Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/d9f0a8ccba0d92700ed1e855a1feb0d3ca8eecdc.roa
File:                     d9f0a8ccba0d92700ed1e855a1feb0d3ca8eecdc.roa (raw, json)
Hash identifier:          Ky+LQbNm3GH2dju7e6FYWcliQIFVQNEfkKB+TaUVQFw=
Subject key identifier:   8F:AE:05:97:A9:9B:7F:AB:63:1A:61:CF:25:09:47:2F:DD:41:64:82
Certificate issuer:       /CN=790c3c5e46e22ae2b861983d5357e8563219b407
Certificate serial:       1520
Authority key identifier: C4:73:DA:7B:06:EB:BD:7D:8F:A8:A5:03:9A:32:B0:3C:76:E2:6F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790c3c5e46e22ae2b861983d5357e8563219b407.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/d9f0a8ccba0d92700ed1e855a1feb0d3ca8eecdc.roa
Signing time:             Thu 06 Apr 2023 07:18:05 +0000
ROA not before:           Wed 05 Apr 2023 07:15:28 +0000
ROA not after:            Sun 06 Apr 2025 07:15:28 +0000
asID:                     270096
IP address blocks:        170.245.132.0/23 maxlen: 23
                          2803:47e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5408 (0x1520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790c3c5e46e22ae2b861983d5357e8563219b407
        Validity
            Not Before: Apr  5 07:15:28 2023 GMT
            Not After : Apr  6 07:15:28 2025 GMT
        Subject: CN=d9f0a8ccba0d92700ed1e855a1feb0d3ca8eecdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:89:57:a6:8d:c3:ba:11:a5:50:b7:3f:e4:
                    1c:59:fb:06:d7:82:04:d6:bf:70:0e:1a:25:98:3d:
                    63:d9:24:97:85:d6:66:38:86:94:8b:9c:d3:b6:d9:
                    aa:bf:e8:49:a7:df:49:f7:e8:1e:ad:c1:56:21:06:
                    89:57:00:8e:34:a8:89:39:cf:68:4d:f1:99:b5:f0:
                    4b:fc:86:e5:ba:08:26:e8:c5:86:3a:7f:5b:09:81:
                    7d:64:26:8b:de:2d:31:13:5d:70:65:b2:fa:05:2c:
                    20:65:b4:2b:5c:dc:22:50:a6:e8:d7:4c:3d:66:b7:
                    44:a1:c8:8b:c3:7d:d0:3f:9c:b9:90:8b:db:43:35:
                    c9:a1:2e:bd:93:b2:01:6f:47:50:2a:cd:31:19:c1:
                    c2:d0:03:8e:3a:fa:e1:6a:a8:e1:a0:1d:fb:16:10:
                    6f:3b:3f:17:f9:6b:4f:02:03:5e:44:07:54:60:32:
                    ad:15:e3:bc:7f:35:e7:bf:9b:63:34:a1:a7:4c:ce:
                    d2:e8:a1:c6:bf:ae:bf:29:57:14:f3:75:97:c7:35:
                    e8:80:a6:b2:78:23:ca:62:4a:98:18:0b:45:bf:c6:
                    96:23:6d:fc:d7:6f:ae:95:32:8b:d4:fa:de:5f:15:
                    59:7c:b9:4a:95:18:2b:36:92:9e:17:e0:82:69:ad:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AE:05:97:A9:9B:7F:AB:63:1A:61:CF:25:09:47:2F:DD:41:64:82
            X509v3 Authority Key Identifier:
                keyid:C4:73:DA:7B:06:EB:BD:7D:8F:A8:A5:03:9A:32:B0:3C:76:E2:6F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790c3c5e46e22ae2b861983d5357e8563219b407.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/d9f0a8ccba0d92700ed1e855a1feb0d3ca8eecdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/790c3c5e46e22ae2b861983d5357e8563219b407.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.132.0/23
                IPv6:
                  2803:47e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:7a:fd:85:b7:7c:08:8c:7b:19:35:94:c3:5b:ae:8e:ad:
         73:cb:f8:6d:32:ef:d2:ae:ce:fe:31:b1:1b:37:ec:a9:21:a7:
         ac:f2:ca:49:61:76:ad:77:87:72:6e:45:be:d3:f5:06:41:20:
         43:ec:4f:45:d5:0e:d0:af:75:63:d7:69:98:21:2f:4e:c9:9a:
         ec:f5:24:bf:12:9e:0d:bd:de:b8:0f:9b:05:e0:38:49:13:79:
         08:fd:bd:07:fd:e6:17:e3:e9:16:d0:a2:be:6e:3a:27:14:bb:
         5c:42:82:d0:20:21:21:53:ae:6e:aa:cd:5b:32:e3:e6:66:47:
         be:01:64:4f:f1:a6:6c:ed:94:04:ea:af:a6:ed:90:fa:fe:83:
         39:68:06:60:e9:17:10:b4:6a:ec:de:b8:ea:56:c3:4d:2b:f3:
         9e:63:da:8c:4c:a2:25:cf:ea:a2:a2:39:9b:e3:83:47:62:e3:
         26:70:03:ce:d0:ba:ba:05:54:a2:47:29:e5:6b:34:f2:54:3a:
         e4:eb:86:22:4e:b2:66:71:46:c1:4e:a8:39:78:87:fc:d3:46:
         39:89:be:48:22:c8:f5:18:a2:da:b7:19:ee:b2:9c:d5:45:88:
         6c:04:9a:4c:88:79:79:8a:3e:0c:60:d0:c5:11:c0:f0:3a:68:
         86:4c:72:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICFSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzkw
YzNjNWU0NmUyMmFlMmI4NjE5ODNkNTM1N2U4NTYzMjE5YjQwNzAeFw0yMzA0MDUw
NzE1MjhaFw0yNTA0MDYwNzE1MjhaMDMxMTAvBgNVBAMTKGQ5ZjBhOGNjYmEwZDky
NzAwZWQxZTg1NWExZmViMGQzY2E4ZWVjZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZdolXpo3DuhGlULc/5BxZ+wbXggTWv3AOGiWYPWPZJJeF1mY4
hpSLnNO22aq/6Emn30n36B6twVYhBolXAI40qIk5z2hN8Zm18Ev8huW6CCboxYY6
f1sJgX1kJoveLTETXXBlsvoFLCBltCtc3CJQpujXTD1mt0ShyIvDfdA/nLmQi9tD
NcmhLr2TsgFvR1AqzTEZwcLQA446+uFqqOGgHfsWEG87Pxf5a08CA15EB1RgMq0V
47x/Nee/m2M0oadMztLooca/rr8pVxTzdZfHNeiAprJ4I8piSpgYC0W/xpYjbfzX
b66VMovU+t5fFVl8uUqVGCs2kp4X4IJprWKNAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUj64Fl6mbf6tjGmHPJQlHL91BZIIwHwYDVR0jBBgwFoAUxHPaewbrvX2PqKUD
mjKwPHbib/MwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS83OTBjM2M1
ZTQ2ZTIyYWUyYjg2MTk4M2Q1MzU3ZTg1NjMyMTliNDA3LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hMjg4ODU4Ny04YWIyLTQ4ZjctOWI2Yy1iZDRiY2Y1
M2RmOTEvZDlmMGE4Y2NiYTBkOTI3MDBlZDFlODU1YTFmZWIwZDNjYThlZWNkYy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2EyODg4NTg3LThhYjItNDhmNy05YjZjLWJkNGJj
ZjUzZGY5MS83OTBjM2M1ZTQ2ZTIyYWUyYjg2MTk4M2Q1MzU3ZTg1NjMyMTliNDA3
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQBqvWEMA0EAgACMAcDBQAoA0fgMA0GCSqGSIb3DQEBCwUAA4IB
AQANSnr9hbd8CIx7GTWUw1uujq1zy/htMu/Srs7+MbEbN+ypIaes8spJYXatd4dy
bkW+0/UGQSBD7E9F1Q7Qr3Vj12mYIS9OyZrs9SS/Ep4Nvd64D5sF4DhJE3kI/b0H
/eYX4+kW0KK+bjonFLtcQoLQICEhU65uqs1bMuPmZke+AWRP8aZs7ZQE6q+m7ZD6
/oM5aAZg6RcQtGrs3rjqVsNNK/OeY9qMTKIlz+qiojmb44NHYuMmcAPO0Lq6BVSi
RynlazTyVDrk64YiTrJmcUbBTqg5eIf800Y5ib5IIsj1GKLatxnuspzVRYhsBJpM
iHl5ij4MYNDFEcDwOmiGTHKj
-----END CERTIFICATE-----