Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/6342b98a17bc9e0b4604f21af9257c5d3b08887f.roa
File:                     6342b98a17bc9e0b4604f21af9257c5d3b08887f.roa (raw, json)
Hash identifier:          i7SdgMYXNXjxFrtS3Cgs6Xh3NHqeSoqezrL4HX7n+K4=
Subject key identifier:   89:36:73:FA:0C:25:26:49:B6:D6:0F:38:94:C3:E5:7A:6E:01:0F:23
Certificate issuer:       /CN=845adae5513877104ae603037bff400bad521b19
Certificate serial:       21DCC9
Authority key identifier: D7:C9:09:3B:A2:67:D2:E0:40:38:47:98:DA:40:B6:0C:07:31:D5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845adae5513877104ae603037bff400bad521b19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/6342b98a17bc9e0b4604f21af9257c5d3b08887f.roa
Signing time:             Fri 21 Jul 2023 18:44:10 +0000
ROA not before:           Thu 20 Jul 2023 18:44:10 +0000
ROA not after:            Mon 21 Jul 2025 18:44:10 +0000
asID:                     264770
IP address blocks:        168.194.240.0/22 maxlen: 24
                          170.254.216.0/22 maxlen: 24
                          2803:10c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219209 (0x21dcc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845adae5513877104ae603037bff400bad521b19
        Validity
            Not Before: Jul 20 18:44:10 2023 GMT
            Not After : Jul 21 18:44:10 2025 GMT
        Subject: CN=6342b98a17bc9e0b4604f21af9257c5d3b08887f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:62:0f:5a:fd:6a:8c:46:09:fc:05:6c:3e:
                    3c:8a:41:8b:3e:e0:97:e7:4b:9d:26:1f:49:3f:4a:
                    26:83:f4:2f:27:ca:c1:ac:b1:03:aa:84:05:92:39:
                    2d:5e:75:fe:05:43:af:66:c6:f8:7e:33:24:a1:45:
                    ea:1d:82:39:4e:a2:cf:8e:bb:98:d6:fb:96:3c:59:
                    bb:ce:b1:4b:4b:76:83:26:30:bc:e9:b6:c8:06:5b:
                    44:bb:c5:fc:d6:db:78:28:6c:d6:4a:93:ec:8c:02:
                    c0:9f:88:6b:cd:e3:3a:f2:28:8f:3b:4b:c9:fa:b7:
                    f4:2c:e3:63:44:a4:c6:d5:72:af:6b:71:ba:df:9f:
                    09:09:c3:9b:ca:62:78:47:07:8a:7d:a1:16:ca:a7:
                    a6:8f:86:97:f2:e5:31:55:39:33:69:4d:0a:9b:34:
                    bb:e8:e7:73:0d:ca:46:40:d5:24:87:45:0b:ad:11:
                    a9:26:70:25:77:b2:e4:3e:c9:95:f9:b0:11:f0:db:
                    f0:6e:93:0f:7f:51:32:3b:18:c5:cd:3d:f5:64:8f:
                    6b:f2:c3:94:e5:7f:00:ed:d4:e3:36:31:bf:2e:97:
                    1e:88:fa:cc:a8:7a:a2:8a:55:ab:87:ed:5c:c3:7a:
                    62:ad:de:8d:5d:d8:cf:97:54:35:2f:e2:1a:cb:ba:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:36:73:FA:0C:25:26:49:B6:D6:0F:38:94:C3:E5:7A:6E:01:0F:23
            X509v3 Authority Key Identifier:
                keyid:D7:C9:09:3B:A2:67:D2:E0:40:38:47:98:DA:40:B6:0C:07:31:D5:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845adae5513877104ae603037bff400bad521b19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/6342b98a17bc9e0b4604f21af9257c5d3b08887f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/845adae5513877104ae603037bff400bad521b19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.240.0/22
                  170.254.216.0/22
                IPv6:
                  2803:10c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:28:ec:43:f1:9f:6f:0f:c4:f9:f8:6c:d8:fb:73:b9:7f:
         69:45:6b:db:49:b0:49:4b:23:ef:89:0e:15:cd:ec:ca:0f:7e:
         e3:6d:e0:56:ec:ed:ee:79:1b:de:9d:24:3a:35:91:33:4a:0f:
         c7:43:73:0d:d4:6b:84:f8:a2:ca:a6:d0:51:a9:8b:16:2c:20:
         8c:90:ac:08:94:b1:2c:09:42:4f:40:f0:01:6e:d8:02:48:3f:
         a4:ab:d1:c9:6e:21:57:3f:ce:e0:f2:b9:38:1c:7c:d0:7f:f5:
         4a:ea:3e:f9:17:f7:3e:db:dd:9d:dd:b4:3d:b9:c8:f5:73:ab:
         d6:2e:8c:e7:a9:31:8f:65:c0:ca:cf:44:a6:1d:8c:e1:82:5d:
         f1:ea:31:35:97:f3:ae:4c:31:ca:8c:db:3d:3c:c0:58:30:25:
         8d:2a:46:30:62:c1:d8:56:d1:9e:61:09:55:aa:e2:ec:f8:98:
         8f:fd:79:e6:14:3e:38:56:f0:96:c6:e8:14:70:de:a8:df:9e:
         dd:09:04:d2:08:f5:4d:cd:d4:3d:93:19:78:27:58:87:ab:ec:
         d9:cb:e3:b5:53:a3:60:33:e2:dc:30:94:bb:1c:f4:34:5b:46:
         24:79:9e:d8:08:d2:ca:53:87:cc:fd:67:3f:51:48:44:23:30:
         f4:b1:58:f9
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDIdzJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0
NWFkYWU1NTEzODc3MTA0YWU2MDMwMzdiZmY0MDBiYWQ1MjFiMTkwHhcNMjMwNzIw
MTg0NDEwWhcNMjUwNzIxMTg0NDEwWjAzMTEwLwYDVQQDEyg2MzQyYjk4YTE3YmM5
ZTBiNDYwNGYyMWFmOTI1N2M1ZDNiMDg4ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgNJiD1r9aoxGCfwFbD48ikGLPuCX50udJh9JP0omg/QvJ8rB
rLEDqoQFkjktXnX+BUOvZsb4fjMkoUXqHYI5TqLPjruY1vuWPFm7zrFLS3aDJjC8
6bbIBltEu8X81tt4KGzWSpPsjALAn4hrzeM68iiPO0vJ+rf0LONjRKTG1XKva3G6
358JCcObymJ4RweKfaEWyqemj4aX8uUxVTkzaU0KmzS76OdzDcpGQNUkh0ULrRGp
JnAld7LkPsmV+bAR8NvwbpMPf1EyOxjFzT31ZI9r8sOU5X8A7dTjNjG/LpceiPrM
qHqiilWrh+1cw3pird6NXdjPl1Q1L+Iay7ofAwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFIk2c/oMJSZJttYPOJTD5XpuAQ8jMB8GA1UdIwQYMBaAFNfJCTuiZ9LgQDhH
mNpAtgwHMdVpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODQ1YWRh
ZTU1MTM4NzcxMDRhZTYwMzAzN2JmZjQwMGJhZDUyMWIxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmI2MGM3NDktNzI1Mi00ZGU0LThhYmYtMTg2YjRk
NDU3NWE4LzYzNDJiOThhMTdiYzllMGI0NjA0ZjIxYWY5MjU3YzVkM2IwODg4N2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYjYwYzc0OS03MjUyLTRkZTQtOGFiZi0xODZi
NGQ0NTc1YTgvODQ1YWRhZTU1MTM4NzcxMDRhZTYwMzAzN2JmZjQwMGJhZDUyMWIx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAqjC8AMEAqr+2DANBAIAAjAHAwUAKAMQwDANBgkqhkiG9w0B
AQsFAAOCAQEAG5co7EPxn28PxPn4bNj7c7l/aUVr20mwSUsj74kOFc3syg9+423g
Vuzt7nkb3p0kOjWRM0oPx0NzDdRrhPiiyqbQUamLFiwgjJCsCJSxLAlCT0DwAW7Y
Akg/pKvRyW4hVz/O4PK5OBx80H/1Suo++Rf3Ptvdnd20PbnI9XOr1i6M56kxj2XA
ys9Eph2M4YJd8eoxNZfzrkwxyozbPTzAWDAljSpGMGLB2FbRnmEJVari7PiYj/15
5hQ+OFbwlsboFHDeqN+e3QkE0gj1Tc3UPZMZeCdYh6vs2cvjtVOjYDPi3DCUuxz0
NFtGJHme2AjSylOHzP1nP1FIRCMw9LFY+Q==
-----END CERTIFICATE-----