Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/7b3f93991031aec76c785cc82d884f7373aa9201.roa
File:                     7b3f93991031aec76c785cc82d884f7373aa9201.roa (raw, json)
Hash identifier:          Q41sVMLFsW/W45QZmczSsYJ44Vg5vbxCRg6ZhE0iAOI=
Subject key identifier:   B1:C6:AD:6A:77:0C:D8:D0:D0:4D:C8:9F:07:0B:B2:F1:D7:8D:F3:ED
Certificate issuer:       /CN=ad25e0e95ec04958be3de512ff6388c7b80e5fe5
Certificate serial:       08E1
Authority key identifier: B5:8C:13:04:EF:B2:A1:FE:B4:DE:61:BE:94:EC:37:5B:8D:E4:AB:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/7b3f93991031aec76c785cc82d884f7373aa9201.roa
Signing time:             Wed 16 Jun 2021 15:48:26 +0000
ROA not before:           Tue 15 Jun 2021 03:00:00 +0000
ROA not after:            Sun 15 Jun 2025 03:00:00 +0000
asID:                     269906
IP address blocks:        45.191.80.0/22 maxlen: 24
                          2803:cce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad25e0e95ec04958be3de512ff6388c7b80e5fe5
        Validity
            Not Before: Jun 15 03:00:00 2021 GMT
            Not After : Jun 15 03:00:00 2025 GMT
        Subject: CN=7b3f93991031aec76c785cc82d884f7373aa9201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:e6:80:15:91:70:43:10:92:ca:5d:d3:dc:
                    77:67:93:ae:20:03:2b:7a:58:2e:ed:15:85:ca:1b:
                    8a:a2:2f:fe:54:6f:04:30:b9:a2:e3:09:09:03:06:
                    4d:9d:03:ae:ba:40:b7:90:33:81:9b:17:f0:74:88:
                    a0:c8:33:bc:4a:3f:1a:e5:2f:e6:c2:a9:a4:59:21:
                    94:af:3c:b2:a5:ea:32:2f:e1:4e:eb:9d:e8:40:93:
                    f2:7b:5f:cb:54:66:c4:97:d4:0e:ea:fe:1b:13:d9:
                    72:09:1e:f8:17:7f:06:7c:17:a6:5e:a6:cb:b1:53:
                    fc:40:ee:b6:fc:1e:7a:8b:f0:68:63:c1:ce:88:df:
                    0d:47:a2:95:8e:6d:c0:96:b1:b0:ef:fa:8a:88:fa:
                    93:eb:b7:22:c9:1d:c4:bf:4a:33:61:6a:10:db:e0:
                    18:0c:e3:3d:cb:9b:13:72:06:09:9a:59:53:30:40:
                    a3:a3:63:aa:f4:64:d3:35:22:08:dd:0c:87:1b:7a:
                    d0:b9:b0:c7:83:c6:7e:30:8e:a9:24:d9:b1:b3:2f:
                    b9:47:59:26:29:14:45:23:bf:d5:77:82:7c:b7:a0:
                    12:0d:ff:52:8e:53:8f:8f:12:32:66:72:08:d4:4b:
                    6d:4a:18:2e:56:6f:f9:2f:a5:6d:ea:4f:1f:08:ae:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:AD:6A:77:0C:D8:D0:D0:4D:C8:9F:07:0B:B2:F1:D7:8D:F3:ED
            X509v3 Authority Key Identifier:
                keyid:B5:8C:13:04:EF:B2:A1:FE:B4:DE:61:BE:94:EC:37:5B:8D:E4:AB:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/7b3f93991031aec76c785cc82d884f7373aa9201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3bf89935-1fb0-4338-9db3-16254ba45712/ad25e0e95ec04958be3de512ff6388c7b80e5fe5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.80.0/22
                IPv6:
                  2803:cce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:0d:9d:33:89:87:b2:b7:32:40:f5:8e:ba:71:47:59:58:
         a0:b5:d3:cb:57:85:71:9f:34:28:89:29:d4:5c:d5:ea:2c:9f:
         f7:ec:58:05:ba:07:3d:88:64:4d:52:0f:2c:ec:27:30:6a:7f:
         52:4f:61:0a:bc:1f:9c:fe:99:47:b8:26:46:d2:bb:19:71:b0:
         0d:af:68:37:e9:1d:16:5c:f4:8e:fe:1e:2b:ab:8f:16:41:2d:
         4a:00:b8:a6:8e:7b:68:98:0c:9c:bf:37:34:10:a9:e7:63:4a:
         9e:ec:7f:c0:ef:06:64:0f:0d:50:f0:0a:24:6c:93:83:93:75:
         7b:bc:57:e4:e4:a5:44:d9:69:29:25:1d:66:21:fd:02:ec:9f:
         4d:04:04:59:40:89:1a:65:af:9a:ae:1e:be:c4:b8:2e:e6:de:
         2e:6b:4b:b5:ce:fb:66:fb:6f:44:d3:40:fd:25:3d:90:56:5f:
         51:ea:f8:89:e5:9b:1a:84:ba:6d:96:c9:c9:fc:1f:c6:5a:38:
         12:92:23:36:91:a9:13:87:fc:23:7b:fc:ac:27:97:a9:4b:6a:
         9f:4f:3a:41:a1:4c:aa:d2:04:df:82:37:84:49:1c:50:1f:2d:
         ac:e5:17:5d:6b:3e:01:e5:0c:4e:4a:02:2a:72:6d:4d:7a:85:
         28:6e:e2:46
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYWQy
NWUwZTk1ZWMwNDk1OGJlM2RlNTEyZmY2Mzg4YzdiODBlNWZlNTAeFw0yMTA2MTUw
MzAwMDBaFw0yNTA2MTUwMzAwMDBaMDMxMTAvBgNVBAMTKDdiM2Y5Mzk5MTAzMWFl
Yzc2Yzc4NWNjODJkODg0ZjczNzNhYTkyMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDp1eaAFZFwQxCSyl3T3Hdnk64gAyt6WC7tFYXKG4qiL/5UbwQw
uaLjCQkDBk2dA666QLeQM4GbF/B0iKDIM7xKPxrlL+bCqaRZIZSvPLKl6jIv4U7r
nehAk/J7X8tUZsSX1A7q/hsT2XIJHvgXfwZ8F6ZepsuxU/xA7rb8HnqL8Ghjwc6I
3w1HopWObcCWsbDv+oqI+pPrtyLJHcS/SjNhahDb4BgM4z3LmxNyBgmaWVMwQKOj
Y6r0ZNM1IgjdDIcbetC5sMeDxn4wjqkk2bGzL7lHWSYpFEUjv9V3gny3oBIN/1KO
U4+PEjJmcgjUS21KGC5Wb/kvpW3qTx8Irv+DAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUscatancM2NDQTcifBwuy8deN8+0wHwYDVR0jBBgwFoAUtYwTBO+yof603mG+
lOw3W43kq6QwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hZDI1ZTBl
OTVlYzA0OTU4YmUzZGU1MTJmZjYzODhjN2I4MGU1ZmU1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zYmY4OTkzNS0xZmIwLTQzMzgtOWRiMy0xNjI1NGJh
NDU3MTIvN2IzZjkzOTkxMDMxYWVjNzZjNzg1Y2M4MmQ4ODRmNzM3M2FhOTIwMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNiZjg5OTM1LTFmYjAtNDMzOC05ZGIzLTE2MjU0
YmE0NTcxMi9hZDI1ZTBlOTVlYzA0OTU4YmUzZGU1MTJmZjYzODhjN2I4MGU1ZmU1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLb9QMA0EAgACMAcDBQAoA8zgMA0GCSqGSIb3DQEBCwUAA4IB
AQCRng2dM4mHsrcyQPWOunFHWVigtdPLV4VxnzQoiSnUXNXqLJ/37FgFugc9iGRN
Ug8s7Ccwan9ST2EKvB+c/plHuCZG0rsZcbANr2g36R0WXPSO/h4rq48WQS1KALim
jntomAycvzc0EKnnY0qe7H/A7wZkDw1Q8AokbJODk3V7vFfk5KVE2WkpJR1mIf0C
7J9NBARZQIkaZa+arh6+xLgu5t4ua0u1zvtm+29E00D9JT2QVl9R6viJ5ZsahLpt
lsnJ/B/GWjgSkiM2kakTh/wje/ysJ5epS2qfTzpBoUyq0gTfgjeESRxQHy2s5Rdd
az4B5QxOSgIqcm1NeoUobuJG
-----END CERTIFICATE-----