Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/41f96fffc7d0bdfa450da89c7579d2f379dd0ca6.roa
File:                     41f96fffc7d0bdfa450da89c7579d2f379dd0ca6.roa (raw, json)
Hash identifier:          g3W6t9oHDfFJYRZMfMQapd1lGofyidd7yHMKLNj/N6M=
Subject key identifier:   C3:77:BF:05:AE:05:A7:85:73:9C:5D:9A:BA:DE:19:8C:70:8E:FD:7E
Certificate issuer:       /CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
Certificate serial:       190126
Authority key identifier: ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/41f96fffc7d0bdfa450da89c7579d2f379dd0ca6.roa
Signing time:             Tue 12 Jul 2022 18:00:39 +0000
ROA not before:           Tue 12 Jul 2022 03:00:00 +0000
ROA not after:            Fri 12 Jul 2024 03:00:00 +0000
asID:                     203
IP address blocks:        45.65.203.0/24 maxlen: 24
                          2801:1a:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638694 (0x190126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
        Validity
            Not Before: Jul 12 03:00:00 2022 GMT
            Not After : Jul 12 03:00:00 2024 GMT
        Subject: CN=41f96fffc7d0bdfa450da89c7579d2f379dd0ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:be:f1:bb:c8:ca:51:b8:50:fc:27:28:95:
                    f0:c3:0f:8d:81:8d:40:95:bc:67:41:6a:53:7e:82:
                    1a:d6:14:2b:18:1f:0b:7f:41:6f:22:0e:ab:42:92:
                    fe:4a:dd:13:2e:a5:3a:98:fb:e6:8c:87:83:90:bf:
                    00:40:2d:2c:84:d8:b1:c0:4e:98:ca:d6:c3:49:a3:
                    55:8a:fa:05:d0:d9:4c:be:7d:1d:94:b5:c5:80:a3:
                    22:12:46:1f:e2:ab:53:68:b7:b7:fe:15:b1:47:34:
                    bb:2d:ad:ba:50:de:cd:18:3b:17:24:b6:e0:7f:59:
                    07:fb:4f:20:76:ca:f6:68:91:bb:90:67:fa:5d:63:
                    d0:59:ed:79:ca:1c:23:90:26:17:00:fa:d5:a3:1d:
                    46:4e:ad:7e:25:78:b2:40:ca:5c:d9:af:ff:ab:25:
                    74:1e:cd:25:9d:cf:8a:3a:53:18:ff:41:1b:57:49:
                    cc:16:f1:68:c2:ae:25:53:b0:61:44:99:c7:05:93:
                    7f:90:38:8a:11:0c:17:bd:fa:18:1f:2a:e6:eb:9d:
                    f9:6a:20:21:ab:a9:b1:b2:fd:1a:b8:ed:c6:43:f7:
                    da:92:0d:a7:27:08:98:d4:01:1a:53:6a:ad:05:e4:
                    ce:e1:1c:6f:c3:19:4c:fc:4e:e4:83:18:9b:b1:e7:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:77:BF:05:AE:05:A7:85:73:9C:5D:9A:BA:DE:19:8C:70:8E:FD:7E
            X509v3 Authority Key Identifier:
                keyid:ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/41f96fffc7d0bdfa450da89c7579d2f379dd0ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:c2:43:5b:3c:c6:62:0c:87:26:2f:72:d9:e0:c9:81:b2:
         f2:4e:a9:2a:ca:41:43:61:ef:db:16:bb:69:4a:3b:20:13:aa:
         7a:4f:34:57:43:b2:54:63:fa:ea:83:97:ab:a7:72:e7:98:77:
         74:29:e2:31:f2:a1:1c:8c:b6:df:3a:18:4b:6a:6e:95:77:79:
         b1:9f:ac:02:2d:dd:97:14:93:45:15:e5:ae:dd:8d:b6:30:ce:
         86:7d:2e:d3:62:1b:9d:3a:2c:f3:dc:ef:e8:ec:28:94:61:a2:
         b0:68:8d:5e:da:5d:f9:1e:6d:54:37:c9:3b:50:7a:9b:45:ac:
         b0:78:9f:95:db:b4:65:68:e1:9c:eb:5a:f1:23:fe:1a:5f:9e:
         9a:ab:7f:33:62:89:44:2a:30:6c:68:43:41:5c:68:c7:13:97:
         fc:7e:81:42:b6:d1:4d:03:c2:46:ec:6c:af:06:c4:13:80:92:
         24:c1:f4:aa:47:7d:69:f9:ce:16:87:c2:86:5a:fa:0c:ee:89:
         1c:c6:2c:0b:f8:68:05:b9:c3:27:6b:44:4d:8b:f9:12:98:09:
         b0:82:ba:a1:7b:52:c7:d3:be:81:f3:52:62:ae:0c:36:2e:a9:
         3d:d3:a2:c7:51:7a:41:50:6f:4e:e9:3e:b9:64:65:1e:02:c7:
         15:ca:9a:a6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDGQEmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
OTczZjY0ZjhmN2ExNzM2NmE5MmFiNzg0NWIzMmVkZGRjZTIzY2QwHhcNMjIwNzEy
MDMwMDAwWhcNMjQwNzEyMDMwMDAwWjAzMTEwLwYDVQQDEyg0MWY5NmZmZmM3ZDBi
ZGZhNDUwZGE4OWM3NTc5ZDJmMzc5ZGQwY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt32+8bvIylG4UPwnKJXwww+NgY1AlbxnQWpTfoIa1hQrGB8L
f0FvIg6rQpL+St0TLqU6mPvmjIeDkL8AQC0shNixwE6YytbDSaNVivoF0NlMvn0d
lLXFgKMiEkYf4qtTaLe3/hWxRzS7La26UN7NGDsXJLbgf1kH+08gdsr2aJG7kGf6
XWPQWe15yhwjkCYXAPrVox1GTq1+JXiyQMpc2a//qyV0Hs0lnc+KOlMY/0EbV0nM
FvFowq4lU7BhRJnHBZN/kDiKEQwXvfoYHyrm6535aiAhq6mxsv0auO3GQ/fakg2n
JwiY1AEaU2qtBeTO4RxvwxlM/E7kgxibsefqewIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFMN3vwWuBaeFc5xdmrreGYxwjv1+MB8GA1UdIwQYMBaAFO0SbCBvlhNgUyE7
uLY3DoqDsI7jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA5NzNm
NjRmOGY3YTE3MzY2YTkyYWI3ODQ1YjMyZWRkZGNlMjNjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzI2ZGIzNTYtNDdiZS00ZmQ1LTgxZjktNzllMjA4
MjRlZWI5LzQxZjk2ZmZmYzdkMGJkZmE0NTBkYTg5Yzc1NzlkMmYzNzlkZDBjYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMjZkYjM1Ni00N2JlLTRmZDUtODFmOS03OWUy
MDgyNGVlYjkvZjA5NzNmNjRmOGY3YTE3MzY2YTkyYWI3ODQ1YjMyZWRkZGNlMjNj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC1ByzAPBAIAAjAJAwcAKAEAGjAAMA0GCSqGSIb3DQEBCwUA
A4IBAQCIqsJDWzzGYgyHJi9y2eDJgbLyTqkqykFDYe/bFrtpSjsgE6p6TzRXQ7JU
Y/rqg5erp3LnmHd0KeIx8qEcjLbfOhhLam6Vd3mxn6wCLd2XFJNFFeWu3Y22MM6G
fS7TYhudOizz3O/o7CiUYaKwaI1e2l35Hm1UN8k7UHqbRayweJ+V27RlaOGc61rx
I/4aX56aq38zYolEKjBsaENBXGjHE5f8foFCttFNA8JG7GyvBsQTgJIkwfSqR31p
+c4Wh8KGWvoM7okcxiwL+GgFucMna0RNi/kSmAmwgrqhe1LH076B81Jirgw2Lqk9
06LHUXpBUG9O6T65ZGUeAscVypqm
-----END CERTIFICATE-----