Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/354dfe59-0418-4f2a-ad5e-d409f6b13e43/3c466e1e22bd69fbef0a4a8a0d5cdc0e2a489cb3.roa
File:                     3c466e1e22bd69fbef0a4a8a0d5cdc0e2a489cb3.roa (raw, json)
Hash identifier:          1R5nTbb2/eAbA/o1S4HENnEFRUes0z/AnVhphJrF5Wg=
Subject key identifier:   01:EB:CD:E6:64:74:E7:14:0B:16:65:3B:9D:61:3B:2D:1B:28:D4:7D
Certificate issuer:       /CN=b3ef8c23945b7ac886b16f73a9f53c1fe5b3dcaf
Certificate serial:       0EEA
Authority key identifier: 55:AF:C2:47:75:55:BB:26:7E:2B:64:44:AD:38:AB:11:5A:AC:82:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3ef8c23945b7ac886b16f73a9f53c1fe5b3dcaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/354dfe59-0418-4f2a-ad5e-d409f6b13e43/3c466e1e22bd69fbef0a4a8a0d5cdc0e2a489cb3.roa
Signing time:             Fri 13 Aug 2021 20:57:09 +0000
ROA not before:           Fri 13 Aug 2021 03:00:00 +0000
ROA not after:            Thu 13 Aug 2026 03:00:00 +0000
asID:                     52327
IP address blocks:        45.226.100.0/22 maxlen: 24
                          2803:fa20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3818 (0xeea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ef8c23945b7ac886b16f73a9f53c1fe5b3dcaf
        Validity
            Not Before: Aug 13 03:00:00 2021 GMT
            Not After : Aug 13 03:00:00 2026 GMT
        Subject: CN=3c466e1e22bd69fbef0a4a8a0d5cdc0e2a489cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:c1:9f:db:09:88:05:ae:b0:df:1b:ff:36:
                    3f:4b:29:fd:f1:ef:e3:bf:65:74:f7:83:86:b3:74:
                    fa:28:2c:4b:06:d5:70:4c:73:e2:71:0c:2f:43:9c:
                    65:55:8e:ca:2d:e1:67:4d:94:29:04:a8:74:eb:98:
                    d8:35:4b:e7:03:00:70:d1:f3:57:6e:fb:bd:d8:ae:
                    2f:e7:de:21:96:6c:e6:1c:98:f9:f6:0a:27:32:a3:
                    90:16:96:e3:bd:e4:df:e2:48:e7:02:69:5a:a2:2a:
                    c3:f9:aa:08:44:6a:1b:87:59:71:b4:40:2c:91:a5:
                    27:a5:72:d6:3c:58:60:0d:d0:5d:be:6a:34:98:dd:
                    7d:8b:b3:c7:f1:5a:59:a1:e5:38:fa:75:64:b0:10:
                    b8:d5:38:99:19:5c:ac:2c:a5:68:0e:18:e7:71:63:
                    47:3d:12:99:3c:e9:d1:fa:22:d0:46:95:93:4a:ff:
                    83:7e:44:70:83:60:f0:36:8b:f4:2a:24:7f:13:c5:
                    7d:76:12:f2:9a:fb:3b:26:87:7f:1e:3c:5b:3d:92:
                    a1:85:42:76:9b:0d:96:4b:18:ba:a6:54:3d:0d:7e:
                    c4:41:b5:b2:3e:5d:3a:b7:3c:5b:ad:94:13:a8:4e:
                    af:55:ad:5d:4a:ad:56:23:68:7c:ba:f8:51:12:b0:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:CD:E6:64:74:E7:14:0B:16:65:3B:9D:61:3B:2D:1B:28:D4:7D
            X509v3 Authority Key Identifier:
                keyid:55:AF:C2:47:75:55:BB:26:7E:2B:64:44:AD:38:AB:11:5A:AC:82:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3ef8c23945b7ac886b16f73a9f53c1fe5b3dcaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/354dfe59-0418-4f2a-ad5e-d409f6b13e43/3c466e1e22bd69fbef0a4a8a0d5cdc0e2a489cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/354dfe59-0418-4f2a-ad5e-d409f6b13e43/b3ef8c23945b7ac886b16f73a9f53c1fe5b3dcaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.100.0/22
                IPv6:
                  2803:fa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:05:01:65:5e:76:08:8e:06:78:53:f6:fd:b6:3e:59:89:
         67:79:64:64:7e:d8:65:ba:76:58:23:fa:74:10:93:cf:d5:c4:
         3c:de:cb:f0:11:96:6d:81:bc:ef:41:ed:e6:c3:ef:05:3f:ed:
         4e:ec:ad:fd:fe:89:00:39:6c:5c:f6:72:7f:60:b5:be:82:94:
         76:b2:df:c8:4f:f1:5e:66:b1:b6:b6:47:11:8e:d5:d0:c8:b0:
         a3:35:38:0f:f6:37:54:93:77:3c:29:ea:f7:34:7e:a4:52:5f:
         92:30:ad:c5:8f:67:8a:4a:bf:62:10:1b:09:09:8e:ee:d0:4b:
         2f:21:12:8d:50:c4:ff:55:d5:cb:d8:79:d4:35:be:e7:8d:42:
         c4:41:e4:f1:40:97:9a:70:33:83:c4:59:f9:a9:c5:b6:98:aa:
         af:7b:fc:e9:02:a2:30:f8:d7:1c:10:e5:ee:8e:04:45:63:85:
         0d:e3:40:75:cf:b5:74:67:54:92:30:47:02:3f:ff:56:5d:16:
         1d:e4:fb:5d:ea:06:74:93:17:db:9b:37:75:38:0a:f0:a0:19:
         67:96:dc:ca:4a:e1:5a:94:12:cd:da:4c:37:ff:a0:9a:0f:6c:
         18:ad:93:e2:ba:1c:bf:8f:03:6f:e7:dc:73:fe:d7:e6:e1:2c:
         b7:f3:12:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICDuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjNl
ZjhjMjM5NDViN2FjODg2YjE2ZjczYTlmNTNjMWZlNWIzZGNhZjAeFw0yMTA4MTMw
MzAwMDBaFw0yNjA4MTMwMzAwMDBaMDMxMTAvBgNVBAMTKDNjNDY2ZTFlMjJiZDY5
ZmJlZjBhNGE4YTBkNWNkYzBlMmE0ODljYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoB8Gf2wmIBa6w3xv/Nj9LKf3x7+O/ZXT3g4azdPooLEsG1XBM
c+JxDC9DnGVVjsot4WdNlCkEqHTrmNg1S+cDAHDR81du+73Yri/n3iGWbOYcmPn2
Cicyo5AWluO95N/iSOcCaVqiKsP5qghEahuHWXG0QCyRpSelctY8WGAN0F2+ajSY
3X2Ls8fxWlmh5Tj6dWSwELjVOJkZXKwspWgOGOdxY0c9Epk86dH6ItBGlZNK/4N+
RHCDYPA2i/QqJH8TxX12EvKa+zsmh38ePFs9kqGFQnabDZZLGLqmVD0NfsRBtbI+
XTq3PFutlBOoTq9VrV1KrVYjaHy6+FESsCxTAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUAevN5mR05xQLFmU7nWE7LRso1H0wHwYDVR0jBBgwFoAUVa/CR3VVuyZ+K2RE
rTirEVqsglQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iM2VmOGMy
Mzk0NWI3YWM4ODZiMTZmNzNhOWY1M2MxZmU1YjNkY2FmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zNTRkZmU1OS0wNDE4LTRmMmEtYWQ1ZS1kNDA5ZjZi
MTNlNDMvM2M0NjZlMWUyMmJkNjlmYmVmMGE0YThhMGQ1Y2RjMGUyYTQ4OWNiMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzM1NGRmZTU5LTA0MTgtNGYyYS1hZDVlLWQ0MDlm
NmIxM2U0My9iM2VmOGMyMzk0NWI3YWM4ODZiMTZmNzNhOWY1M2MxZmU1YjNkY2Fm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLeJkMA0EAgACMAcDBQAoA/ogMA0GCSqGSIb3DQEBCwUAA4IB
AQCHyAUBZV52CI4GeFP2/bY+WYlneWRkfthlunZYI/p0EJPP1cQ83svwEZZtgbzv
Qe3mw+8FP+1O7K39/okAOWxc9nJ/YLW+gpR2st/IT/FeZrG2tkcRjtXQyLCjNTgP
9jdUk3c8Ker3NH6kUl+SMK3Fj2eKSr9iEBsJCY7u0EsvIRKNUMT/VdXL2HnUNb7n
jULEQeTxQJeacDODxFn5qcW2mKqve/zpAqIw+NccEOXujgRFY4UN40B1z7V0Z1SS
MEcCP/9WXRYd5Ptd6gZ0kxfbmzd1OArwoBlnltzKSuFalBLN2kw3/6CaD2wYrZPi
uhy/jwNv59xz/tfm4Sy38xKd
-----END CERTIFICATE-----