Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/8e82dbb7b0daef7c0c3069a56caeb2229bb8bdaa.roa
File:                     8e82dbb7b0daef7c0c3069a56caeb2229bb8bdaa.roa (raw, json)
Hash identifier:          Yrsz3Q1WsfkaHKbF/uyri6m2EdAFu/+ETOYoTB/NWj8=
Subject key identifier:   09:95:A6:1D:D6:14:BA:22:DD:FD:82:AE:64:3D:E0:58:13:B5:8D:69
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       1759EF
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/8e82dbb7b0daef7c0c3069a56caeb2229bb8bdaa.roa
Signing time:             Mon 18 Jul 2022 21:31:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          45.186.144.0/24 maxlen: 24
                          45.186.145.0/24 maxlen: 24
                          45.186.146.0/24 maxlen: 24
                          45.186.147.0/24 maxlen: 24
                          2803:f60::/32 maxlen: 64
                          2803:f60:0:2906::/64 maxlen: 64
                          2803:f60:1:5169::/64 maxlen: 64
                          2803:f60:3:2934::/64 maxlen: 64
                          2803:f60:21:1612::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530351 (0x1759ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8e82dbb7b0daef7c0c3069a56caeb2229bb8bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:99:63:d3:21:8f:4c:83:7f:9a:04:7f:c7:
                    6a:a9:5f:d2:10:42:76:15:d2:fa:44:ad:3a:8f:71:
                    02:d6:64:39:c9:2e:aa:41:c7:40:fb:92:fa:4d:60:
                    6b:3d:26:b2:c5:0f:6c:04:91:6a:ef:36:18:e8:48:
                    2d:aa:f1:f3:55:0c:6d:89:9d:3d:2f:d9:53:0c:3c:
                    6f:7d:91:5b:1d:20:07:a2:02:ef:15:0b:fb:c4:dc:
                    37:34:3a:ee:5e:7f:cb:dc:bb:96:61:ea:ba:f5:35:
                    30:ef:c2:31:8d:c0:8e:ee:24:f9:e1:47:31:b2:a0:
                    0c:7c:31:84:83:fe:e2:6c:1b:34:ac:4f:53:44:c8:
                    82:ee:ba:c7:1e:a7:6a:54:11:0f:b7:4b:90:87:aa:
                    02:0c:0f:80:23:7f:dc:74:11:03:78:54:0d:4a:c2:
                    fb:24:54:f8:38:fd:d3:e5:41:14:dc:70:61:3d:5d:
                    31:a2:fb:20:20:83:99:b3:9c:60:c0:d9:01:83:72:
                    06:58:97:44:ff:20:67:75:f4:c2:0f:35:27:78:e2:
                    59:2b:69:36:f1:6e:9a:f1:15:49:16:77:22:48:a0:
                    7a:7e:6c:67:ff:2c:1c:d8:4c:82:bd:cb:2f:6b:2e:
                    3c:ad:6c:9f:4c:03:68:97:6b:da:77:c8:65:d1:7a:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:95:A6:1D:D6:14:BA:22:DD:FD:82:AE:64:3D:E0:58:13:B5:8D:69
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/8e82dbb7b0daef7c0c3069a56caeb2229bb8bdaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:e2:ff:3f:38:c8:64:fb:02:4b:1b:91:9f:4f:ff:99:ba:
         e6:5b:c5:d8:91:89:2f:7f:51:6c:3a:0d:8a:67:bf:0d:26:12:
         55:23:78:4d:9e:ce:7e:32:01:17:78:d6:ed:23:98:4e:78:56:
         70:50:b3:03:e9:3d:64:9b:e8:39:17:5a:a7:a4:0a:7b:5c:21:
         d5:53:65:0f:45:0b:3d:ac:f7:8d:fb:b1:20:fa:f2:88:d5:1d:
         c4:3f:36:82:a1:1a:9b:2b:6a:7a:be:92:6f:e5:7a:16:02:15:
         25:8a:b7:f0:4d:da:04:f9:f8:a5:6f:90:68:5f:ca:d8:e7:62:
         75:68:8c:ee:c0:49:16:41:4e:f9:03:2a:e0:bb:b1:09:56:7b:
         c4:81:32:e7:d7:b1:9f:e3:4d:62:e9:26:a6:57:86:0b:b2:27:
         35:fe:68:67:63:a0:cf:3e:a0:ca:fd:ff:d0:8e:cb:7e:ec:22:
         18:6b:72:18:46:59:2b:d8:31:fa:ca:06:00:95:b8:ac:8d:8c:
         41:0a:86:ae:3e:dd:0f:82:9e:0f:c3:6a:4f:a1:cf:2d:01:d4:
         53:67:a2:20:df:6c:35:07:8a:bc:13:50:92:47:46:19:58:08:
         cc:fe:60:2f:fc:ee:bf:3a:34:0c:6e:d7:8b:ed:59:aa:e7:5f:
         b9:8a:64:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDF1nvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdi
OTYyNTRmNzkwODExNzE5YmU5N2Q3ODNhZTMzYTMzNDNlNjljMTYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4ZTgyZGJiN2IwZGFl
ZjdjMGMzMDY5YTU2Y2FlYjIyMjliYjhiZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvbqZY9Mhj0yDf5oEf8dqqV/SEEJ2FdL6RK06j3EC1mQ5yS6q
QcdA+5L6TWBrPSayxQ9sBJFq7zYY6EgtqvHzVQxtiZ09L9lTDDxvfZFbHSAHogLv
FQv7xNw3NDruXn/L3LuWYeq69TUw78IxjcCO7iT54UcxsqAMfDGEg/7ibBs0rE9T
RMiC7rrHHqdqVBEPt0uQh6oCDA+AI3/cdBEDeFQNSsL7JFT4OP3T5UEU3HBhPV0x
ovsgIIOZs5xgwNkBg3IGWJdE/yBndfTCDzUneOJZK2k28W6a8RVJFnciSKB6fmxn
/ywc2EyCvcsvay48rWyfTANol2vad8hl0XpZ+wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAmVph3WFLoi3f2CrmQ94FgTtY1pMB8GA1UdIwQYMBaAFKKA3Qdc1bdwJvuo
HsCF6bknXUfaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2I5NjI1
NGY3OTA4MTE3MTliZTk3ZDc4M2FlMzNhMzM0M2U2OWMxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWJhOTc0NzEtMjc4NC00MzgyLWI4YTktYTA3ZTNj
NDMxNmRjLzhlODJkYmI3YjBkYWVmN2MwYzMwNjlhNTZjYWViMjIyOWJiOGJkYWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYmE5NzQ3MS0yNzg0LTQzODItYjhhOS1hMDdl
M2M0MzE2ZGMvN2I5NjI1NGY3OTA4MTE3MTliZTk3ZDc4M2FlMzNhMzM0M2U2OWMx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26kDANBAIAAjAHAwUAKAMPYDANBgkqhkiG9w0BAQsFAAOC
AQEAnRLi/z84yGT7AksbkZ9P/5m65lvF2JGJL39RbDoNime/DSYSVSN4TZ7OfjIB
F3jW7SOYTnhWcFCzA+k9ZJvoORdap6QKe1wh1VNlD0ULPaz3jfuxIPryiNUdxD82
gqEamytqer6Sb+V6FgIVJYq38E3aBPn4pW+QaF/K2OdidWiM7sBJFkFO+QMq4Lux
CVZ7xIEy59exn+NNYukmpleGC7InNf5oZ2Ogzz6gyv3/0I7LfuwiGGtyGEZZK9gx
+soGAJW4rI2MQQqGrj7dD4KeD8NqT6HPLQHUU2eiIN9sNQeKvBNQkkdGGVgIzP5g
L/zuvzo0DG7Xi+1ZqudfuYpk2Q==
-----END CERTIFICATE-----