Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/80a95d1dadcc2a42c62848008a7c408e49fca24b.roa
File:                     80a95d1dadcc2a42c62848008a7c408e49fca24b.roa (raw, json)
Hash identifier:          LRAPqeypC405eRG5eTcLQsQwjovcnByv3Yf3u4ql4e4=
Subject key identifier:   AF:9B:8A:A3:09:D2:A6:14:88:95:0F:9F:B0:ED:FE:26:53:29:44:6B
Certificate issuer:       /CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
Certificate serial:       267C0B
Authority key identifier: 2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/80a95d1dadcc2a42c62848008a7c408e49fca24b.roa
Signing time:             Fri 23 Feb 2024 07:54:24 +0000
ROA not before:           Fri 23 Feb 2024 07:54:23 +0000
ROA not after:            Mon 23 Feb 2026 07:54:23 +0000
asID:                     266783
IP address blocks:        45.235.12.0/22 maxlen: 24
                          2803:bf20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2522123 (0x267c0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
        Validity
            Not Before: Feb 23 07:54:23 2024 GMT
            Not After : Feb 23 07:54:23 2026 GMT
        Subject: CN=80a95d1dadcc2a42c62848008a7c408e49fca24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:a8:8f:45:f7:3a:16:ff:66:29:22:86:ad:
                    77:67:77:ea:ea:18:16:27:a3:27:fd:cb:45:17:75:
                    be:2e:4c:61:34:49:85:b5:23:fa:84:52:20:63:2a:
                    15:e6:aa:39:ef:a4:ed:7c:39:37:61:61:e8:b0:2c:
                    1a:e9:a3:7a:b0:57:67:43:38:cb:be:e8:8f:9b:96:
                    0c:4e:de:16:8f:58:28:92:f2:b2:eb:7d:98:f3:4b:
                    7c:40:2e:5a:ae:33:89:62:7e:98:c3:dc:7b:56:b5:
                    38:98:0c:52:da:d5:68:ff:38:f9:ca:a3:a9:71:bf:
                    46:a5:dd:58:a9:85:90:f4:b7:4b:b7:bf:ae:f4:72:
                    75:7f:65:ac:45:af:aa:d2:61:f2:cc:90:20:5e:7d:
                    cd:34:35:57:a1:42:77:ee:0e:05:54:80:26:f4:df:
                    23:f1:40:5a:59:73:c0:a5:be:05:14:c8:44:1e:c6:
                    3e:35:43:b5:2c:d2:87:e9:f8:16:c7:6a:92:4b:29:
                    c7:34:12:14:64:d6:05:d5:01:11:c7:bc:ff:60:53:
                    c7:7e:7e:44:6c:c5:73:48:a6:aa:10:bc:98:08:54:
                    ca:ac:27:51:50:29:0c:6d:fd:c8:bc:24:2f:6a:a1:
                    a1:a0:40:55:aa:d7:92:1f:5f:20:a6:aa:d3:52:64:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:8A:A3:09:D2:A6:14:88:95:0F:9F:B0:ED:FE:26:53:29:44:6B
            X509v3 Authority Key Identifier:
                keyid:2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/80a95d1dadcc2a42c62848008a7c408e49fca24b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.12.0/22
                IPv6:
                  2803:bf20::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:a0:c1:2d:ed:f6:2e:b0:12:61:bc:d1:e1:09:ec:c8:ca:
         d0:df:0d:56:5e:47:19:b9:d6:e9:8b:d7:22:98:7b:c2:d6:dc:
         89:ea:ce:8f:f8:33:b9:af:9e:a3:cd:25:6d:50:51:83:db:61:
         d0:2a:f9:50:80:b2:71:f2:bb:63:03:9e:06:3c:4f:39:4f:ac:
         df:8a:3a:74:c2:1d:94:08:b2:d6:c8:55:91:45:ea:a2:b5:12:
         e4:b0:21:07:07:d5:f2:84:ea:4a:a8:41:47:79:81:4b:de:d9:
         9f:e4:bc:0f:39:a6:86:df:08:a5:d8:f2:8a:ff:9f:e6:d7:7e:
         22:a0:d9:1c:7e:f9:29:fa:34:1e:a2:90:e7:c5:d0:28:db:11:
         89:86:64:94:58:ba:c8:7f:fc:7e:a0:8a:54:28:5a:aa:d0:ef:
         fe:b0:ab:f1:81:f4:ba:71:71:a8:4a:9e:9d:44:dd:f6:3d:2b:
         75:f6:a0:3a:9c:0a:22:ad:de:77:f8:40:d5:32:30:ab:5f:b5:
         eb:78:24:d1:03:53:56:e4:0f:cf:14:10:79:81:4c:b6:d8:15:
         96:af:5b:ff:b1:0a:83:62:d3:7d:22:a6:eb:2e:0d:da:6e:e9:
         ce:85:30:1a:eb:2e:d1:3b:c5:29:e9:aa:bf:ea:95:b6:6c:eb:
         ad:6d:6d:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJnwLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
M2ViOWM4MDZkZmQyMDNmZGI2ZmM0OTAzMTA1NzUwNWEwYzZmMTMwHhcNMjQwMjIz
MDc1NDIzWhcNMjYwMjIzMDc1NDIzWjAzMTEwLwYDVQQDEyg4MGE5NWQxZGFkY2My
YTQyYzYyODQ4MDA4YTdjNDA4ZTQ5ZmNhMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiSSoj0X3Ohb/Zikihq13Z3fq6hgWJ6Mn/ctFF3W+LkxhNEmF
tSP6hFIgYyoV5qo576TtfDk3YWHosCwa6aN6sFdnQzjLvuiPm5YMTt4Wj1gokvKy
632Y80t8QC5arjOJYn6Yw9x7VrU4mAxS2tVo/zj5yqOpcb9Gpd1YqYWQ9LdLt7+u
9HJ1f2WsRa+q0mHyzJAgXn3NNDVXoUJ37g4FVIAm9N8j8UBaWXPApb4FFMhEHsY+
NUO1LNKH6fgWx2qSSynHNBIUZNYF1QERx7z/YFPHfn5EbMVzSKaqELyYCFTKrCdR
UCkMbf3IvCQvaqGhoEBVqteSH18gpqrTUmR21QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFK+biqMJ0qYUiJUPn7Dt/iZTKURrMB8GA1UdIwQYMBaAFC+buA2f+FWO9UcZ
/9CyTFxrKUsUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmMzZWI5
YzgwNmRmZDIwM2ZkYjZmYzQ5MDMxMDU3NTA1YTBjNmYxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODk0NGYzNmItMjMyNS00NGVkLWI4MDMtNzU2NmVl
MDU3Y2Q4LzgwYTk1ZDFkYWRjYzJhNDJjNjI4NDgwMDhhN2M0MDhlNDlmY2EyNGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OTQ0ZjM2Yi0yMzI1LTQ0ZWQtYjgwMy03NTY2
ZWUwNTdjZDgvZmMzZWI5YzgwNmRmZDIwM2ZkYjZmYzQ5MDMxMDU3NTA1YTBjNmYx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3rDDANBAIAAjAHAwUAKAO/IDANBgkqhkiG9w0BAQsFAAOC
AQEAhe+gwS3t9i6wEmG80eEJ7MjK0N8NVl5HGbnW6YvXIph7wtbcierOj/gzua+e
o80lbVBRg9th0Cr5UICycfK7YwOeBjxPOU+s34o6dMIdlAiy1shVkUXqorUS5LAh
BwfV8oTqSqhBR3mBS97Zn+S8Dzmmht8Ipdjyiv+f5td+IqDZHH75Kfo0HqKQ58XQ
KNsRiYZklFi6yH/8fqCKVChaqtDv/rCr8YH0unFxqEqenUTd9j0rdfagOpwKIq3e
d/hA1TIwq1+163gk0QNTVuQPzxQQeYFMttgVlq9b/7EKg2LTfSKm6y4N2m7pzoUw
Gusu0TvFKemqv+qVtmzrrW1t0Q==
-----END CERTIFICATE-----