Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/cf55ba8acf6e72d30e58ba0fcaa258b3012babfc.roa
File:                     cf55ba8acf6e72d30e58ba0fcaa258b3012babfc.roa (raw, json)
Hash identifier:          86S/Wt8qLMNznyQ8gDv1Xog91O6jMT3TEnNkNgSFNQc=
Subject key identifier:   21:40:72:E6:52:43:DF:6B:11:43:63:05:BD:BE:8C:10:E9:08:A0:C6
Certificate issuer:       /CN=165a2310cc55bf775bd8c9d5ba1511fd34da54bb
Certificate serial:       228401
Authority key identifier: DA:44:6C:0C:D9:07:C6:5B:29:A9:D9:77:FC:7B:CD:9D:FA:62:92:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/cf55ba8acf6e72d30e58ba0fcaa258b3012babfc.roa
Signing time:             Tue 22 Aug 2023 19:00:27 +0000
ROA not before:           Mon 21 Aug 2023 19:00:27 +0000
ROA not after:            Fri 22 Aug 2025 19:00:27 +0000
asID:                     264806
IP address blocks:        170.79.232.0/22 maxlen: 24
                          2803:34c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2262017 (0x228401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165a2310cc55bf775bd8c9d5ba1511fd34da54bb
        Validity
            Not Before: Aug 21 19:00:27 2023 GMT
            Not After : Aug 22 19:00:27 2025 GMT
        Subject: CN=cf55ba8acf6e72d30e58ba0fcaa258b3012babfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:cd:1a:4b:4e:9b:90:86:42:ed:97:44:b4:
                    48:07:f7:ce:ad:55:96:58:e9:9b:4a:f3:af:9f:ba:
                    4a:02:40:9b:99:79:39:99:f3:f3:ad:d3:a3:fe:91:
                    a7:10:1f:a5:10:a9:e6:ad:69:ca:82:ce:e5:73:aa:
                    b7:c4:3f:a2:55:5d:71:8e:55:65:ae:8b:3c:4b:b3:
                    b2:17:e0:e6:c4:be:b2:37:c4:14:6e:9a:48:e5:d9:
                    d6:10:a2:ad:80:5c:29:19:df:fd:61:71:b9:d9:bd:
                    c7:a5:22:dd:18:27:31:8a:8b:56:88:66:da:30:21:
                    63:d6:df:85:c7:04:66:08:41:d1:cd:c9:fd:64:a6:
                    c7:07:2d:0d:6f:1b:30:67:6c:6a:f0:93:4e:cb:68:
                    b7:9f:19:8a:7a:a7:1f:38:04:99:8a:2f:3b:24:1e:
                    ca:43:2e:3e:7f:80:7b:be:6c:db:c5:36:b5:f5:04:
                    23:d8:fb:99:35:0e:f1:15:9c:62:66:e3:c4:c9:a2:
                    31:4a:3a:bc:cf:37:46:1b:8d:10:1e:c6:65:73:f1:
                    5b:9d:28:fb:1f:70:9b:cd:2a:b2:62:16:3c:4f:71:
                    fa:b1:9a:68:56:35:80:63:90:01:f3:3e:17:c6:95:
                    44:7d:c7:38:66:8c:d2:4a:dd:83:cc:04:11:96:cd:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:40:72:E6:52:43:DF:6B:11:43:63:05:BD:BE:8C:10:E9:08:A0:C6
            X509v3 Authority Key Identifier:
                keyid:DA:44:6C:0C:D9:07:C6:5B:29:A9:D9:77:FC:7B:CD:9D:FA:62:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/cf55ba8acf6e72d30e58ba0fcaa258b3012babfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.232.0/22
                IPv6:
                  2803:34c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:96:c7:ce:26:95:14:67:17:3d:5b:0d:ff:35:4a:1d:7d:c1:
         ff:be:ae:5f:3d:f9:26:bb:0c:49:dc:c8:8f:56:8c:8d:09:a1:
         b6:66:62:e8:9c:50:30:53:67:be:42:ff:ae:29:95:c1:e7:fc:
         e5:9d:fc:25:f7:ef:a1:dc:17:f2:0f:4c:a7:e1:96:59:f6:1b:
         5c:11:c3:f7:f6:77:eb:f1:a4:da:24:5e:a1:53:70:de:7c:17:
         dd:ce:07:42:58:ce:f5:b0:fe:de:f2:f5:e0:62:08:f3:3c:53:
         d4:36:57:d0:e2:06:6f:b4:b0:45:cc:43:68:60:22:8f:b9:3f:
         34:10:e1:87:fc:17:b2:c0:f7:34:35:79:b6:16:b7:41:2a:74:
         26:c7:9a:49:72:45:91:3e:53:6b:60:26:ee:03:07:c8:7f:7d:
         11:d6:f6:ef:a8:46:3a:15:d1:6a:62:be:53:ff:cb:36:3c:c3:
         69:75:0a:dc:48:d4:df:69:51:1a:9c:d0:52:26:8c:3a:62:a0:
         b8:0a:22:cb:8f:96:10:47:89:3b:cd:2c:9a:d2:a8:9b:00:91:
         35:8d:9a:bd:c9:37:af:5d:da:f8:c8:22:2c:3e:58:80:49:f6:
         ba:bd:45:87:2d:3c:21:6b:aa:b6:cc:e8:9d:90:c3:2c:e5:64:
         40:ee:85:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIoQBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
NWEyMzEwY2M1NWJmNzc1YmQ4YzlkNWJhMTUxMWZkMzRkYTU0YmIwHhcNMjMwODIx
MTkwMDI3WhcNMjUwODIyMTkwMDI3WjAzMTEwLwYDVQQDEyhjZjU1YmE4YWNmNmU3
MmQzMGU1OGJhMGZjYWEyNThiMzAxMmJhYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApr/NGktOm5CGQu2XRLRIB/fOrVWWWOmbSvOvn7pKAkCbmXk5
mfPzrdOj/pGnEB+lEKnmrWnKgs7lc6q3xD+iVV1xjlVlros8S7OyF+DmxL6yN8QU
bppI5dnWEKKtgFwpGd/9YXG52b3HpSLdGCcxiotWiGbaMCFj1t+FxwRmCEHRzcn9
ZKbHBy0NbxswZ2xq8JNOy2i3nxmKeqcfOASZii87JB7KQy4+f4B7vmzbxTa19QQj
2PuZNQ7xFZxiZuPEyaIxSjq8zzdGG40QHsZlc/FbnSj7H3CbzSqyYhY8T3H6sZpo
VjWAY5AB8z4XxpVEfcc4ZozSSt2DzAQRls2SswIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCFAcuZSQ99rEUNjBb2+jBDpCKDGMB8GA1UdIwQYMBaAFNpEbAzZB8ZbKanZ
d/x7zZ36YpK2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTY1YTIz
MTBjYzU1YmY3NzViZDhjOWQ1YmExNTExZmQzNGRhNTRiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2M2ZTg0MmYtZDc4OS00MzA4LTlmNjctZGMzZmU0
MzExODM3L2NmNTViYThhY2Y2ZTcyZDMwZTU4YmEwZmNhYTI1OGIzMDEyYmFiZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzZlODQyZi1kNzg5LTQzMDgtOWY2Ny1kYzNm
ZTQzMTE4MzcvMTY1YTIzMTBjYzU1YmY3NzViZDhjOWQ1YmExNTExZmQzNGRhNTRi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAqpP6DANBAIAAjAHAwUAKAM0wDANBgkqhkiG9w0BAQsFAAOC
AQEAWZbHziaVFGcXPVsN/zVKHX3B/76uXz35JrsMSdzIj1aMjQmhtmZi6JxQMFNn
vkL/rimVwef85Z38JffvodwX8g9Mp+GWWfYbXBHD9/Z36/Gk2iReoVNw3nwX3c4H
QljO9bD+3vL14GII8zxT1DZX0OIGb7SwRcxDaGAij7k/NBDhh/wXssD3NDV5tha3
QSp0JseaSXJFkT5Ta2Am7gMHyH99Edb276hGOhXRamK+U//LNjzDaXUK3EjU32lR
GpzQUiaMOmKguAoiy4+WEEeJO80smtKomwCRNY2avck3r13a+MgiLD5YgEn2ur1F
hy08IWuqtszonZDDLOVkQO6FYA==
-----END CERTIFICATE-----