30:66:55:21:65:f1:b3:23:e9:24:0c:
         47:02:12:53:0d:ef:f9:47:ab:0c:8d:44:23:69:22:d0:19:9d:
         49:20:f0:0e:ca:6b:3f:29:94:d2:22:ca:5a:4e:e8:68:c3:7c:
         e0:53:49:5c:c1:27:da:91:9c:9e:70:dc:4f:67:90:b1:b5:c9:
         ef:d7:3f:05:10:24:a1:29:34:d8:8a:a5:5c:6c:d5:cd:14:bb:
         b4:9e:8d:0f:07:48:3e:e4:f4:8c:e4:91:4e:5d:e1:6d:c5:11:
         b1:93:e2:30:4e:88:22:e7:70:81:92:ea:bc:dc:cb:6c:f4:45:
         ed:d8:0e:ac:f5:6f:12:27:0b:98:f3:8f:03:ab:71:ec:48:de:
         98:cc:06:67:1b:8f:d3:d9:c9:7f:c3:65:15:3f:34:46:b2:fb:
         3a:94:92:28
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDCYSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
OTA0ZWUwMjkzNjQwMDM5YjA4N2E2MmRmM2E3NWQwYzQzZjVjZjEwHhcNMjEwMzI0
MTQzNjU5WhcNMjYwMzI0MTQzNjU5WjAzMTEwLwYDVQQDEyhlOWFhNWEzOWM1NGUz
YWUyMDgzMmQ2M2ZmZDMwOTA0NzU5ZjNiNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsyJZjfRUi2N172Vc9kFfLgSth6iaiPmLRCIX1uhyGU0yikJl
Kki4VJVjywCGnObVFNrwnIHLWdeub8hh2l1hjWGMJd00pLFUkpvkniF7QpsXFBpA
pHPd3GG7CFkakL1aocJP7mPjIwOudmKtqQQ8p5PiiMqvxV95TsUlRwHEHLV+KFts
5bqvcBfanTDT4bk/yEJl08afdn5bG+s68DA+mpdaHO3bpsJTT/NGZT4x8iaKGTEe
n4WsE8fKZSNOll+8xF3HoSG6c+yM24Mg994qUgEAPIbsIsuHuks0TsdBN6d5cRKh
ikrQXvMKBQChJ2Es1cPlNV64B9/Ra8WFfviUdQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFL0nXOL3rSzuOMB4EcpYLMdscAYHMB8GA1UdIwQYMBaAFOyJlXIlpZxmQrT7
NYLZNsBEF47eMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk5MDRl
ZTAyOTM2NDAwMzliMDg3YTYyZGYzYTc1ZDBjNDNmNWNmMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjOGI2NWUtYzg0MS00OGM5LTg3MDgtYWUwZDNk
YTYxMGY2L2U5YWE1YTM5YzU0ZTNhZTIwODMyZDYzZmZkMzA5MDQ3NTlmM2I0ZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M4YjY1ZS1jODQxLTQ4YzktODcwOC1hZTBk
M2RhNjEwZjYvZTk5MDRlZTAyOTM2NDAwMzliMDg3YTYyZGYzYTc1ZDBjNDNmNWNm
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQBLaJSAwQALaJUMA0GCSqGSIb3DQEBCwUAA4IBAQAv8je8
gvT7X5G0TWa628u5qh9QRYO1f1icbvhDseLX9dnxkA6TIrgm0lgOV/bDru1Z4Q+J
CIT+QBcsHYt7L7z/xSWRQhVQRtFE0sZCN9I7i4WO8tCwip2WxPwwd0nSqHIBMGZV
IWXxsyPpJAxHAhJTDe/5R6sMjUQjaSLQGZ1JIPAOyms/KZTSIspaTuhow3zgU0lc
wSfakZyecNxPZ5Cxtcnv1z8FECShKTTYiqVcbNXNFLu0no0PB0g+5PSM5JFOXeFt
xRGxk+IwTogi53CBkuq83Mts9EXt2A6s9W8SJwuY848Dq3HsSN6YzAZnG4/T2cl/
w2UVPzRGsvs6lJIo
-----END CERTIFICATE-----