Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ddf508944c65b5f8d11e7e61e1620e41ccaab30b.roa
File:                     ddf508944c65b5f8d11e7e61e1620e41ccaab30b.roa (raw, json)
Hash identifier:          +0zDwaMR4m6fzTuEom32ekCfDw1jXZ3vedEZeb3P7x0=
Subject key identifier:   7C:0D:A0:19:52:24:07:93:75:FA:E6:DD:A4:9B:88:3F:35:8F:4B:F7
Certificate issuer:       /CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
Certificate serial:       1D99CC
Authority key identifier: 6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ddf508944c65b5f8d11e7e61e1620e41ccaab30b.roa
Signing time:             Tue 12 Sep 2023 15:04:18 +0000
ROA not before:           Mon 11 Sep 2023 15:04:18 +0000
ROA not after:            Fri 12 Sep 2025 15:04:18 +0000
asID:                     266703
IP address blocks:        45.230.80.0/22 maxlen: 24
                          2803:ad20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939916 (0x1d99cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
        Validity
            Not Before: Sep 11 15:04:18 2023 GMT
            Not After : Sep 12 15:04:18 2025 GMT
        Subject: CN=ddf508944c65b5f8d11e7e61e1620e41ccaab30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:8c:e3:a4:e8:75:57:3f:78:6c:36:76:f5:
                    3b:ef:6d:e5:58:d1:08:3f:27:67:a7:c9:16:61:f4:
                    cd:fd:61:aa:22:67:8e:cf:ca:3a:80:3f:99:33:11:
                    ac:da:3f:dd:4d:2a:ae:d7:4c:aa:b9:a6:f7:3a:18:
                    44:da:71:9b:8d:e8:91:45:27:be:45:70:f9:c1:7b:
                    39:a5:f5:81:e6:6e:54:53:df:22:b6:41:2e:ea:88:
                    5d:c3:df:55:c1:29:1d:42:05:fd:c7:f5:d4:46:41:
                    39:6e:f0:f9:f1:69:dc:8f:ee:f8:e2:82:61:90:e0:
                    af:b1:79:eb:2a:a3:69:9b:7f:20:3b:cd:b8:a1:29:
                    8d:a1:8b:81:17:b3:05:3f:a4:a8:cf:eb:5a:04:5e:
                    20:e3:b8:e7:e5:3c:3f:d6:48:b7:d5:19:88:cb:c5:
                    2c:ac:d0:ce:74:08:62:63:ff:5f:9a:25:a1:3a:44:
                    9b:5e:6b:4c:10:00:9f:ea:78:a5:ee:f8:85:8a:9a:
                    b5:4a:4b:6e:51:84:b9:2f:14:f3:1a:62:ca:00:8d:
                    07:5a:dd:d3:ab:19:25:f3:5f:2e:a1:18:1e:e8:0d:
                    e4:92:ec:7e:86:e3:e3:03:45:55:c5:7c:91:02:29:
                    04:7a:04:ef:08:48:b4:c9:d5:27:8e:39:53:c3:73:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:A0:19:52:24:07:93:75:FA:E6:DD:A4:9B:88:3F:35:8F:4B:F7
            X509v3 Authority Key Identifier:
                keyid:6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ddf508944c65b5f8d11e7e61e1620e41ccaab30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.80.0/22
                IPv6:
                  2803:ad20::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:29:fc:21:b8:df:64:7e:e9:33:0e:d3:50:ea:6f:c3:47:
         7b:da:ab:01:48:2b:9a:1e:52:74:e9:b4:d4:b6:d2:82:00:f8:
         ef:49:4e:86:ee:4a:23:04:4d:4f:58:7e:64:9b:93:bd:e3:a5:
         40:46:d6:6d:2c:82:48:49:64:7e:2c:bc:3c:c2:cd:f9:a1:5d:
         2d:23:c0:16:cd:cd:87:d2:11:d5:53:82:4f:50:68:e7:a2:48:
         c6:c9:cc:ce:0b:ce:e9:15:a3:a0:37:36:09:96:0e:7d:b2:e3:
         1c:32:8d:1f:78:d6:4b:be:f2:37:19:41:d8:33:87:16:0c:b8:
         0e:fb:c2:ca:b7:e5:2c:ed:c4:c7:21:85:62:fe:2f:b1:2d:de:
         10:a7:de:7e:4d:d0:55:15:fa:c8:5f:91:0f:a1:3d:eb:dc:3f:
         7f:a2:d3:7c:42:57:b5:53:f9:07:cb:8c:a1:12:b1:0e:3b:ae:
         b1:50:67:a2:0d:ac:67:d7:3d:94:4c:c6:1c:0c:59:c9:5d:1b:
         8a:31:ac:f0:c5:2c:d8:6e:77:e2:d6:2e:03:58:1b:7f:c3:6b:
         50:0a:af:b7:ce:bf:da:34:2a:9d:2a:ca:66:31:ed:e6:e8:25:
         55:7e:6a:a5:75:db:1f:a0:e0:f1:90:04:01:45:a1:ca:d0:26:
         f2:6c:54:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHZnMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
M2E3ZjE2ZGQ4M2Q4NmJkNTBiMWJlZGU1ZTdmZDk1ZGJmM2ViOGIwHhcNMjMwOTEx
MTUwNDE4WhcNMjUwOTEyMTUwNDE4WjAzMTEwLwYDVQQDEyhkZGY1MDg5NDRjNjVi
NWY4ZDExZTdlNjFlMTYyMGU0MWNjYWFiMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4AeM46TodVc/eGw2dvU7723lWNEIPydnp8kWYfTN/WGqImeO
z8o6gD+ZMxGs2j/dTSqu10yquab3OhhE2nGbjeiRRSe+RXD5wXs5pfWB5m5UU98i
tkEu6ohdw99VwSkdQgX9x/XURkE5bvD58Wncj+744oJhkOCvsXnrKqNpm38gO824
oSmNoYuBF7MFP6Soz+taBF4g47jn5Tw/1ki31RmIy8UsrNDOdAhiY/9fmiWhOkSb
XmtMEACf6nil7viFipq1SktuUYS5LxTzGmLKAI0HWt3Tqxkl818uoRge6A3kkux+
huPjA0VVxXyRAikEegTvCEi0ydUnjjlTw3PsZwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHwNoBlSJAeTdfrm3aSbiD81j0v3MB8GA1UdIwQYMBaAFG4rQMdnitBgkhhg
z4s+Wj7S3TVJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWMzYTdm
MTZkZDgzZDg2YmQ1MGIxYmVkZTVlN2ZkOTVkYmYzZWI4Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTJkOTYwZWItMDljZi00NGE4LThhNDQtYjBlOWIw
YzgwNGNjL2RkZjUwODk0NGM2NWI1ZjhkMTFlN2U2MWUxNjIwZTQxY2NhYWIzMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMmQ5NjBlYi0wOWNmLTQ0YTgtOGE0NC1iMGU5
YjBjODA0Y2MvZWMzYTdmMTZkZDgzZDg2YmQ1MGIxYmVkZTVlN2ZkOTVkYmYzZWI4
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3mUDANBAIAAjAHAwUAKAOtIDANBgkqhkiG9w0BAQsFAAOC
AQEAB/Mp/CG432R+6TMO01Dqb8NHe9qrAUgrmh5SdOm01LbSggD470lOhu5KIwRN
T1h+ZJuTveOlQEbWbSyCSElkfiy8PMLN+aFdLSPAFs3Nh9IR1VOCT1Bo56JIxsnM
zgvO6RWjoDc2CZYOfbLjHDKNH3jWS77yNxlB2DOHFgy4DvvCyrflLO3ExyGFYv4v
sS3eEKfefk3QVRX6yF+RD6E969w/f6LTfEJXtVP5B8uMoRKxDjuusVBnog2sZ9c9
lEzGHAxZyV0bijGs8MUs2G534tYuA1gbf8NrUAqvt86/2jQqnSrKZjHt5uglVX5q
pXXbH6Dg8ZAEAUWhytAm8mxUYw==
-----END CERTIFICATE-----