Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/c3b5699ec26e0ba3c29df3208bfaef25b6a22744.roa
File:                     c3b5699ec26e0ba3c29df3208bfaef25b6a22744.roa (raw, json)
Hash identifier:          M/4tA75ZqRJ9nFVAOo1lmAPLeEO9q2rNEOtoqYErIhg=
Subject key identifier:   91:14:DC:6B:27:EC:9B:11:69:F2:E7:77:C3:24:F7:CC:52:8B:08:6D
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       176C56
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/c3b5699ec26e0ba3c29df3208bfaef25b6a22744.roa
Signing time:             Tue 19 Jul 2022 17:01:00 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Sun 18 Jul 2027 03:00:00 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          45.186.144.0/23 maxlen: 24
                          45.186.144.0/24 maxlen: 24
                          45.186.145.0/24 maxlen: 24
                          45.186.146.0/24 maxlen: 24
                          45.186.146.0/23 maxlen: 24
                          45.186.147.0/24 maxlen: 24
                          2803:f60::/32 maxlen: 64
                          2803:f60::/40 maxlen: 40
                          2803:f60:0:2906::/64 maxlen: 64
                          2803:f60:1:5169::/64 maxlen: 64
                          2803:f60:3:2934::/64 maxlen: 64
                          2803:f60:21:1612::/64 maxlen: 64
                          2803:f60:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535062 (0x176c56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2027 GMT
        Subject: CN=c3b5699ec26e0ba3c29df3208bfaef25b6a22744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:4b:36:cb:db:60:0a:94:9c:a0:e3:da:e7:
                    88:6f:92:33:cf:64:66:44:7d:f4:12:74:92:52:5e:
                    c4:f0:6e:0c:f4:04:46:a4:d9:61:23:40:77:2b:39:
                    ef:e0:d3:dd:53:a5:f0:38:a2:31:c6:39:67:c9:f8:
                    de:fa:f3:da:cb:91:dd:d2:5c:90:1d:9b:c0:64:77:
                    fe:be:e8:ee:c7:ac:17:6d:1b:f2:56:6a:ec:e3:4a:
                    85:f5:d2:74:5a:c8:07:28:39:c8:b5:c9:f6:ec:b2:
                    69:6f:b7:ad:bd:c4:a5:b6:c5:e7:64:ac:7d:e1:e5:
                    81:48:5c:5f:8c:7f:fb:08:90:b6:86:1b:6e:03:e3:
                    fc:62:af:96:0a:da:5c:78:c6:9b:2c:ef:4b:d7:13:
                    d4:92:50:ee:59:fa:d5:7a:0b:79:b9:d6:4a:dc:cc:
                    25:c3:e3:5d:3d:15:7a:c8:8a:5e:1e:e5:28:f6:ed:
                    1e:ce:f5:c2:57:05:05:9b:da:c2:ac:95:5b:e7:de:
                    8f:46:3e:83:02:9c:46:a9:76:2c:ad:9d:fe:db:d5:
                    c8:4c:17:97:6e:82:01:9f:e3:03:de:e2:16:b5:51:
                    b6:5d:5e:50:64:ba:62:31:77:ba:e8:ef:5e:30:81:
                    02:55:47:86:ab:55:b1:8f:da:9d:26:f4:fe:a5:45:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:14:DC:6B:27:EC:9B:11:69:F2:E7:77:C3:24:F7:CC:52:8B:08:6D
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/c3b5699ec26e0ba3c29df3208bfaef25b6a22744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:be:8b:a5:25:85:7e:96:5b:75:58:a3:31:32:4a:90:cc:
         1a:22:36:35:e7:ff:e9:ea:73:b5:bb:5e:98:d8:d3:7b:69:ec:
         6c:2e:01:7d:7b:37:c0:0a:b6:2a:9d:d9:35:21:45:44:3d:d6:
         c4:e0:0d:5e:6f:63:9a:d9:da:5e:cd:08:7a:f8:4e:dd:c6:eb:
         4d:24:89:f2:ff:8e:51:28:45:d4:be:60:f1:ea:81:ca:9f:98:
         03:30:78:95:25:62:b3:b8:6c:2c:a9:9b:10:d7:02:e3:25:91:
         a3:fc:32:19:ee:c1:09:e4:c3:a2:6e:92:bf:8e:1a:16:2e:4e:
         1c:09:bb:e3:8e:f7:43:08:2f:5a:1e:11:94:56:86:74:58:23:
         54:12:d2:36:40:25:ea:51:31:db:d0:a1:d5:e9:46:ca:b7:14:
         b3:c3:ae:12:2e:85:d0:5b:fb:e0:ae:d7:d7:5e:65:f8:6a:94:
         11:8a:a2:e0:97:d8:ca:94:6e:cf:49:a0:ed:ca:a9:d4:1d:53:
         7b:56:02:5b:08:91:44:20:02:4f:1e:ff:c7:a9:37:e0:53:59:
         f1:08:ea:24:3f:0a:42:e2:9d:f3:5a:8e:69:e3:3e:ec:1a:82:
         1e:69:8a:38:f3:05:9b:d7:1c:4c:93:1b:c1:c8:07:13:50:c9:
         14:a5:72:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDF2xWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdi
OTYyNTRmNzkwODExNzE5YmU5N2Q3ODNhZTMzYTMzNDNlNjljMTYwHhcNMjIwNzE4
MDMwMDAwWhcNMjcwNzE4MDMwMDAwWjAzMTEwLwYDVQQDEyhjM2I1Njk5ZWMyNmUw
YmEzYzI5ZGYzMjA4YmZhZWYyNWI2YTIyNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAogBLNsvbYAqUnKDj2ueIb5Izz2RmRH30EnSSUl7E8G4M9ARG
pNlhI0B3Kznv4NPdU6XwOKIxxjlnyfje+vPay5Hd0lyQHZvAZHf+vujux6wXbRvy
Vmrs40qF9dJ0WsgHKDnItcn27LJpb7etvcSltsXnZKx94eWBSFxfjH/7CJC2hhtu
A+P8Yq+WCtpceMabLO9L1xPUklDuWfrVegt5udZK3Mwlw+NdPRV6yIpeHuUo9u0e
zvXCVwUFm9rCrJVb596PRj6DApxGqXYsrZ3+29XITBeXboIBn+MD3uIWtVG2XV5Q
ZLpiMXe66O9eMIECVUeGq1Wxj9qdJvT+pUVacQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJEU3Gsn7JsRafLnd8Mk98xSiwhtMB8GA1UdIwQYMBaAFKKA3Qdc1bdwJvuo
HsCF6bknXUfaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2I5NjI1
NGY3OTA4MTE3MTliZTk3ZDc4M2FlMzNhMzM0M2U2OWMxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWJhOTc0NzEtMjc4NC00MzgyLWI4YTktYTA3ZTNj
NDMxNmRjL2MzYjU2OTllYzI2ZTBiYTNjMjlkZjMyMDhiZmFlZjI1YjZhMjI3NDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYmE5NzQ3MS0yNzg0LTQzODItYjhhOS1hMDdl
M2M0MzE2ZGMvN2I5NjI1NGY3OTA4MTE3MTliZTk3ZDc4M2FlMzNhMzM0M2U2OWMx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26kDANBAIAAjAHAwUAKAMPYDANBgkqhkiG9w0BAQsFAAOC
AQEADpm+i6UlhX6WW3VYozEySpDMGiI2Nef/6epztbtemNjTe2nsbC4BfXs3wAq2
Kp3ZNSFFRD3WxOANXm9jmtnaXs0IevhO3cbrTSSJ8v+OUShF1L5g8eqByp+YAzB4
lSVis7hsLKmbENcC4yWRo/wyGe7BCeTDom6Sv44aFi5OHAm74473QwgvWh4RlFaG
dFgjVBLSNkAl6lEx29Ch1elGyrcUs8OuEi6F0Fv74K7X115l+GqUEYqi4JfYypRu
z0mg7cqp1B1Te1YCWwiRRCACTx7/x6k34FNZ8QjqJD8KQuKd81qOaeM+7BqCHmmK
OPMFm9ccTJMbwcgHE1DJFKVybA==
-----END CERTIFICATE-----