Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/3e10b2c4fbe15fef564cadd215232167f4910745.roa
File:                     3e10b2c4fbe15fef564cadd215232167f4910745.roa (raw, json)
Hash identifier:          SPyuZcPqcJVjLrf+e8etaKHM66k/fomHwTmZBWuIOYw=
Subject key identifier:   9B:60:D0:E1:A0:3D:BB:90:C0:B0:36:E7:09:3B:2C:31:23:49:D0:DE
Certificate issuer:       /CN=bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd
Certificate serial:       21125C
Authority key identifier: D5:03:72:6D:33:A2:36:33:B3:3C:86:79:A8:3A:8F:E2:4C:01:26:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/3e10b2c4fbe15fef564cadd215232167f4910745.roa
Signing time:             Sat 22 Jul 2023 05:01:21 +0000
ROA not before:           Fri 21 Jul 2023 05:01:21 +0000
ROA not after:            Tue 22 Jul 2025 05:01:21 +0000
asID:                     267890
IP address blocks:        45.178.12.0/22 maxlen: 32
                          2803:da60::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167388 (0x21125c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd
        Validity
            Not Before: Jul 21 05:01:21 2023 GMT
            Not After : Jul 22 05:01:21 2025 GMT
        Subject: CN=3e10b2c4fbe15fef564cadd215232167f4910745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:1c:58:d2:3b:05:b7:01:52:f5:de:12:4b:
                    c8:04:00:31:29:06:03:39:10:7e:f7:fc:db:33:a5:
                    6e:ed:75:08:80:b7:68:5f:a9:85:fc:c4:7b:1a:ba:
                    3c:e7:e3:10:0e:91:54:af:be:c5:36:fc:ad:fd:18:
                    0d:d4:74:dc:c3:be:8c:3f:08:65:5c:ea:f4:43:c2:
                    01:0d:0c:ef:10:e9:6d:f9:e1:fd:58:4d:fe:94:74:
                    18:71:ec:70:db:9b:0f:97:13:02:60:96:d8:fe:14:
                    ad:4b:9c:b1:ec:8d:68:21:f7:59:a5:5a:a0:d9:19:
                    46:4b:2d:26:c6:11:0b:4b:4c:e7:61:26:e8:25:cf:
                    92:ef:38:49:65:09:e4:95:dd:a5:b9:12:64:e9:48:
                    a8:93:51:15:f1:b9:13:09:d9:06:af:71:7e:0b:4c:
                    26:6a:8b:98:83:34:e3:c5:8e:eb:12:35:7b:f0:4d:
                    16:cf:98:d7:07:b1:0f:5b:96:32:11:5a:73:00:3a:
                    80:93:b9:32:f8:ba:44:3c:7f:53:96:ae:ad:a5:75:
                    25:6b:15:ad:03:5c:16:47:26:69:f2:39:bc:e5:ca:
                    c4:6d:b2:4a:bb:c9:64:9b:16:e9:1e:b7:a2:52:2e:
                    bb:d7:2a:4f:19:67:d3:25:6d:44:f2:65:c0:be:a4:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:D0:E1:A0:3D:BB:90:C0:B0:36:E7:09:3B:2C:31:23:49:D0:DE
            X509v3 Authority Key Identifier:
                keyid:D5:03:72:6D:33:A2:36:33:B3:3C:86:79:A8:3A:8F:E2:4C:01:26:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/3e10b2c4fbe15fef564cadd215232167f4910745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.12.0/22
                IPv6:
                  2803:da60::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:a5:92:13:69:5d:63:55:cb:7f:d4:18:19:06:45:44:df:
         c1:7a:5b:11:d5:48:3e:78:32:d6:7d:3f:5d:47:ad:10:c6:a2:
         9e:4d:f4:eb:68:51:00:37:49:eb:5d:77:b1:2d:f0:0d:22:10:
         07:22:ab:93:74:46:66:90:03:e8:ea:b7:1e:e5:d8:76:33:3f:
         0f:8d:9a:f0:a1:67:16:f2:20:73:1a:46:ad:b9:3b:48:38:bb:
         9d:e6:81:34:4a:83:9a:cb:4c:52:54:da:20:14:3c:ef:17:db:
         ec:22:40:e3:b8:83:4f:19:f5:b8:bb:58:bc:4b:c2:9d:e7:fd:
         3c:f7:8c:7f:d1:be:1d:73:db:a9:90:12:42:68:38:8f:fd:2c:
         5f:72:df:4f:35:40:ce:4a:9b:44:09:4e:7f:71:a3:66:98:ac:
         b4:b5:20:be:a5:d2:f4:f7:93:3a:23:e8:31:ce:d1:b4:39:25:
         e5:3e:4c:53:cb:0f:c0:f4:f4:eb:05:eb:74:f8:7d:41:05:fa:
         30:35:4d:c4:26:6d:ca:82:c4:3e:25:65:ca:0e:71:ff:c5:14:
         0f:19:e8:cf:f4:50:75:bc:30:c1:c4:ec:7a:3f:f9:7c:b4:3a:
         06:00:50:b4:a0:d3:76:2d:f3:95:20:e4:42:64:5d:52:f9:2c:
         b6:55:76:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIRJcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
OGYzYzg3OWQ1Mzc2MWE4YTZmOTU5MGJkYjgyYTI0YjIzYWM1YmQwHhcNMjMwNzIx
MDUwMTIxWhcNMjUwNzIyMDUwMTIxWjAzMTEwLwYDVQQDEygzZTEwYjJjNGZiZTE1
ZmVmNTY0Y2FkZDIxNTIzMjE2N2Y0OTEwNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjr8cWNI7BbcBUvXeEkvIBAAxKQYDORB+9/zbM6Vu7XUIgLdo
X6mF/MR7Gro85+MQDpFUr77FNvyt/RgN1HTcw76MPwhlXOr0Q8IBDQzvEOlt+eH9
WE3+lHQYcexw25sPlxMCYJbY/hStS5yx7I1oIfdZpVqg2RlGSy0mxhELS0znYSbo
Jc+S7zhJZQnkld2luRJk6Uiok1EV8bkTCdkGr3F+C0wmaouYgzTjxY7rEjV78E0W
z5jXB7EPW5YyEVpzADqAk7ky+LpEPH9Tlq6tpXUlaxWtA1wWRyZp8jm85crEbbJK
u8lkmxbpHreiUi671ypPGWfTJW1E8mXAvqQp/wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJtg0OGgPbuQwLA25wk7LDEjSdDeMB8GA1UdIwQYMBaAFNUDcm0zojYzszyG
eag6j+JMASZ3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmY4ZjNj
ODc5ZDUzNzYxYThhNmY5NTkwYmRiODJhMjRiMjNhYzViZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFhMjYwNDEtYTQ5ZC00YzYzLWE0MmUtOGRhZmZj
ZjM5MGEwLzNlMTBiMmM0ZmJlMTVmZWY1NjRjYWRkMjE1MjMyMTY3ZjQ5MTA3NDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWEyNjA0MS1hNDlkLTRjNjMtYTQyZS04ZGFm
ZmNmMzkwYTAvYmY4ZjNjODc5ZDUzNzYxYThhNmY5NTkwYmRiODJhMjRiMjNhYzVi
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2yDDANBAIAAjAHAwUAKAPaYDANBgkqhkiG9w0BAQsFAAOC
AQEAIK2lkhNpXWNVy3/UGBkGRUTfwXpbEdVIPngy1n0/XUetEMaink3062hRADdJ
6113sS3wDSIQByKrk3RGZpAD6Oq3HuXYdjM/D42a8KFnFvIgcxpGrbk7SDi7neaB
NEqDmstMUlTaIBQ87xfb7CJA47iDTxn1uLtYvEvCnef9PPeMf9G+HXPbqZASQmg4
j/0sX3LfTzVAzkqbRAlOf3GjZpistLUgvqXS9PeTOiPoMc7RtDkl5T5MU8sPwPT0
6wXrdPh9QQX6MDVNxCZtyoLEPiVlyg5x/8UUDxnoz/RQdbwwwcTsej/5fLQ6BgBQ
tKDTdi3zlSDkQmRdUvkstlV2UA==
-----END CERTIFICATE-----