Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/4a94420784a718560011d39036a4077ed35d663b.roa
File:                     4a94420784a718560011d39036a4077ed35d663b.roa (raw, json)
Hash identifier:          8kRyLIBhxbAafsRfP54+7XNCvypVIG5wQN7jRWTGkcI=
Subject key identifier:   D8:1E:7C:06:0A:B1:3F:7D:8E:82:69:8A:0E:FA:AE:D5:61:31:32:79
Certificate issuer:       /CN=5bd12ac43ee0fa27bacdeeb51a158f080b005465
Certificate serial:       0C76C9
Authority key identifier: AB:22:34:58:B3:62:1C:B5:68:13:10:E5:30:2C:9E:2F:1B:83:FD:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bd12ac43ee0fa27bacdeeb51a158f080b005465.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/4a94420784a718560011d39036a4077ed35d663b.roa
Signing time:             Wed 24 Mar 2021 14:34:17 +0000
ROA not before:           Wed 24 Mar 2021 14:34:16 +0000
ROA not after:            Tue 24 Mar 2026 14:34:16 +0000
asID:                     266891
IP address blocks:        45.161.112.0/22 maxlen: 24
                          2803:66a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816841 (0xc76c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd12ac43ee0fa27bacdeeb51a158f080b005465
        Validity
            Not Before: Mar 24 14:34:16 2021 GMT
            Not After : Mar 24 14:34:16 2026 GMT
        Subject: CN=4a94420784a718560011d39036a4077ed35d663b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:d8:5c:01:37:45:1b:46:8e:ef:9a:57:12:
                    45:d7:d4:51:ea:df:be:64:28:db:79:65:3b:33:c0:
                    db:e3:7d:66:e7:eb:80:56:d0:5e:7a:f7:8e:61:3a:
                    27:70:f5:b8:5d:e6:59:d0:f2:c3:5f:90:1b:9d:8e:
                    c5:f8:02:2d:a4:f1:40:25:10:05:86:ad:cc:b7:c6:
                    e5:8a:ea:fe:b9:00:b2:fb:47:49:29:63:b7:1a:7b:
                    62:8b:18:9a:33:17:94:58:c9:41:da:c7:4d:01:66:
                    93:b9:aa:85:bd:23:b3:42:1f:9c:b6:9c:3b:9c:f9:
                    2d:6f:11:50:11:13:d0:68:97:04:fb:34:0b:12:d4:
                    b9:29:b0:81:59:c1:a7:1a:9e:01:87:07:5a:ad:a8:
                    cf:d6:4b:63:0d:aa:e3:c1:df:96:f7:64:70:4b:c0:
                    b8:e9:d5:a3:33:1a:04:85:fd:dd:34:97:91:da:4e:
                    fe:02:58:8c:7e:ce:6d:a7:b0:bf:65:dc:fb:ab:b7:
                    68:f1:43:96:89:2f:4f:7a:56:74:85:8b:0a:56:00:
                    00:5c:61:fe:32:8d:e4:2b:cb:78:40:f2:2c:39:1a:
                    96:fd:af:5f:c9:1c:38:e3:05:fa:f2:59:d7:e0:88:
                    e0:b2:0b:d4:0f:89:30:4f:db:7f:f5:b3:86:6f:c7:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1E:7C:06:0A:B1:3F:7D:8E:82:69:8A:0E:FA:AE:D5:61:31:32:79
            X509v3 Authority Key Identifier:
                keyid:AB:22:34:58:B3:62:1C:B5:68:13:10:E5:30:2C:9E:2F:1B:83:FD:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bd12ac43ee0fa27bacdeeb51a158f080b005465.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/4a94420784a718560011d39036a4077ed35d663b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/5bd12ac43ee0fa27bacdeeb51a158f080b005465.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.112.0/22
                IPv6:
                  2803:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:bc:2e:37:75:bb:bb:c8:7a:05:5d:69:81:52:6c:06:41:
         61:21:80:6d:f5:25:65:b3:7e:b3:8a:9e:e2:90:56:aa:46:82:
         7b:bd:7c:a1:ff:96:55:8e:b4:60:22:d8:d8:2f:02:dc:95:39:
         9c:2c:95:a4:b3:70:39:ba:69:d4:b6:22:f4:f6:09:eb:1b:92:
         23:0d:50:94:c8:12:2e:92:b9:23:de:f9:89:d8:21:75:bc:36:
         c2:bd:ee:9b:69:ab:c0:a2:c3:68:a5:83:15:bf:ca:5b:89:e4:
         46:1b:bd:b2:23:06:d1:69:52:a8:5f:3f:cb:69:ac:b9:26:1e:
         4c:33:6a:e3:8c:5a:42:05:12:e1:66:7f:fc:56:68:ad:f7:7d:
         d0:95:d3:c5:8a:e9:47:d3:bc:88:2b:7c:38:c7:ca:46:48:52:
         39:54:58:1c:02:9c:2d:98:24:7d:c5:c2:0d:d7:6c:51:95:e2:
         21:9f:2d:b1:69:55:ac:29:31:73:23:b9:44:be:9d:12:cc:47:
         c2:27:4f:94:4d:0d:55:0b:e2:a0:60:6f:20:71:24:53:98:e3:
         f5:ec:3c:27:6b:e7:dd:fc:c2:79:ed:0f:a6:2d:d1:ed:54:df:
         fa:20:0b:d5:d6:88:d4:0f:d2:b4:4e:70:ed:f5:70:19:6e:42:
         0e:71:89:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDHbJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
ZDEyYWM0M2VlMGZhMjdiYWNkZWViNTFhMTU4ZjA4MGIwMDU0NjUwHhcNMjEwMzI0
MTQzNDE2WhcNMjYwMzI0MTQzNDE2WjAzMTEwLwYDVQQDEyg0YTk0NDIwNzg0YTcx
ODU2MDAxMWQzOTAzNmE0MDc3ZWQzNWQ2NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo5vYXAE3RRtGju+aVxJF19RR6t++ZCjbeWU7M8Db431m5+uA
VtBeeveOYToncPW4XeZZ0PLDX5AbnY7F+AItpPFAJRAFhq3Mt8bliur+uQCy+0dJ
KWO3GntiixiaMxeUWMlB2sdNAWaTuaqFvSOzQh+ctpw7nPktbxFQERPQaJcE+zQL
EtS5KbCBWcGnGp4BhwdarajP1ktjDarjwd+W92RwS8C46dWjMxoEhf3dNJeR2k7+
AliMfs5tp7C/Zdz7q7do8UOWiS9PelZ0hYsKVgAAXGH+Mo3kK8t4QPIsORqW/a9f
yRw44wX68lnX4IjgsgvUD4kwT9t/9bOGb8dkVQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNgefAYKsT99joJpig76rtVhMTJ5MB8GA1UdIwQYMBaAFKsiNFizYhy1aBMQ
5TAsni8bg/04MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWJkMTJh
YzQzZWUwZmEyN2JhY2RlZWI1MWExNThmMDgwYjAwNTQ2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODJjZWYxNjUtM2M5YS00N2VjLTlkYTctYjFjOTMw
NjgwMDljLzRhOTQ0MjA3ODRhNzE4NTYwMDExZDM5MDM2YTQwNzdlZDM1ZDY2M2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MmNlZjE2NS0zYzlhLTQ3ZWMtOWRhNy1iMWM5
MzA2ODAwOWMvNWJkMTJhYzQzZWUwZmEyN2JhY2RlZWI1MWExNThmMDgwYjAwNTQ2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2hcDANBAIAAjAHAwUAKANmoDANBgkqhkiG9w0BAQsFAAOC
AQEAF+y8Ljd1u7vIegVdaYFSbAZBYSGAbfUlZbN+s4qe4pBWqkaCe718of+WVY60
YCLY2C8C3JU5nCyVpLNwObpp1LYi9PYJ6xuSIw1QlMgSLpK5I975idghdbw2wr3u
m2mrwKLDaKWDFb/KW4nkRhu9siMG0WlSqF8/y2msuSYeTDNq44xaQgUS4WZ//FZo
rfd90JXTxYrpR9O8iCt8OMfKRkhSOVRYHAKcLZgkfcXCDddsUZXiIZ8tsWlVrCkx
cyO5RL6dEsxHwidPlE0NVQvioGBvIHEkU5jj9ew8J2vn3fzCee0Ppi3R7VTf+iAL
1daI1A/StE5w7fVwGW5CDnGJXw==
-----END CERTIFICATE-----