Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/033dfad2-a7e7-44f8-a90a-c3d070f0bcb5/9a192db119a5b7ef6716ad6a592b4093269e8506.roa
File:                     9a192db119a5b7ef6716ad6a592b4093269e8506.roa (raw, json)
Hash identifier:          Su6AWCdVkJGatjjtLhhhPMOba7phC8ZEL+eLtd3u018=
Subject key identifier:   9A:1D:8D:D5:74:22:FF:DA:D1:5C:0C:5E:11:E7:7C:C7:FF:10:74:D5
Certificate issuer:       /CN=006e2de50b2738cbe280891c721b46557a23d0d6
Certificate serial:       0740AE
Authority key identifier: 57:D5:20:6B:E2:6C:2D:3A:00:69:45:E3:95:C3:F3:6C:86:1B:10:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/006e2de50b2738cbe280891c721b46557a23d0d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/033dfad2-a7e7-44f8-a90a-c3d070f0bcb5/9a192db119a5b7ef6716ad6a592b4093269e8506.roa
Signing time:             Wed 24 Mar 2021 14:30:35 +0000
ROA not before:           Wed 24 Mar 2021 14:30:35 +0000
ROA not after:            Tue 24 Mar 2026 14:30:35 +0000
asID:                     269778
IP address blocks:        45.180.60.0/22 maxlen: 24
                          2803:6160::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475310 (0x740ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006e2de50b2738cbe280891c721b46557a23d0d6
        Validity
            Not Before: Mar 24 14:30:35 2021 GMT
            Not After : Mar 24 14:30:35 2026 GMT
        Subject: CN=9a192db119a5b7ef6716ad6a592b4093269e8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:e7:fe:a9:25:32:47:4d:02:3b:49:0a:c9:
                    bb:38:c3:69:94:cb:a0:51:07:cf:4f:82:d6:a4:b6:
                    20:3d:fe:49:18:e2:bf:ca:91:0e:8c:3f:c0:4c:d3:
                    d6:a2:4b:fe:ad:d1:a9:8b:f1:09:de:c7:65:0a:50:
                    87:05:0b:3f:da:70:d6:ec:42:b5:c4:12:f2:f0:c2:
                    2f:fd:42:f0:19:5d:20:61:fc:85:e9:e0:1e:93:76:
                    ae:7f:cc:7a:e9:96:26:67:d2:19:53:87:cb:1e:92:
                    0f:2f:23:b9:35:dd:10:d8:5b:a2:18:f9:7e:99:49:
                    06:ad:2c:30:5e:78:7d:49:d5:fa:3f:09:25:88:bb:
                    a0:73:a3:59:29:02:c8:2e:20:84:cb:6b:e7:fe:a1:
                    cb:8d:46:e3:e2:58:ff:b8:e8:81:5a:8e:7a:83:25:
                    b0:71:f5:9b:76:49:fc:c1:ef:aa:47:43:12:57:7b:
                    fa:97:0d:68:8a:64:37:53:c8:68:78:70:ba:e4:8a:
                    fc:d6:64:f9:59:e4:39:08:66:73:f1:2e:cf:b4:54:
                    e2:2f:52:df:83:c9:90:b0:63:cc:00:20:81:d3:96:
                    a1:3d:ed:08:1f:dc:e7:e5:09:9b:c4:30:2a:4a:5b:
                    87:ea:e9:3a:fe:7f:07:6e:61:ac:6f:c7:25:96:b1:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1D:8D:D5:74:22:FF:DA:D1:5C:0C:5E:11:E7:7C:C7:FF:10:74:D5
            X509v3 Authority Key Identifier:
                keyid:57:D5:20:6B:E2:6C:2D:3A:00:69:45:E3:95:C3:F3:6C:86:1B:10:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/006e2de50b2738cbe280891c721b46557a23d0d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/033dfad2-a7e7-44f8-a90a-c3d070f0bcb5/9a192db119a5b7ef6716ad6a592b4093269e8506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/033dfad2-a7e7-44f8-a90a-c3d070f0bcb5/006e2de50b2738cbe280891c721b46557a23d0d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.60.0/22
                IPv6:
                  2803:6160::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:96:5a:0c:60:39:76:56:ac:8d:02:26:90:2b:fe:d4:93:e5:
         a5:41:58:7d:c6:e0:29:c7:1f:86:9a:eb:a6:8e:86:b8:b8:ba:
         51:af:9b:bf:96:1a:44:cb:ae:c8:9e:f3:d0:1e:43:53:ef:1b:
         7c:23:62:ab:a7:5c:f3:5e:80:0c:25:da:a3:9d:17:dd:d6:df:
         c3:99:3a:a3:23:fe:95:d2:93:89:5f:97:12:61:ad:4f:a4:08:
         5f:85:40:db:76:59:f4:9f:61:d8:3b:9b:85:fe:82:36:a1:a4:
         0e:75:05:93:65:6c:a8:4d:54:80:25:57:61:ac:03:3e:b8:9f:
         91:11:ea:fa:8e:6f:1d:3e:ae:05:7d:bd:37:5d:15:7b:ef:a8:
         b1:84:d8:bf:4e:e0:d1:2e:36:6e:38:13:a0:35:16:c9:8b:9b:
         eb:22:f4:12:dc:1e:e3:2e:52:38:30:fc:7a:55:81:cc:c1:52:
         82:df:9e:b8:22:5e:34:c3:32:f5:1d:eb:86:63:0c:8a:60:58:
         29:9e:48:05:40:1b:fd:5e:a0:4e:32:87:58:98:9d:8d:bc:a3:
         b6:2e:3f:f0:91:3a:a7:b6:f5:7d:25:a1:5f:26:a5:c4:4f:3d:
         c4:18:04:61:ee:9d:98:67:94:61:8f:25:74:b2:3c:42:5b:3a:
         c0:87:b7:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDB0CuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAw
NmUyZGU1MGIyNzM4Y2JlMjgwODkxYzcyMWI0NjU1N2EyM2QwZDYwHhcNMjEwMzI0
MTQzMDM1WhcNMjYwMzI0MTQzMDM1WjAzMTEwLwYDVQQDEyg5YTE5MmRiMTE5YTVi
N2VmNjcxNmFkNmE1OTJiNDA5MzI2OWU4NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnVPn/qklMkdNAjtJCsm7OMNplMugUQfPT4LWpLYgPf5JGOK/
ypEOjD/ATNPWokv+rdGpi/EJ3sdlClCHBQs/2nDW7EK1xBLy8MIv/ULwGV0gYfyF
6eAek3auf8x66ZYmZ9IZU4fLHpIPLyO5Nd0Q2FuiGPl+mUkGrSwwXnh9SdX6Pwkl
iLugc6NZKQLILiCEy2vn/qHLjUbj4lj/uOiBWo56gyWwcfWbdkn8we+qR0MSV3v6
lw1oimQ3U8hoeHC65Ir81mT5WeQ5CGZz8S7PtFTiL1Lfg8mQsGPMACCB05ahPe0I
H9zn5QmbxDAqSluH6uk6/n8HbmGsb8cllrFBuQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJodjdV0Iv/a0VwMXhHnfMf/EHTVMB8GA1UdIwQYMBaAFFfVIGvibC06AGlF
45XD82yGGxBgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDA2ZTJk
ZTUwYjI3MzhjYmUyODA4OTFjNzIxYjQ2NTU3YTIzZDBkNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDMzZGZhZDItYTdlNy00NGY4LWE5MGEtYzNkMDcw
ZjBiY2I1LzlhMTkyZGIxMTlhNWI3ZWY2NzE2YWQ2YTU5MmI0MDkzMjY5ZTg1MDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMzNkZmFkMi1hN2U3LTQ0ZjgtYTkwYS1jM2Qw
NzBmMGJjYjUvMDA2ZTJkZTUwYjI3MzhjYmUyODA4OTFjNzIxYjQ2NTU3YTIzZDBk
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi20PDANBAIAAjAHAwUAKANhYDANBgkqhkiG9w0BAQsFAAOC
AQEAWJZaDGA5dlasjQImkCv+1JPlpUFYfcbgKccfhprrpo6GuLi6Ua+bv5YaRMuu
yJ7z0B5DU+8bfCNiq6dc816ADCXao50X3dbfw5k6oyP+ldKTiV+XEmGtT6QIX4VA
23ZZ9J9h2Dubhf6CNqGkDnUFk2VsqE1UgCVXYawDPrifkRHq+o5vHT6uBX29N10V
e++osYTYv07g0S42bjgToDUWyYub6yL0Etwe4y5SODD8elWBzMFSgt+euCJeNMMy
9R3rhmMMimBYKZ5IBUAb/V6gTjKHWJidjbyjti4/8JE6p7b1fSWhXyalxE89xBgE
Ye6dmGeUYY8ldLI8Qls6wIe3Iw==
-----END CERTIFICATE-----