Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/9b87c1225f4d82e8a69246515e6077edf2c1a865.roa
File:                     9b87c1225f4d82e8a69246515e6077edf2c1a865.roa (raw, json)
Hash identifier:          Elr02clvRZjTMrkNJIz+10w+vPdFWcKixFifGgUNboc=
Subject key identifier:   A6:DC:FB:8A:F1:33:99:ED:ED:7C:4C:E5:E7:DB:6F:96:C9:3F:F1:AF
Certificate issuer:       /CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
Certificate serial:       165228
Authority key identifier: 71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/9b87c1225f4d82e8a69246515e6077edf2c1a865.roa
Signing time:             Thu 26 May 2022 15:57:39 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269728
IP address blocks:        45.180.140.0/24 maxlen: 24
                          45.180.141.0/24 maxlen: 24
                          2803:1160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462824 (0x165228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=9b87c1225f4d82e8a69246515e6077edf2c1a865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:33:f4:e6:11:28:bb:75:3c:d9:39:31:34:
                    cf:0c:80:b2:74:b3:cb:7f:c6:bd:29:49:12:4e:0a:
                    e5:86:c8:b8:95:44:45:bf:42:ac:75:f0:f1:1f:b1:
                    cb:ce:42:8a:24:98:20:bc:51:68:81:5c:15:39:b1:
                    9f:dc:95:12:86:75:d7:c9:29:c7:79:7a:87:54:17:
                    60:40:f6:96:4d:69:dd:56:f6:80:62:e4:3f:8d:36:
                    44:95:fc:75:d0:bd:15:f8:08:cf:a1:d7:68:52:60:
                    21:63:a4:af:42:78:74:29:89:d9:06:3a:fc:a7:3d:
                    c5:c6:48:bc:ed:58:89:4d:c2:02:9c:68:b7:c3:53:
                    78:f1:3d:77:c1:be:39:78:33:ee:63:dc:55:09:d2:
                    cd:30:e0:79:7f:37:34:96:e3:6b:7d:0e:d1:e3:be:
                    6c:bb:e1:c6:6b:d6:ed:9e:3b:f7:5c:99:6c:7f:cb:
                    44:ba:8d:11:84:e0:97:6f:62:95:d5:27:0f:82:79:
                    28:9f:32:07:97:13:0a:ad:a7:5f:db:47:00:ec:58:
                    b4:6b:52:8a:29:87:d9:5a:f1:42:96:3a:50:2a:03:
                    7d:19:e8:bf:17:e1:39:11:d7:85:b0:fc:15:72:df:
                    ec:c2:ae:31:1f:ff:51:14:19:63:c5:ac:b9:a0:13:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DC:FB:8A:F1:33:99:ED:ED:7C:4C:E5:E7:DB:6F:96:C9:3F:F1:AF
            X509v3 Authority Key Identifier:
                keyid:71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/9b87c1225f4d82e8a69246515e6077edf2c1a865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.140.0/23
                IPv6:
                  2803:1160::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:19:6a:28:54:eb:23:4b:2f:8f:4e:b6:31:65:00:11:67:
         2b:2d:3e:8e:69:79:1c:fc:31:d8:69:69:eb:dd:df:96:1b:70:
         df:1c:50:12:df:28:c4:b7:53:81:f3:cf:1d:39:e7:be:34:fb:
         a0:eb:de:33:7e:46:b4:a7:c1:e3:37:f5:77:3c:31:5d:4c:69:
         bf:89:6a:5b:77:e5:2c:2a:c3:19:b0:f5:39:59:0c:15:df:9a:
         1d:41:af:89:9e:25:bf:0e:7f:64:18:bf:85:35:6a:be:9a:8f:
         10:76:d2:e4:01:e4:fb:a8:c2:9d:da:43:43:0e:9b:2f:bb:10:
         33:b7:d0:b9:32:bc:f9:c1:f2:03:00:28:d4:94:a0:b2:6f:a7:
         b0:b7:36:83:57:90:5e:b8:6f:22:7a:98:ef:0e:2f:be:ef:42:
         e5:40:5d:46:33:5d:54:0d:51:23:68:47:b2:f7:51:de:02:21:
         d9:9d:ca:42:05:49:01:d6:79:6b:77:ea:ad:e9:0f:52:25:c9:
         d8:5b:95:47:ea:f6:92:79:80:4a:b0:1f:e8:74:92:36:39:60:
         2f:1e:97:66:25:74:9b:9a:a1:92:ee:68:bf:a4:cc:1a:b9:38:
         2f:cc:66:70:a5:9d:cf:ef:c6:08:94:96:c2:86:6c:63:85:ef:
         ce:ae:5f:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFlIoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
Yjk1M2IxMjg0MmZmZTBkOTdjYTZmZWRiZTc1NTBlNWE0MDBhY2YwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg5Yjg3YzEyMjVmNGQ4
MmU4YTY5MjQ2NTE1ZTYwNzdlZGYyYzFhODY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzYIz9OYRKLt1PNk5MTTPDICydLPLf8a9KUkSTgrlhsi4lURF
v0KsdfDxH7HLzkKKJJggvFFogVwVObGf3JUShnXXySnHeXqHVBdgQPaWTWndVvaA
YuQ/jTZElfx10L0V+AjPoddoUmAhY6SvQnh0KYnZBjr8pz3Fxki87ViJTcICnGi3
w1N48T13wb45eDPuY9xVCdLNMOB5fzc0luNrfQ7R475su+HGa9btnjv3XJlsf8tE
uo0RhOCXb2KV1ScPgnkonzIHlxMKradf20cA7Fi0a1KKKYfZWvFCljpQKgN9Gei/
F+E5EdeFsPwVct/swq4xH/9RFBljxay5oBNXFQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKbc+4rxM5nt7XxM5efbb5bJP/GvMB8GA1UdIwQYMBaAFHGF6/uoC1NB2FI9
SKD9UpQu5U5jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThiOTUz
YjEyODQyZmZlMGQ5N2NhNmZlZGJlNzU1MGU1YTQwMGFjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU4YzkyYzgtYTM4Ni00OWMzLTk2OTEtOGVlM2M0
ZmYxN2VlLzliODdjMTIyNWY0ZDgyZThhNjkyNDY1MTVlNjA3N2VkZjJjMWE4NjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NThjOTJjOC1hMzg2LTQ5YzMtOTY5MS04ZWUz
YzRmZjE3ZWUvZThiOTUzYjEyODQyZmZlMGQ5N2NhNmZlZGJlNzU1MGU1YTQwMGFj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAS20jDANBAIAAjAHAwUAKAMRYDANBgkqhkiG9w0BAQsFAAOC
AQEAHG8ZaihU6yNLL49OtjFlABFnKy0+jml5HPwx2Glp693flhtw3xxQEt8oxLdT
gfPPHTnnvjT7oOveM35GtKfB4zf1dzwxXUxpv4lqW3flLCrDGbD1OVkMFd+aHUGv
iZ4lvw5/ZBi/hTVqvpqPEHbS5AHk+6jCndpDQw6bL7sQM7fQuTK8+cHyAwAo1JSg
sm+nsLc2g1eQXrhvInqY7w4vvu9C5UBdRjNdVA1RI2hHsvdR3gIh2Z3KQgVJAdZ5
a3fqrekPUiXJ2FuVR+r2knmASrAf6HSSNjlgLx6XZiV0m5qhku5ov6TMGrk4L8xm
cKWdz+/GCJSWwoZsY4Xvzq5fCw==
-----END CERTIFICATE-----