Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/783e4290fb70703ef78d4a65caaed8f29ba870f1.roa
File:                     783e4290fb70703ef78d4a65caaed8f29ba870f1.roa (raw, json)
Hash identifier:          KZVRo2HYIM2D+nJ3PeErWKgK5pKTttcCCijIYC/nNxk=
Subject key identifier:   94:B0:A9:04:B0:F7:6E:B7:63:B8:E0:AE:60:8E:5F:2C:9F:34:D6:58
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1A8E27
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/783e4290fb70703ef78d4a65caaed8f29ba870f1.roa
Signing time:             Mon 03 Oct 2022 19:06:15 +0000
ROA not before:           Mon 03 Oct 2022 19:04:58 +0000
ROA not after:            Thu 03 Oct 2024 20:04:58 +0000
asID:                     6306
IP address blocks:        161.140.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740327 (0x1a8e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 19:04:58 2022 GMT
            Not After : Oct  3 20:04:58 2024 GMT
        Subject: CN=783e4290fb70703ef78d4a65caaed8f29ba870f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:5b:c1:c3:93:08:b6:07:7a:0b:8e:09:53:
                    e7:6f:fa:75:ef:74:20:52:a6:8e:75:6d:99:82:f1:
                    a1:2d:b9:a7:5f:6c:62:3d:1a:e3:d4:4d:04:97:fd:
                    a0:44:07:d8:cf:45:9e:66:6b:89:d9:ef:4e:35:37:
                    a3:2f:a6:4c:53:16:76:b8:ef:8a:12:87:18:a1:6b:
                    12:e8:12:9b:0b:58:22:c4:02:41:96:ef:dc:1e:fa:
                    a8:c6:3b:ab:c1:e7:56:88:96:e8:ba:d1:55:ba:86:
                    93:b7:9c:7c:69:21:f9:db:53:f8:ae:33:a2:06:cf:
                    05:bc:5e:33:8c:2e:de:cc:46:f4:a0:b7:c1:38:40:
                    d4:54:94:45:e2:94:29:cc:70:ce:0b:05:7c:ae:7f:
                    e8:05:95:c9:78:58:d4:df:5d:79:9d:ce:3b:42:1f:
                    86:10:16:79:c4:f8:83:75:c1:0f:4d:a8:cb:3b:92:
                    76:2a:fc:40:8a:40:aa:bd:c8:30:bb:03:0f:e8:30:
                    4b:9b:40:d5:5b:17:28:04:48:87:87:32:b2:61:0a:
                    42:72:4b:f3:5f:5a:8e:1f:b6:08:82:80:51:4b:9f:
                    a8:2b:d5:31:39:ef:e2:ba:f0:d8:d7:98:21:43:17:
                    fc:f0:cb:30:a8:6e:4b:1c:79:dd:56:7c:08:34:ef:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B0:A9:04:B0:F7:6E:B7:63:B8:E0:AE:60:8E:5F:2C:9F:34:D6:58
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/783e4290fb70703ef78d4a65caaed8f29ba870f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         13:90:c6:88:81:4c:ee:53:9b:80:9c:84:cd:55:9c:91:07:8c:
         a9:1e:e6:bc:77:da:62:aa:f2:87:c3:6f:6b:6c:88:e2:7e:51:
         83:2d:98:c4:89:c0:1f:93:8a:24:c2:78:94:46:7b:45:b4:bd:
         95:ba:eb:f5:61:40:b6:3c:c1:3c:05:cb:98:92:b8:01:7b:f7:
         4e:50:9f:6e:fb:3e:b5:70:a4:3b:b7:75:db:15:8c:f1:d2:e6:
         2c:32:9c:83:f2:fc:5e:07:a3:65:e7:dd:fa:53:6b:ac:c1:7c:
         a8:64:13:c4:4f:6a:5d:3c:0a:b0:c2:88:c5:bc:d0:53:ea:a9:
         6c:c1:19:7e:3c:a7:f8:3e:af:c5:55:17:37:50:fb:5d:01:57:
         a0:81:49:a4:6a:f6:c6:90:90:d7:c9:43:b6:75:78:58:6a:c5:
         b8:58:f8:7c:f6:4b:e9:d0:e2:02:74:cf:1a:89:66:67:cd:ce:
         4c:0c:11:95:f4:b3:e1:bb:0e:82:b4:ac:98:f8:dd:87:65:b2:
         11:c6:ec:a5:d1:96:7d:db:6d:4b:92:4a:61:f1:d6:d8:c1:5d:
         eb:ad:6a:06:ae:38:9b:a1:25:9e:cd:94:a2:86:b0:9a:7c:f2:
         7f:19:65:4d:8f:0a:64:fd:62:d4:d2:3f:4e:7b:1c:9d:16:73:
         fa:35:d9:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGo4nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
OWI5OWZjMmQyZWVmYmRiNzViYTY2M2Q1NzVhMTBhYzg0Zjc4YzEwHhcNMjIxMDAz
MTkwNDU4WhcNMjQxMDAzMjAwNDU4WjAzMTEwLwYDVQQDEyg3ODNlNDI5MGZiNzA3
MDNlZjc4ZDRhNjVjYWFlZDhmMjliYTg3MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuDpbwcOTCLYHeguOCVPnb/p173QgUqaOdW2ZgvGhLbmnX2xi
PRrj1E0El/2gRAfYz0WeZmuJ2e9ONTejL6ZMUxZ2uO+KEocYoWsS6BKbC1gixAJB
lu/cHvqoxjurwedWiJboutFVuoaTt5x8aSH521P4rjOiBs8FvF4zjC7ezEb0oLfB
OEDUVJRF4pQpzHDOCwV8rn/oBZXJeFjU3115nc47Qh+GEBZ5xPiDdcEPTajLO5J2
KvxAikCqvcgwuwMP6DBLm0DVWxcoBEiHhzKyYQpCckvzX1qOH7YIgoBRS5+oK9Ux
Oe/iuvDY15ghQxf88MswqG5LHHndVnwINO+D+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJSwqQSw9263Y7jgrmCOXyyfNNZYMB8GA1UdIwQYMBaAFCYyOkvAn0pmklw0
56DNBZ6h7QU7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzY5Yjk5
ZmMyZDJlZWZiZGI3NWJhNjYzZDU3NWExMGFjODRmNzhjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjA0MzM0YTYtOGU1Ni00OTAzLTkwZjAtMWE4OTdm
YzkzNWM1Lzc4M2U0MjkwZmI3MDcwM2VmNzhkNGE2NWNhYWVkOGYyOWJhODcwZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDQzMzRhNi04ZTU2LTQ5MDMtOTBmMC0xYTg5
N2ZjOTM1YzUvYzY5Yjk5ZmMyZDJlZWZiZGI3NWJhNjYzZDU3NWExMGFjODRmNzhj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB6GMADANBgkqhkiG9w0BAQsFAAOCAQEAE5DGiIFM7lObgJyE
zVWckQeMqR7mvHfaYqryh8Nva2yI4n5Rgy2YxInAH5OKJMJ4lEZ7RbS9lbrr9WFA
tjzBPAXLmJK4AXv3TlCfbvs+tXCkO7d12xWM8dLmLDKcg/L8XgejZefd+lNrrMF8
qGQTxE9qXTwKsMKIxbzQU+qpbMEZfjyn+D6vxVUXN1D7XQFXoIFJpGr2xpCQ18lD
tnV4WGrFuFj4fPZL6dDiAnTPGolmZ83OTAwRlfSz4bsOgrSsmPjdh2WyEcbspdGW
fdttS5JKYfHW2MFd661qBq44m6Elns2UooawmnzyfxllTY8KZP1i1NI/TnscnRZz
+jXZUw==
-----END CERTIFICATE-----