Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/cb3dd7d3d70d9e8173b4fb227abb7b46df4ce4db.roa
File:                     cb3dd7d3d70d9e8173b4fb227abb7b46df4ce4db.roa (raw, json)
Hash identifier:          OQ9uGR7mD16AfKtGH6cNIYRKXfLwdayY5RP9i4KUis0=
Subject key identifier:   F2:8E:FA:33:4D:50:C3:0D:B3:6A:A9:90:D3:70:44:6C:49:34:1F:31
Certificate issuer:       /CN=363d27b2e0e1ef390647383d7ba029d58848034b
Certificate serial:       1F0303
Authority key identifier: C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/cb3dd7d3d70d9e8173b4fb227abb7b46df4ce4db.roa
Signing time:             Tue 04 Apr 2023 21:35:16 +0000
ROA not before:           Mon 03 Apr 2023 21:35:15 +0000
ROA not after:            Fri 04 Apr 2025 21:35:15 +0000
asID:                     264825
IP address blocks:        45.230.240.0/22 maxlen: 24
                          2803:6320::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2032387 (0x1f0303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363d27b2e0e1ef390647383d7ba029d58848034b
        Validity
            Not Before: Apr  3 21:35:15 2023 GMT
            Not After : Apr  4 21:35:15 2025 GMT
        Subject: CN=cb3dd7d3d70d9e8173b4fb227abb7b46df4ce4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b0:53:29:c9:3c:9d:a7:69:36:f4:dd:cf:4d:
                    f8:a6:c3:1c:21:fc:e9:1d:10:dc:78:72:6e:f7:cf:
                    e8:ad:1d:04:aa:e4:fb:67:1c:7c:27:9d:d2:28:a8:
                    54:34:2f:4b:d9:e3:47:39:be:21:74:21:78:d3:83:
                    09:6c:41:cf:20:f3:1e:fb:85:03:a6:bf:ba:db:12:
                    59:27:4c:1c:2f:e8:5c:40:ab:d9:bd:fd:bc:73:f8:
                    55:43:c5:e2:65:26:fe:f9:26:83:cb:46:47:e2:8c:
                    d7:27:25:55:89:fd:b3:f7:cb:8f:f7:26:f3:9e:b4:
                    b3:39:22:da:5f:6f:4e:13:db:66:71:03:7f:c6:df:
                    be:ca:59:39:ae:d6:31:f7:70:bc:f4:85:fd:16:e7:
                    5d:3a:1c:9c:56:55:2f:e9:95:65:39:7d:d2:af:2e:
                    25:a4:9c:db:a7:9e:df:b3:36:24:6e:fd:5e:ab:91:
                    a4:61:9b:e4:bb:dc:60:1a:bb:f6:24:52:d0:3d:32:
                    53:7e:ec:b3:3b:52:b3:43:d8:9b:4c:3b:b7:85:e0:
                    15:31:25:93:04:82:90:a7:73:53:ec:a4:f8:1f:08:
                    b9:0c:c5:40:17:ee:f5:44:6e:11:8c:48:7c:16:2c:
                    ff:7f:e2:59:25:a6:79:5d:e8:c3:2b:5d:73:53:df:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:FA:33:4D:50:C3:0D:B3:6A:A9:90:D3:70:44:6C:49:34:1F:31
            X509v3 Authority Key Identifier:
                keyid:C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/cb3dd7d3d70d9e8173b4fb227abb7b46df4ce4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/363d27b2e0e1ef390647383d7ba029d58848034b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.240.0/22
                IPv6:
                  2803:6320::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:b9:6f:39:5b:b9:f7:af:e2:49:dc:dc:a9:4c:81:39:8f:
         5c:5a:50:3b:6c:37:0d:68:01:fd:1a:72:64:4a:b8:a0:c1:22:
         1e:8d:41:aa:dd:72:a9:92:5d:fa:b7:99:5f:74:8b:6e:d4:cb:
         81:12:de:01:0a:17:4f:f4:43:09:88:31:4c:3f:57:a9:b1:cd:
         5d:c6:b8:cc:d9:e4:74:8c:58:73:71:e7:89:23:f2:44:93:cc:
         83:02:b1:88:18:90:83:aa:48:4d:ac:83:a0:67:ef:9b:4e:55:
         e8:49:42:ad:04:f4:76:ea:92:0c:16:47:46:af:6a:0c:8c:fe:
         dd:1a:fa:61:40:34:1d:11:0f:e1:0c:af:22:27:59:48:2c:45:
         e2:04:53:9b:23:ab:37:36:85:22:35:fb:f1:2e:9d:36:71:01:
         b9:75:48:2e:ed:65:37:80:5d:11:a0:25:be:d1:60:ec:1b:36:
         4a:49:5e:94:27:8f:a6:52:a4:2e:68:19:66:a5:75:79:b0:6e:
         4f:fd:67:89:3a:60:84:55:36:84:0c:25:db:f8:b8:20:6c:55:
         ce:90:02:28:4b:18:bb:6a:b9:82:fe:32:1c:81:a4:f8:6c:a1:
         2e:c2:0d:88:a4:02:12:9c:6b:e0:e2:99:b9:d8:08:43:57:24:
         f4:59:bc:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHwMDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM2
M2QyN2IyZTBlMWVmMzkwNjQ3MzgzZDdiYTAyOWQ1ODg0ODAzNGIwHhcNMjMwNDAz
MjEzNTE1WhcNMjUwNDA0MjEzNTE1WjAzMTEwLwYDVQQDEyhjYjNkZDdkM2Q3MGQ5
ZTgxNzNiNGZiMjI3YWJiN2I0NmRmNGNlNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlrBTKck8nadpNvTdz034psMcIfzpHRDceHJu98/orR0EquT7
Zxx8J53SKKhUNC9L2eNHOb4hdCF404MJbEHPIPMe+4UDpr+62xJZJ0wcL+hcQKvZ
vf28c/hVQ8XiZSb++SaDy0ZH4ozXJyVVif2z98uP9ybznrSzOSLaX29OE9tmcQN/
xt++ylk5rtYx93C89IX9FuddOhycVlUv6ZVlOX3Sry4lpJzbp57fszYkbv1eq5Gk
YZvku9xgGrv2JFLQPTJTfuyzO1KzQ9ibTDu3heAVMSWTBIKQp3NT7KT4Hwi5DMVA
F+71RG4RjEh8Fiz/f+JZJaZ5XejDK11zU98TQQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPKO+jNNUMMNs2qpkNNwRGxJNB8xMB8GA1UdIwQYMBaAFMNuTaJ3HdT+wAvm
6XjCHbQMa5e6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzYzZDI3
YjJlMGUxZWYzOTA2NDczODNkN2JhMDI5ZDU4ODQ4MDM0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RkNWFlNjItMjRhZC00Mjc2LWJlNWMtZTU0MTBi
MWQ0MmQyL2NiM2RkN2QzZDcwZDllODE3M2I0ZmIyMjdhYmI3YjQ2ZGY0Y2U0ZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGQ1YWU2Mi0yNGFkLTQyNzYtYmU1Yy1lNTQx
MGIxZDQyZDIvMzYzZDI3YjJlMGUxZWYzOTA2NDczODNkN2JhMDI5ZDU4ODQ4MDM0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3m8DANBAIAAjAHAwUAKANjIDANBgkqhkiG9w0BAQsFAAOC
AQEADy+5bzlbufev4knc3KlMgTmPXFpQO2w3DWgB/RpyZEq4oMEiHo1Bqt1yqZJd
+reZX3SLbtTLgRLeAQoXT/RDCYgxTD9XqbHNXca4zNnkdIxYc3HniSPyRJPMgwKx
iBiQg6pITayDoGfvm05V6ElCrQT0duqSDBZHRq9qDIz+3Rr6YUA0HREP4QyvIidZ
SCxF4gRTmyOrNzaFIjX78S6dNnEBuXVILu1lN4BdEaAlvtFg7Bs2SklelCePplKk
LmgZZqV1ebBuT/1niTpghFU2hAwl2/i4IGxVzpACKEsYu2q5gv4yHIGk+GyhLsIN
iKQCEpxr4OKZudgIQ1ck9Fm8Mw==
-----END CERTIFICATE-----