Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50c293f8-4526-4970-9b12-911c1b4ab0bd/c141539380448e0d687319c8c48c12d3944aee7c.roa
File:                     c141539380448e0d687319c8c48c12d3944aee7c.roa (raw, json)
Hash identifier:          Ae+VVLWdYhTeFOR2QpSmYp8jzP4LtbJeocqB4qJMhYI=
Subject key identifier:   D8:AA:26:9B:3E:59:1D:69:B1:C7:8E:C3:01:DD:F5:DA:A1:4C:E6:3F
Certificate issuer:       /CN=43700defc1ee59c66388e2190f78478c98344e02
Certificate serial:       0403
Authority key identifier: 95:1A:13:08:F4:66:CA:B8:9C:C9:D3:BF:C0:36:9F:9D:03:8F:A4:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43700defc1ee59c66388e2190f78478c98344e02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50c293f8-4526-4970-9b12-911c1b4ab0bd/c141539380448e0d687319c8c48c12d3944aee7c.roa
Signing time:             Thu 30 Mar 2023 14:26:46 +0000
ROA not before:           Wed 29 Mar 2023 14:11:58 +0000
ROA not after:            Sun 30 Mar 2025 14:11:58 +0000
asID:                     269796
IP address blocks:        45.185.31.0/24 maxlen: 24
                          2803:f360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43700defc1ee59c66388e2190f78478c98344e02
        Validity
            Not Before: Mar 29 14:11:58 2023 GMT
            Not After : Mar 30 14:11:58 2025 GMT
        Subject: CN=c141539380448e0d687319c8c48c12d3944aee7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:3f:73:8d:7e:bb:57:d3:41:f2:f5:58:2c:
                    9d:ad:b8:87:04:62:5c:21:51:2a:f7:8f:72:a7:59:
                    07:1b:74:75:11:a4:fd:62:6d:cc:33:0d:d4:cc:e6:
                    ff:2a:b2:ba:9b:7a:54:d9:15:82:cd:19:12:10:86:
                    78:75:73:de:70:44:78:73:4d:86:2c:db:7a:fb:3f:
                    15:77:97:ed:6c:97:69:a2:f5:a3:71:e7:6d:27:45:
                    db:48:d5:2b:db:8d:6f:a6:08:e1:7f:56:da:5a:63:
                    0b:8e:42:ad:d4:a3:c2:22:c5:2b:a4:f5:0b:23:d2:
                    a3:ee:23:b3:2c:7b:9b:c9:7f:02:80:85:cb:34:76:
                    ab:a6:83:e6:44:94:42:fc:72:69:59:a8:28:c2:0d:
                    ab:76:44:e0:db:e4:92:1e:09:f9:e8:d0:7d:44:3d:
                    12:35:a9:7b:08:46:41:ee:ca:cd:30:66:68:a8:7d:
                    80:67:7f:6c:28:39:34:28:f5:19:9e:00:79:30:f1:
                    86:2f:da:14:4c:6c:3f:3b:53:08:b5:8d:ae:2b:e7:
                    5d:ea:2d:5b:9f:a5:39:1d:ac:6c:fd:83:f4:11:6f:
                    db:e4:d0:53:73:ce:9c:d5:c4:73:ab:1b:97:00:c5:
                    6e:35:48:ab:f2:14:2c:dc:ee:54:83:63:b2:8a:9b:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AA:26:9B:3E:59:1D:69:B1:C7:8E:C3:01:DD:F5:DA:A1:4C:E6:3F
            X509v3 Authority Key Identifier:
                keyid:95:1A:13:08:F4:66:CA:B8:9C:C9:D3:BF:C0:36:9F:9D:03:8F:A4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43700defc1ee59c66388e2190f78478c98344e02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50c293f8-4526-4970-9b12-911c1b4ab0bd/c141539380448e0d687319c8c48c12d3944aee7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50c293f8-4526-4970-9b12-911c1b4ab0bd/43700defc1ee59c66388e2190f78478c98344e02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.31.0/24
                IPv6:
                  2803:f360::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:47:79:f5:e9:95:35:de:85:4c:2f:b7:cb:18:29:c5:c7:
         11:80:9f:05:d5:fc:92:10:0a:ab:98:b3:0b:ce:14:67:f9:75:
         93:7c:2f:90:15:3e:78:26:d6:e8:f1:ca:4d:11:a0:21:c8:e2:
         1c:0a:fc:92:19:47:d4:9e:d3:d6:f6:de:5e:c4:88:08:ed:d1:
         d6:fe:38:1f:cd:a7:9d:72:e4:3b:b7:f4:cf:98:35:03:c6:e2:
         ef:ce:13:3e:7d:15:40:ed:02:23:79:b0:a1:68:41:97:28:13:
         96:3d:0e:62:43:ec:65:ff:36:81:15:d5:35:94:19:96:15:80:
         6d:45:3f:43:2e:be:35:11:18:2d:6b:bb:4a:c0:5a:c5:6a:5d:
         d5:3a:a7:e5:2b:e7:2e:aa:a5:89:c3:8c:2b:aa:c7:fa:f8:f7:
         ea:c8:90:3e:a8:c1:a8:ec:7d:a0:75:7b:65:f2:c1:cd:ba:f3:
         bf:be:ac:0b:78:c6:d2:45:ee:3c:5b:a8:1d:1d:56:94:51:2d:
         79:82:55:34:77:f7:0d:cc:ce:7f:4b:58:f5:90:77:2c:7c:0c:
         49:a5:7f:05:c2:7a:10:91:2f:73:74:a9:5c:84:24:78:f6:67:
         77:ba:7f:f4:fc:a8:66:a9:51:64:65:e3:17:dd:28:13:1f:1d:
         1a:f9:89:d5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM3
MDBkZWZjMWVlNTljNjYzODhlMjE5MGY3ODQ3OGM5ODM0NGUwMjAeFw0yMzAzMjkx
NDExNThaFw0yNTAzMzAxNDExNThaMDMxMTAvBgNVBAMTKGMxNDE1MzkzODA0NDhl
MGQ2ODczMTljOGM0OGMxMmQzOTQ0YWVlN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfmD9zjX67V9NB8vVYLJ2tuIcEYlwhUSr3j3KnWQcbdHURpP1i
bcwzDdTM5v8qsrqbelTZFYLNGRIQhnh1c95wRHhzTYYs23r7PxV3l+1sl2mi9aNx
520nRdtI1SvbjW+mCOF/VtpaYwuOQq3Uo8IixSuk9Qsj0qPuI7Mse5vJfwKAhcs0
dqumg+ZElEL8cmlZqCjCDat2RODb5JIeCfno0H1EPRI1qXsIRkHuys0wZmiofYBn
f2woOTQo9RmeAHkw8YYv2hRMbD87Uwi1ja4r513qLVufpTkdrGz9g/QRb9vk0FNz
zpzVxHOrG5cAxW41SKvyFCzc7lSDY7KKmy97AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQU2Kommz5ZHWmxx47DAd312qFM5j8wHwYDVR0jBBgwFoAUlRoTCPRmyricydO/
wDafnQOPpBwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80MzcwMGRl
ZmMxZWU1OWM2NjM4OGUyMTkwZjc4NDc4Yzk4MzQ0ZTAyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy81MGMyOTNmOC00NTI2LTQ5NzAtOWIxMi05MTFjMWI0
YWIwYmQvYzE0MTUzOTM4MDQ0OGUwZDY4NzMxOWM4YzQ4YzEyZDM5NDRhZWU3Yy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzUwYzI5M2Y4LTQ1MjYtNDk3MC05YjEyLTkxMWMx
YjRhYjBiZC80MzcwMGRlZmMxZWU1OWM2NjM4OGUyMTkwZjc4NDc4Yzk4MzQ0ZTAy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQALbkfMA0EAgACMAcDBQAoA/NgMA0GCSqGSIb3DQEBCwUAA4IB
AQBGakd59emVNd6FTC+3yxgpxccRgJ8F1fySEAqrmLMLzhRn+XWTfC+QFT54Jtbo
8cpNEaAhyOIcCvySGUfUntPW9t5exIgI7dHW/jgfzaedcuQ7t/TPmDUDxuLvzhM+
fRVA7QIjebChaEGXKBOWPQ5iQ+xl/zaBFdU1lBmWFYBtRT9DLr41ERgta7tKwFrF
al3VOqflK+cuqqWJw4wrqsf6+PfqyJA+qMGo7H2gdXtl8sHNuvO/vqwLeMbSRe48
W6gdHVaUUS15glU0d/cNzM5/S1j1kHcsfAxJpX8FwnoQkS9zdKlchCR49md3un/0
/KhmqVFkZeMX3SgTHx0a+YnV
-----END CERTIFICATE-----