Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/8e9718b15f65bb2def1e1aa7e4a8a987aa0de314.roa
File:                     8e9718b15f65bb2def1e1aa7e4a8a987aa0de314.roa (raw, json)
Hash identifier:          /XyM+wIiEZ/uasRvFXMjkM+HUTR0BaA5N8e3cyPsvZ0=
Subject key identifier:   2F:C7:7F:5E:4E:36:B8:C9:94:D9:7C:72:F0:99:6C:5A:31:9B:69:01
Certificate issuer:       /CN=65dc67335c4cd12864224099a750c7822b83afa2
Certificate serial:       0127
Authority key identifier: 16:9B:E1:30:FD:AB:16:3E:17:F6:BC:8C:4D:5D:4B:83:FB:B7:EA:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65dc67335c4cd12864224099a750c7822b83afa2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/8e9718b15f65bb2def1e1aa7e4a8a987aa0de314.roa
Signing time:             Wed 21 Jun 2023 03:26:27 +0000
ROA not before:           Tue 20 Jun 2023 03:26:27 +0000
ROA not after:            Sat 21 Jun 2025 03:26:27 +0000
asID:                     265610
IP address blocks:        45.189.156.0/22 maxlen: 22
                          2806:367::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc67335c4cd12864224099a750c7822b83afa2
        Validity
            Not Before: Jun 20 03:26:27 2023 GMT
            Not After : Jun 21 03:26:27 2025 GMT
        Subject: CN=8e9718b15f65bb2def1e1aa7e4a8a987aa0de314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:7e:8c:76:69:98:cf:16:b8:66:94:ec:3f:
                    53:93:bf:ab:0e:c2:ca:d8:b7:0e:bd:83:91:5e:bc:
                    cd:d2:4e:0f:24:29:ef:02:5b:c1:e9:66:7e:c5:11:
                    cc:52:b7:85:e9:d1:7b:c7:6e:d3:e6:0d:72:eb:b7:
                    4d:b6:c2:ea:ba:c3:c7:f5:f2:26:78:30:82:10:5f:
                    60:10:05:40:e9:49:57:fd:f7:c8:fe:af:42:52:36:
                    56:8d:9a:f6:80:d1:2d:f8:ae:48:71:14:c1:6b:cd:
                    4d:33:f5:cd:13:0c:5b:dd:c2:8c:09:60:ca:1c:a0:
                    b3:c1:d5:e9:ae:b9:c5:97:66:66:7b:d7:81:91:72:
                    f6:a1:37:cd:a6:3b:29:68:af:d1:52:b0:98:d1:7f:
                    78:31:63:9e:47:ba:42:d0:60:8b:ec:26:11:31:0f:
                    a5:ac:e4:e1:5c:0e:45:30:38:6f:b3:20:ac:98:b0:
                    aa:4b:77:72:cc:9b:7a:5f:be:01:c0:29:57:78:a5:
                    f3:1f:54:51:03:b2:5b:48:90:11:90:7a:cb:31:f6:
                    dd:10:ad:0f:5e:2f:1e:33:42:ab:0d:f3:f2:3d:3f:
                    8f:56:fa:94:bd:f0:15:84:d8:86:3a:f1:6b:b9:ad:
                    aa:14:dc:2a:69:ba:32:d6:c6:5b:be:d4:4c:c5:be:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:7F:5E:4E:36:B8:C9:94:D9:7C:72:F0:99:6C:5A:31:9B:69:01
            X509v3 Authority Key Identifier:
                keyid:16:9B:E1:30:FD:AB:16:3E:17:F6:BC:8C:4D:5D:4B:83:FB:B7:EA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65dc67335c4cd12864224099a750c7822b83afa2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/8e9718b15f65bb2def1e1aa7e4a8a987aa0de314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/65dc67335c4cd12864224099a750c7822b83afa2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.156.0/22
                IPv6:
                  2806:367::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:e4:d2:6d:3f:02:62:7c:17:d7:98:2c:d8:68:de:1e:15:
         f2:78:41:4d:26:89:32:ef:4b:88:01:6e:d0:c7:91:66:eb:4d:
         38:24:ff:da:7c:a6:85:f4:1e:d2:1f:9b:0d:5d:e8:b1:84:3b:
         2b:81:3b:b1:ca:6b:1d:6d:c5:30:df:ca:70:2c:ed:0e:8a:2f:
         d1:90:d7:15:44:90:1e:3d:5d:a1:99:d6:1b:85:a3:cf:bb:09:
         c8:96:00:e6:38:c7:d9:2d:e6:1b:bd:e9:ec:7c:a0:5b:43:37:
         f9:03:e9:15:b4:02:f0:5f:bf:b6:f1:bb:f6:1c:9d:25:c4:a1:
         49:33:4d:19:a9:f1:cc:53:f2:ce:b1:2d:58:80:41:9a:dd:09:
         b5:3c:72:a2:8b:ce:d5:65:6a:e7:b5:6b:ef:9f:63:d2:33:7a:
         9d:56:07:47:fd:a8:30:ac:81:3e:95:22:9a:5f:8a:4a:48:29:
         fa:25:ec:20:85:88:2a:c3:6e:00:56:cf:94:3a:1d:40:4b:d4:
         a3:79:b5:95:b1:0f:67:28:86:47:ed:4b:00:06:3d:6a:7b:cb:
         a1:e8:4a:8b:50:45:78:32:8b:77:b5:d8:b5:1d:5c:6e:9b:fb:
         15:d3:05:d0:e4:15:65:5b:07:fa:a4:f9:c7:8c:da:c1:f1:bc:
         0c:ee:75:11
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVk
YzY3MzM1YzRjZDEyODY0MjI0MDk5YTc1MGM3ODIyYjgzYWZhMjAeFw0yMzA2MjAw
MzI2MjdaFw0yNTA2MjEwMzI2MjdaMDMxMTAvBgNVBAMTKDhlOTcxOGIxNWY2NWJi
MmRlZjFlMWFhN2U0YThhOTg3YWEwZGUzMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaxn6MdmmYzxa4ZpTsP1OTv6sOwsrYtw69g5FevM3STg8kKe8C
W8HpZn7FEcxSt4Xp0XvHbtPmDXLrt022wuq6w8f18iZ4MIIQX2AQBUDpSVf998j+
r0JSNlaNmvaA0S34rkhxFMFrzU0z9c0TDFvdwowJYMocoLPB1emuucWXZmZ714GR
cvahN82mOylor9FSsJjRf3gxY55HukLQYIvsJhExD6Ws5OFcDkUwOG+zIKyYsKpL
d3LMm3pfvgHAKVd4pfMfVFEDsltIkBGQessx9t0QrQ9eLx4zQqsN8/I9P49W+pS9
8BWE2IY68Wu5raoU3CppujLWxlu+1EzFvvmVAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUL8d/Xk42uMmU2Xxy8JlsWjGbaQEwHwYDVR0jBBgwFoAUFpvhMP2rFj4X9ryM
TV1Lg/u36hUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82NWRjNjcz
MzVjNGNkMTI4NjQyMjQwOTlhNzUwYzc4MjJiODNhZmEyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mM2U4NzcxNS1mYTczLTRhMjktOThiMy00YjE5ZDdl
NzIxM2QvOGU5NzE4YjE1ZjY1YmIyZGVmMWUxYWE3ZTRhOGE5ODdhYTBkZTMxNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YzZTg3NzE1LWZhNzMtNGEyOS05OGIzLTRiMTlk
N2U3MjEzZC82NWRjNjczMzVjNGNkMTI4NjQyMjQwOTlhNzUwYzc4MjJiODNhZmEy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLb2cMA0EAgACMAcDBQAoBgNnMA0GCSqGSIb3DQEBCwUAA4IB
AQAkseTSbT8CYnwX15gs2GjeHhXyeEFNJoky70uIAW7Qx5Fm6004JP/afKaF9B7S
H5sNXeixhDsrgTuxymsdbcUw38pwLO0Oii/RkNcVRJAePV2hmdYbhaPPuwnIlgDm
OMfZLeYbvensfKBbQzf5A+kVtALwX7+28bv2HJ0lxKFJM00ZqfHMU/LOsS1YgEGa
3Qm1PHKii87VZWrntWvvn2PSM3qdVgdH/agwrIE+lSKaX4pKSCn6JewghYgqw24A
Vs+UOh1AS9SjebWVsQ9nKIZH7UsABj1qe8uh6EqLUEV4Mot3tdi1HVxum/sV0wXQ
5BVlWwf6pPnHjNrB8bwM7nUR
-----END CERTIFICATE-----