Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/302925fde6b90e7d55573237141948e4a778d01e.roa
File:                     302925fde6b90e7d55573237141948e4a778d01e.roa (raw, json)
Hash identifier:          yNiv2pvBixEy3/GGLtb0gVTjEwr3mlNdp2h4uTIKkJA=
Subject key identifier:   95:83:F1:BB:DC:39:91:08:2D:5E:08:E2:78:78:DB:28:AD:BC:E4:2E
Certificate issuer:       /CN=2a7270422ecb91448a4bb7fdbe36b2b012d270fd
Certificate serial:       1626A2
Authority key identifier: AF:B5:78:72:DB:28:32:70:C5:3B:62:AB:72:89:E1:83:D0:4A:F1:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a7270422ecb91448a4bb7fdbe36b2b012d270fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/302925fde6b90e7d55573237141948e4a778d01e.roa
Signing time:             Wed 11 May 2022 17:42:33 +0000
ROA not before:           Wed 11 May 2022 03:00:00 +0000
ROA not after:            Sat 11 May 2024 03:00:00 +0000
asID:                     27951
IP address blocks:        45.224.186.0/24 maxlen: 24
                          2801:1e4::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451682 (0x1626a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7270422ecb91448a4bb7fdbe36b2b012d270fd
        Validity
            Not Before: May 11 03:00:00 2022 GMT
            Not After : May 11 03:00:00 2024 GMT
        Subject: CN=302925fde6b90e7d55573237141948e4a778d01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:a4:96:4c:a8:63:ea:6b:5a:00:60:4a:f7:
                    f2:68:ce:7e:43:56:e1:67:2b:c5:74:c1:12:45:e1:
                    eb:48:81:1b:37:21:78:b5:ab:29:20:1b:43:39:00:
                    36:b3:8c:fa:fa:49:17:8e:bc:7f:ab:cb:db:e6:cb:
                    73:68:8a:a8:81:74:c5:cc:6c:84:5d:1f:2d:7e:34:
                    0c:79:b5:e0:27:ab:dd:db:4c:bb:a7:1c:7a:f0:1b:
                    a7:e6:d0:87:01:63:11:7b:6e:dd:65:ff:1c:9b:bb:
                    be:74:3a:f5:a5:2b:a3:a9:cd:09:d0:5f:44:ed:64:
                    de:4a:cf:46:50:a2:9d:77:0e:00:7d:54:3b:9d:cc:
                    38:42:4d:8b:fe:07:97:85:61:46:f5:8c:02:df:cf:
                    cd:28:80:d5:f1:c8:70:b4:ce:5b:2b:13:a7:56:bf:
                    99:10:21:49:b8:06:e1:28:b2:0b:99:f6:85:47:2a:
                    9c:7c:2d:18:60:04:91:0d:00:7f:32:da:e7:fd:a0:
                    a9:59:18:9c:6f:d8:fc:ca:21:48:70:ed:73:7f:b4:
                    0d:c0:81:a6:4d:c7:5e:b1:62:01:fb:39:fa:23:ab:
                    af:65:a4:a5:dc:cd:35:d4:be:14:5d:2e:20:bf:5b:
                    07:aa:e4:71:05:17:a3:fd:b3:25:5e:4a:a5:4c:e2:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:83:F1:BB:DC:39:91:08:2D:5E:08:E2:78:78:DB:28:AD:BC:E4:2E
            X509v3 Authority Key Identifier:
                keyid:AF:B5:78:72:DB:28:32:70:C5:3B:62:AB:72:89:E1:83:D0:4A:F1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a7270422ecb91448a4bb7fdbe36b2b012d270fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/302925fde6b90e7d55573237141948e4a778d01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cabd0ca8-7403-41ad-9387-53fee5bca4ce/2a7270422ecb91448a4bb7fdbe36b2b012d270fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.186.0/24
                IPv6:
                  2801:1e4::/42

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:b4:c1:37:ec:57:f7:41:1e:c6:ab:a6:13:fc:1c:d9:66:
         d1:2d:c9:e8:a3:30:53:f5:a2:1b:26:47:c5:88:d7:28:ae:db:
         ec:ef:72:8e:a3:25:0b:8e:7e:e1:56:05:91:8d:dd:3b:09:c4:
         49:bc:b4:19:47:97:9b:af:a2:b7:30:0d:3a:2b:70:4c:6d:0e:
         15:3f:a5:5c:70:b9:d7:45:27:a5:19:71:68:41:ad:87:c1:ab:
         2d:c0:09:fb:cd:5d:83:fa:e5:e9:e2:f7:91:47:35:24:b5:6b:
         f3:b2:30:7f:b3:8e:32:e6:5b:eb:f5:ec:da:29:97:2c:07:3f:
         1b:4e:30:9e:61:d4:86:bb:ef:90:2d:34:9a:65:c5:d6:fc:cf:
         a6:1b:f7:72:ec:ba:41:04:02:38:d6:ca:c4:f7:e9:38:7e:b4:
         94:d2:14:10:77:ad:fe:e6:cd:37:4f:b3:18:8b:09:4e:3d:ea:
         bb:f3:be:15:96:25:cc:67:1e:c8:2c:a7:43:e8:8f:77:84:09:
         e4:dc:c9:83:76:2a:84:f0:95:4b:f7:09:dc:69:9f:82:67:6b:
         6c:23:63:19:5b:d8:8e:11:fe:c6:69:03:13:b0:0d:34:50:48:
         a0:13:94:33:84:3d:fe:3e:f0:75:35:92:a7:04:1e:a3:b9:f4:
         b9:34:f1:85
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDFiaiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
NzI3MDQyMmVjYjkxNDQ4YTRiYjdmZGJlMzZiMmIwMTJkMjcwZmQwHhcNMjIwNTEx
MDMwMDAwWhcNMjQwNTExMDMwMDAwWjAzMTEwLwYDVQQDEygzMDI5MjVmZGU2Yjkw
ZTdkNTU1NzMyMzcxNDE5NDhlNGE3NzhkMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvuWklkyoY+prWgBgSvfyaM5+Q1bhZyvFdMESReHrSIEbNyF4
taspIBtDOQA2s4z6+kkXjrx/q8vb5stzaIqogXTFzGyEXR8tfjQMebXgJ6vd20y7
pxx68Bun5tCHAWMRe27dZf8cm7u+dDr1pSujqc0J0F9E7WTeSs9GUKKddw4AfVQ7
ncw4Qk2L/geXhWFG9YwC38/NKIDV8chwtM5bKxOnVr+ZECFJuAbhKLILmfaFRyqc
fC0YYASRDQB/Mtrn/aCpWRicb9j8yiFIcO1zf7QNwIGmTcdesWIB+zn6I6uvZaSl
3M011L4UXS4gv1sHquRxBRej/bMlXkqlTOI8RwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFJWD8bvcOZEILV4I4nh42yitvOQuMB8GA1UdIwQYMBaAFK+1eHLbKDJwxTti
q3KJ4YPQSvF5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE3Mjcw
NDIyZWNiOTE0NDhhNGJiN2ZkYmUzNmIyYjAxMmQyNzBmZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2FiZDBjYTgtNzQwMy00MWFkLTkzODctNTNmZWU1
YmNhNGNlLzMwMjkyNWZkZTZiOTBlN2Q1NTU3MzIzNzE0MTk0OGU0YTc3OGQwMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYWJkMGNhOC03NDAzLTQxYWQtOTM4Ny01M2Zl
ZTViY2E0Y2UvMmE3MjcwNDIyZWNiOTE0NDhhNGJiN2ZkYmUzNmIyYjAxMmQyNzBm
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAC3gujAPBAIAAjAJAwcGKAEB5AAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuxbTBN+xX90EexqumE/wc2WbRLcnoozBT9aIbJkfFiNcortvs73KOoyUL
jn7hVgWRjd07CcRJvLQZR5ebr6K3MA06K3BMbQ4VP6VccLnXRSelGXFoQa2Hwast
wAn7zV2D+uXp4veRRzUktWvzsjB/s44y5lvr9ezaKZcsBz8bTjCeYdSGu++QLTSa
ZcXW/M+mG/dy7LpBBAI41srE9+k4frSU0hQQd63+5s03T7MYiwlOPeq7874VliXM
Zx7ILKdD6I93hAnk3MmDdiqE8JVL9wncaZ+CZ2tsI2MZW9iOEf7GaQMTsA00UEig
E5QzhD3+PvB1NZKnBB6jufS5NPGF
-----END CERTIFICATE-----