Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/555ca5cf7719d2c38a9a86c6ad56ef3338e51cc8.roa
File:                     555ca5cf7719d2c38a9a86c6ad56ef3338e51cc8.roa (raw, json)
Hash identifier:          70l8Z/zLPRvxxOaefOmWQXFMUpgOnA1aXyq4RPlXnDc=
Subject key identifier:   82:BF:1E:7F:52:3B:C3:2C:6D:FB:B8:49:2E:FA:5D:D7:43:FA:3C:80
Certificate issuer:       /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial:       0F035E
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/555ca5cf7719d2c38a9a86c6ad56ef3338e51cc8.roa
Signing time:             Tue 07 Jun 2022 15:24:29 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     266760
IP address blocks:        45.232.204.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983902 (0xf035e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=555ca5cf7719d2c38a9a86c6ad56ef3338e51cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:60:db:7a:c1:2b:13:a1:6c:d9:a2:19:3a:
                    ab:1f:32:39:a6:d3:30:2d:79:83:2c:ce:fe:74:50:
                    70:05:6e:c5:f9:81:ca:2b:a4:31:7f:fa:1c:3c:8c:
                    36:42:44:ee:7c:18:e2:82:dc:40:a6:65:4e:29:c9:
                    da:ea:58:d5:8d:15:45:3b:f1:ca:bc:cb:33:66:e4:
                    d3:0c:75:1b:63:f8:f7:16:5a:f5:6a:2a:54:28:e3:
                    28:33:c1:86:99:3f:59:d1:e5:34:e8:74:09:0e:ac:
                    7f:06:bb:6c:f2:4d:8f:ab:3f:c6:51:2b:d6:9c:f5:
                    a0:cd:1e:5d:80:b3:24:3d:6b:2b:de:70:d0:bb:1d:
                    db:a5:28:f0:4e:b8:a7:0d:a1:98:23:88:27:01:de:
                    0f:a8:bb:f4:12:80:39:ca:2d:ba:1f:67:de:74:4e:
                    45:29:16:64:a3:d4:61:9e:d1:96:e8:75:40:ca:dd:
                    05:98:83:da:1a:aa:d4:f8:05:2a:86:39:73:7f:eb:
                    1f:f2:e4:a6:14:8d:db:90:ca:4f:09:6d:3c:ed:45:
                    de:32:7b:56:5b:25:56:d7:8e:f1:4a:00:30:76:ad:
                    36:87:ea:5a:71:44:f8:b1:2b:54:9b:08:ec:8c:87:
                    e3:f1:1f:67:1e:88:65:c0:c0:29:5a:4a:6c:62:0b:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:1E:7F:52:3B:C3:2C:6D:FB:B8:49:2E:FA:5D:D7:43:FA:3C:80
            X509v3 Authority Key Identifier:
                keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/555ca5cf7719d2c38a9a86c6ad56ef3338e51cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:d8:d9:42:4d:83:dc:ff:be:65:91:e5:8c:4c:66:fd:44:
         37:a8:14:9a:56:a5:a9:6a:39:30:4a:7f:8c:1a:7b:c2:3c:6b:
         e2:a0:7a:fe:4c:cf:e5:13:4d:ed:3d:91:f4:99:d7:f4:ef:4c:
         69:85:73:8e:d0:90:a6:d0:19:03:bc:b4:b6:99:37:4e:7e:09:
         4b:da:1a:87:b1:71:b0:e9:53:2b:69:ec:18:a9:51:f7:0d:50:
         ee:ac:1f:35:22:67:48:6d:e7:5c:ce:e7:7a:1d:d2:34:7a:0c:
         e8:8e:05:0d:b8:cf:c4:9f:6c:b4:b2:99:5d:d0:19:68:57:83:
         25:37:52:b0:98:91:ba:e2:4b:ce:aa:ed:5c:b9:96:bc:bd:7f:
         71:7d:2f:c9:eb:e0:eb:55:c8:ce:18:e5:ab:db:8e:67:e9:c2:
         1a:a2:fe:b1:d7:1c:51:46:fd:9a:e4:3c:30:b4:7f:a9:bb:ba:
         eb:1b:a5:b0:1d:98:de:1c:8f:76:e9:f0:95:6a:d5:e6:ac:fe:
         a2:7b:2f:c8:8a:a8:2e:b0:1e:2d:10:14:eb:4a:92:75:07:e8:
         96:81:3b:63:9b:98:9b:b8:54:88:17:13:6b:75:5f:b4:6e:b6:
         88:19:e5:92:b7:de:fd:19:60:60:77:71:7d:2a:7d:16:62:d0:
         9c:f1:0d:c9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDwNeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
MmNhMTliNDMyYzQ4M2Q1YWEyZGJiZWZkMDAwNjFiM2U4NmIyOWMwHhcNMjIwNjA3
MDMwMDAwWhcNMjQwNjA3MDMwMDAwWjAzMTEwLwYDVQQDEyg1NTVjYTVjZjc3MTlk
MmMzOGE5YTg2YzZhZDU2ZWYzMzM4ZTUxY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyxhg23rBKxOhbNmiGTqrHzI5ptMwLXmDLM7+dFBwBW7F+YHK
K6Qxf/ocPIw2QkTufBjigtxApmVOKcna6ljVjRVFO/HKvMszZuTTDHUbY/j3Flr1
aipUKOMoM8GGmT9Z0eU06HQJDqx/Brts8k2Pqz/GUSvWnPWgzR5dgLMkPWsr3nDQ
ux3bpSjwTrinDaGYI4gnAd4PqLv0EoA5yi26H2fedE5FKRZko9RhntGW6HVAyt0F
mIPaGqrU+AUqhjlzf+sf8uSmFI3bkMpPCW087UXeMntWWyVW147xSgAwdq02h+pa
cUT4sStUmwjsjIfj8R9nHohlwMApWkpsYgtKNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIK/Hn9SO8Msbfu4SS76XddD+jyAMB8GA1UdIwQYMBaAFJvPhiGAtabcfw6z
liRzqOVdSYNVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzkyY2Ex
OWI0MzJjNDgzZDVhYTJkYmJlZmQwMDA2MWIzZTg2YjI5Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWVlMDUwMTctYmU4Ny00N2M4LTliMzctNDYxM2Jl
MzZiN2Q3LzU1NWNhNWNmNzcxOWQyYzM4YTlhODZjNmFkNTZlZjMzMzhlNTFjYzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZWUwNTAxNy1iZTg3LTQ3YzgtOWIzNy00NjEz
YmUzNmI3ZDcvMzkyY2ExOWI0MzJjNDgzZDVhYTJkYmJlZmQwMDA2MWIzZTg2YjI5
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3ozDANBgkqhkiG9w0BAQsFAAOCAQEAogfY2UJNg9z/vmWR
5YxMZv1EN6gUmlalqWo5MEp/jBp7wjxr4qB6/kzP5RNN7T2R9JnX9O9MaYVzjtCQ
ptAZA7y0tpk3Tn4JS9oah7FxsOlTK2nsGKlR9w1Q7qwfNSJnSG3nXM7neh3SNHoM
6I4FDbjPxJ9stLKZXdAZaFeDJTdSsJiRuuJLzqrtXLmWvL1/cX0vyevg61XIzhjl
q9uOZ+nCGqL+sdccUUb9muQ8MLR/qbu66xulsB2Y3hyPdunwlWrV5qz+onsvyIqo
LrAeLRAU60qSdQfoloE7Y5uYm7hUiBcTa3VftG62iBnlkrfe/RlgYHdxfSp9FmLQ
nPENyQ==
-----END CERTIFICATE-----