Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/ebc5a4f092b2195750e62401cc432200e91ad0c2.roa
File:                     ebc5a4f092b2195750e62401cc432200e91ad0c2.roa (raw, json)
Hash identifier:          hIjiwQpEU11/5Rg3kAdpJQFeNKpLH9LCyNk4wC4qQKk=
Subject key identifier:   D2:24:74:96:E8:71:29:BB:71:BF:7B:D3:0A:84:AA:46:6C:66:E2:1B
Certificate issuer:       /CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
Certificate serial:       18F77D
Authority key identifier: ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/ebc5a4f092b2195750e62401cc432200e91ad0c2.roa
Signing time:             Mon 11 Jul 2022 22:20:30 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     202
IP address blocks:        45.65.203.0/24 maxlen: 24
                          2801:1a:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636221 (0x18f77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=ebc5a4f092b2195750e62401cc432200e91ad0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:f6:85:ee:3e:ff:56:02:63:e1:81:85:1e:
                    97:3c:4e:96:3f:4d:73:2e:1c:d8:74:d1:15:d1:55:
                    63:cf:55:80:f0:16:0a:42:48:e1:5f:fe:45:a5:44:
                    6b:d6:fd:03:89:1f:99:da:4e:77:b3:70:db:e0:47:
                    ae:8d:43:94:c5:46:a6:4c:ee:7d:3f:7a:3f:8b:7f:
                    2d:63:3d:6c:29:9f:df:1c:73:b5:98:26:7b:4b:ea:
                    68:5c:ad:61:69:9d:49:db:c6:bc:91:a8:6a:77:43:
                    80:4f:0e:1e:73:6f:24:e9:f4:83:7b:5a:d0:64:b5:
                    eb:db:65:27:bf:c9:38:3c:e1:75:58:15:db:fd:ad:
                    cb:04:79:c9:45:a1:33:80:1c:c4:4f:83:78:54:d3:
                    b1:ce:6d:2c:74:63:71:c8:3b:25:86:4d:62:a7:e1:
                    60:77:be:08:5f:83:1f:40:ee:8e:05:23:68:9d:43:
                    56:1c:f1:ce:c0:e8:f2:ac:70:c1:b7:bc:76:bd:00:
                    24:0e:e9:1a:25:c1:54:0f:f2:5d:87:70:2b:5a:52:
                    a3:a9:cc:43:78:66:54:8e:81:1f:10:11:ab:c3:ad:
                    c6:cc:62:6b:6d:60:6d:64:5e:e9:aa:22:69:bb:68:
                    ac:ea:37:39:70:62:c0:53:68:25:5e:6c:2b:d5:3f:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:24:74:96:E8:71:29:BB:71:BF:7B:D3:0A:84:AA:46:6C:66:E2:1B
            X509v3 Authority Key Identifier:
                keyid:ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/ebc5a4f092b2195750e62401cc432200e91ad0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:63:f4:b8:66:6c:95:5c:c8:7a:24:23:8d:95:58:70:bd:
         60:48:df:b0:ea:7a:e5:ef:18:d8:54:73:32:6b:22:a8:1a:1b:
         59:c5:12:a9:11:df:69:18:e2:e1:6c:c5:2a:d2:bc:6e:4b:97:
         fc:c5:36:da:41:bb:bb:17:48:83:bc:ff:0a:7e:bf:e2:b5:65:
         35:66:aa:a1:bc:5f:42:34:79:26:11:c1:4f:92:06:66:c7:15:
         1f:10:19:4e:d8:f5:88:e4:1a:16:d3:b8:06:50:74:ce:5c:8d:
         6d:f6:4e:b2:22:19:10:88:db:1a:69:73:51:ff:e6:3d:e3:94:
         65:08:07:2f:2e:ef:9a:e6:1d:19:7f:9f:c6:86:a9:df:8b:9c:
         5e:96:b8:0e:52:df:dc:5f:de:c8:65:26:8c:8a:e0:7f:6e:c9:
         e1:c0:6f:3e:be:ef:14:31:d6:4b:b4:36:7b:6a:0e:ac:65:0c:
         95:0f:6e:69:a8:1d:64:38:6c:3a:94:23:67:ab:91:45:68:be:
         bf:96:75:0c:46:2c:9b:e6:e2:d2:7a:77:a7:3c:24:d0:5d:32:
         c5:91:50:03:4a:90:87:7b:1e:db:23:6d:36:e6:63:bf:9e:37:
         bd:35:02:1b:2c:55:4a:b4:87:43:15:b3:b4:3d:7b:7e:4a:32:
         4b:7f:ec:65
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDGPd9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
OTczZjY0ZjhmN2ExNzM2NmE5MmFiNzg0NWIzMmVkZGRjZTIzY2QwHhcNMjIwNzEx
MDMwMDAwWhcNMjQwNzExMDMwMDAwWjAzMTEwLwYDVQQDEyhlYmM1YTRmMDkyYjIx
OTU3NTBlNjI0MDFjYzQzMjIwMGU5MWFkMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhED2he4+/1YCY+GBhR6XPE6WP01zLhzYdNEV0VVjz1WA8BYK
QkjhX/5FpURr1v0DiR+Z2k53s3Db4EeujUOUxUamTO59P3o/i38tYz1sKZ/fHHO1
mCZ7S+poXK1haZ1J28a8kahqd0OATw4ec28k6fSDe1rQZLXr22Unv8k4POF1WBXb
/a3LBHnJRaEzgBzET4N4VNOxzm0sdGNxyDslhk1ip+Fgd74IX4MfQO6OBSNonUNW
HPHOwOjyrHDBt7x2vQAkDukaJcFUD/Jdh3ArWlKjqcxDeGZUjoEfEBGrw63GzGJr
bWBtZF7pqiJpu2is6jc5cGLAU2glXmwr1T/2EwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFNIkdJbocSm7cb970wqEqkZsZuIbMB8GA1UdIwQYMBaAFO0SbCBvlhNgUyE7
uLY3DoqDsI7jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA5NzNm
NjRmOGY3YTE3MzY2YTkyYWI3ODQ1YjMyZWRkZGNlMjNjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzI2ZGIzNTYtNDdiZS00ZmQ1LTgxZjktNzllMjA4
MjRlZWI5L2ViYzVhNGYwOTJiMjE5NTc1MGU2MjQwMWNjNDMyMjAwZTkxYWQwYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMjZkYjM1Ni00N2JlLTRmZDUtODFmOS03OWUy
MDgyNGVlYjkvZjA5NzNmNjRmOGY3YTE3MzY2YTkyYWI3ODQ1YjMyZWRkZGNlMjNj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC1ByzAPBAIAAjAJAwcAKAEAGjAAMA0GCSqGSIb3DQEBCwUA
A4IBAQBWyWP0uGZslVzIeiQjjZVYcL1gSN+w6nrl7xjYVHMyayKoGhtZxRKpEd9p
GOLhbMUq0rxuS5f8xTbaQbu7F0iDvP8Kfr/itWU1ZqqhvF9CNHkmEcFPkgZmxxUf
EBlO2PWI5BoW07gGUHTOXI1t9k6yIhkQiNsaaXNR/+Y945RlCAcvLu+a5h0Zf5/G
hqnfi5xelrgOUt/cX97IZSaMiuB/bsnhwG8+vu8UMdZLtDZ7ag6sZQyVD25pqB1k
OGw6lCNnq5FFaL6/lnUMRiyb5uLSenenPCTQXTLFkVADSpCHex7bI2025mO/nje9
NQIbLFVKtIdDFbO0PXt+SjJLf+xl
-----END CERTIFICATE-----