Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/7cac552a581b9f4383642d7e74845c1455ebb9e7.roa
File:                     7cac552a581b9f4383642d7e74845c1455ebb9e7.roa (raw, json)
Hash identifier:          3SCqtn5PsICMHeQV9xDM9AB/AotRe4UEWdAQhuFvHPw=
Subject key identifier:   74:34:F5:4F:F1:76:42:D7:55:00:BB:92:09:80:23:73:B1:56:89:54
Certificate issuer:       /CN=3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1
Certificate serial:       1F2274
Authority key identifier: 27:04:E5:EB:EC:9F:28:32:9C:CE:32:B2:30:A9:9B:EC:C7:F9:A5:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/7cac552a581b9f4383642d7e74845c1455ebb9e7.roa
Signing time:             Fri 19 May 2023 15:39:47 +0000
ROA not before:           Thu 18 May 2023 15:39:47 +0000
ROA not after:            Mon 19 May 2025 15:39:47 +0000
asID:                     266835
IP address blocks:        45.237.136.0/22 maxlen: 22
                          2803:cca0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040436 (0x1f2274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1
        Validity
            Not Before: May 18 15:39:47 2023 GMT
            Not After : May 19 15:39:47 2025 GMT
        Subject: CN=7cac552a581b9f4383642d7e74845c1455ebb9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:b4:fa:d3:31:7b:92:16:81:00:29:f3:81:
                    c2:67:85:7c:78:3d:85:61:dc:c0:55:9c:db:c1:87:
                    6c:6a:8b:5d:3c:ab:c9:4b:98:94:86:84:86:04:31:
                    33:82:dd:cf:0d:83:6f:26:c1:71:21:95:75:87:5f:
                    15:26:02:9f:f8:30:33:30:e0:42:61:ee:38:39:d4:
                    e1:1b:0f:ec:0d:c3:ba:56:11:f7:7f:ed:d4:b2:b8:
                    5b:48:08:dd:8c:af:02:74:68:94:c2:7a:f6:b1:ba:
                    1c:86:a1:3b:ed:26:a9:62:99:61:4c:d0:53:c0:a9:
                    75:5e:60:b3:e7:3a:40:b2:5f:15:69:92:14:bc:07:
                    b1:d3:96:64:b1:f6:0f:e5:fb:9d:44:b7:b9:5c:7c:
                    e0:d3:ab:26:aa:07:d4:44:86:77:af:7a:ac:35:86:
                    d1:75:ac:a2:35:89:a7:19:5d:81:46:73:0f:43:ae:
                    1e:72:26:ad:d5:5a:3e:61:c7:76:fc:e1:a9:d0:f9:
                    31:ac:ba:ea:82:4c:49:57:12:a9:5e:bc:06:51:f4:
                    4e:1e:94:3d:25:8f:b1:d3:74:06:78:33:0d:f5:48:
                    ce:c6:16:9f:3a:8e:ce:d8:03:7d:c8:b3:2c:78:d6:
                    95:9b:0b:29:db:31:eb:f6:9a:4f:14:9c:79:e3:65:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:F5:4F:F1:76:42:D7:55:00:BB:92:09:80:23:73:B1:56:89:54
            X509v3 Authority Key Identifier:
                keyid:27:04:E5:EB:EC:9F:28:32:9C:CE:32:B2:30:A9:9B:EC:C7:F9:A5:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/7cac552a581b9f4383642d7e74845c1455ebb9e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20c20ab5-9258-48f4-b922-f7ac2f2d6dd3/3297e1cfbd8d4713cf0fe59ab5a26d0e1c6e5ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.136.0/22
                IPv6:
                  2803:cca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:d3:ec:34:91:50:2f:0c:d0:02:4f:34:39:32:83:6e:c3:
         ec:6d:01:4e:9d:96:80:92:c6:90:80:64:6f:ae:ba:11:03:80:
         ae:47:2d:32:c8:0a:a7:da:8c:df:83:bd:43:5f:68:a1:fc:6f:
         25:47:4f:a3:f2:a8:f0:c4:67:da:7c:45:36:17:2f:3a:ef:b0:
         12:ec:98:b3:c3:ba:f7:23:cd:b3:4e:e6:a9:1a:d8:34:d2:e0:
         1d:f9:86:af:4f:30:2b:cd:18:19:ae:5d:d7:fe:8c:9d:dc:a7:
         1a:67:7b:a8:c6:ba:c9:18:f2:5f:65:f4:ad:af:c4:89:30:74:
         8c:5f:dd:5f:8a:dd:8f:14:07:b8:fe:4f:0d:63:31:15:d3:e1:
         8d:ee:09:c4:f0:e4:9e:a5:f8:f8:61:e9:fb:2a:f2:d2:66:b3:
         02:bc:f7:1c:ab:06:f2:d9:ca:9c:91:24:64:03:4b:4b:a0:7c:
         1e:b5:fe:40:4f:af:33:2b:d1:1d:b6:d0:fe:0f:4c:aa:21:61:
         81:63:fd:e1:3a:65:57:d0:67:e6:03:ce:47:b5:2b:3f:23:35:
         fa:31:1b:8e:c0:49:ec:05:73:2f:db:c2:8c:c2:81:16:e5:cc:
         f2:21:a7:f4:7a:64:01:1f:95:06:c7:85:44:d2:45:3b:3e:1c:
         8c:06:8a:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHyJ0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMy
OTdlMWNmYmQ4ZDQ3MTNjZjBmZTU5YWI1YTI2ZDBlMWM2ZTViYTEwHhcNMjMwNTE4
MTUzOTQ3WhcNMjUwNTE5MTUzOTQ3WjAzMTEwLwYDVQQDEyg3Y2FjNTUyYTU4MWI5
ZjQzODM2NDJkN2U3NDg0NWMxNDU1ZWJiOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiyS0+tMxe5IWgQAp84HCZ4V8eD2FYdzAVZzbwYdsaotdPKvJ
S5iUhoSGBDEzgt3PDYNvJsFxIZV1h18VJgKf+DAzMOBCYe44OdThGw/sDcO6VhH3
f+3UsrhbSAjdjK8CdGiUwnr2sbochqE77SapYplhTNBTwKl1XmCz5zpAsl8VaZIU
vAex05ZksfYP5fudRLe5XHzg06smqgfURIZ3r3qsNYbRdayiNYmnGV2BRnMPQ64e
ciat1Vo+Ycd2/OGp0PkxrLrqgkxJVxKpXrwGUfROHpQ9JY+x03QGeDMN9UjOxhaf
Oo7O2AN9yLMseNaVmwsp2zHr9ppPFJx542XywQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHQ09U/xdkLXVQC7kgmAI3OxVolUMB8GA1UdIwQYMBaAFCcE5evsnygynM4y
sjCpm+zH+aUSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzI5N2Ux
Y2ZiZDhkNDcxM2NmMGZlNTlhYjVhMjZkMGUxYzZlNWJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjBjMjBhYjUtOTI1OC00OGY0LWI5MjItZjdhYzJm
MmQ2ZGQzLzdjYWM1NTJhNTgxYjlmNDM4MzY0MmQ3ZTc0ODQ1YzE0NTVlYmI5ZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMGMyMGFiNS05MjU4LTQ4ZjQtYjkyMi1mN2Fj
MmYyZDZkZDMvMzI5N2UxY2ZiZDhkNDcxM2NmMGZlNTlhYjVhMjZkMGUxYzZlNWJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3tiDANBAIAAjAHAwUAKAPMoDANBgkqhkiG9w0BAQsFAAOC
AQEAONPT7DSRUC8M0AJPNDkyg27D7G0BTp2WgJLGkIBkb666EQOArkctMsgKp9qM
34O9Q19oofxvJUdPo/Ko8MRn2nxFNhcvOu+wEuyYs8O69yPNs07mqRrYNNLgHfmG
r08wK80YGa5d1/6MndynGmd7qMa6yRjyX2X0ra/EiTB0jF/dX4rdjxQHuP5PDWMx
FdPhje4JxPDknqX4+GHp+yry0mazArz3HKsG8tnKnJEkZANLS6B8HrX+QE+vMyvR
HbbQ/g9MqiFhgWP94TplV9Bn5gPOR7UrPyM1+jEbjsBJ7AVzL9vCjMKBFuXM8iGn
9HpkAR+VBseFRNJFOz4cjAaK1A==
-----END CERTIFICATE-----