Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bb751fc-abdf-48a4-8b23-81f7f1844735/acee4bdd990dfa8f56ad8b4821993c404d6b648b.roa
File:                     acee4bdd990dfa8f56ad8b4821993c404d6b648b.roa (raw, json)
Hash identifier:          EWrZoCGi6iQ2ybWr5qjTb4CJgl/Q0ln6YP5LkWWD/2Q=
Subject key identifier:   E5:CF:ED:25:53:BB:A9:FC:22:6C:D8:11:16:27:BF:5E:01:9A:C1:E0
Certificate issuer:       /CN=fa11e8946ab86863a96ae260b149f031c1d08232
Certificate serial:       0BBACC
Authority key identifier: 2C:97:B3:70:D3:BF:4D:0B:D3:96:94:91:EF:00:27:8E:57:5B:8F:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa11e8946ab86863a96ae260b149f031c1d08232.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bb751fc-abdf-48a4-8b23-81f7f1844735/acee4bdd990dfa8f56ad8b4821993c404d6b648b.roa
Signing time:             Wed 24 Mar 2021 14:30:46 +0000
ROA not before:           Wed 24 Mar 2021 14:30:46 +0000
ROA not after:            Tue 24 Mar 2026 14:30:46 +0000
asID:                     52399
IP address blocks:        45.173.168.0/22 maxlen: 24
                          2803:860::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768716 (0xbbacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11e8946ab86863a96ae260b149f031c1d08232
        Validity
            Not Before: Mar 24 14:30:46 2021 GMT
            Not After : Mar 24 14:30:46 2026 GMT
        Subject: CN=acee4bdd990dfa8f56ad8b4821993c404d6b648b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:d3:27:4f:39:80:b1:0c:f9:59:e0:81:28:
                    01:c6:59:f4:f7:d6:a5:c6:7a:75:d6:2e:9f:28:07:
                    2e:de:0d:fe:6a:2f:23:f6:cf:c4:ca:06:a9:5c:55:
                    0c:69:be:06:a4:48:c8:7b:e0:c8:c3:09:c9:9b:43:
                    03:bc:9a:68:71:01:f1:d7:4c:3e:62:f7:51:6e:d2:
                    72:b1:2c:cd:ee:03:a4:5d:43:e2:04:96:ff:a3:9e:
                    81:9b:bf:ca:06:a6:9c:12:62:28:50:ee:88:f0:59:
                    25:f2:19:a9:7f:ca:4f:0c:3d:a7:3a:e2:9d:b2:eb:
                    53:77:34:7e:38:57:ca:5c:0a:f7:1e:76:98:93:7f:
                    e6:01:1c:19:ed:9e:d7:0e:ae:fc:3d:40:26:db:95:
                    4c:76:41:64:57:f1:1e:a0:1b:db:54:c5:a5:a2:48:
                    63:60:5e:01:cd:fc:f6:4f:5b:9b:b3:95:90:33:a7:
                    ea:f3:dc:1d:68:a9:81:60:36:e7:d5:89:19:ba:41:
                    86:7d:17:a4:46:26:77:6a:ac:b9:15:7d:8f:7a:da:
                    c6:ba:6a:8e:1f:f3:57:65:5d:06:c2:8c:64:07:3c:
                    76:91:4e:cb:dc:b2:ec:58:89:db:4f:0b:5f:0d:60:
                    76:68:ae:7b:ac:2d:9f:49:ca:a5:81:77:64:d2:cd:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:ED:25:53:BB:A9:FC:22:6C:D8:11:16:27:BF:5E:01:9A:C1:E0
            X509v3 Authority Key Identifier:
                keyid:2C:97:B3:70:D3:BF:4D:0B:D3:96:94:91:EF:00:27:8E:57:5B:8F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa11e8946ab86863a96ae260b149f031c1d08232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bb751fc-abdf-48a4-8b23-81f7f1844735/acee4bdd990dfa8f56ad8b4821993c404d6b648b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bb751fc-abdf-48a4-8b23-81f7f1844735/fa11e8946ab86863a96ae260b149f031c1d08232.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.168.0/22
                IPv6:
                  2803:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:9c:4b:49:83:30:64:6f:85:ae:dd:b0:b6:ac:aa:fe:60:
         51:fb:3e:17:ec:ee:9e:72:a4:ef:87:69:08:4d:21:c9:19:ea:
         65:90:3b:b8:58:72:b8:a9:eb:ee:1c:c2:64:cd:29:98:62:99:
         ee:d5:08:26:ca:7e:2f:e8:31:04:28:9c:01:bf:ad:3b:b4:0d:
         3c:b9:28:78:09:39:01:e0:4e:23:ab:44:e3:f4:70:9d:7c:ef:
         a3:40:02:7a:b1:aa:d8:64:96:67:24:97:7d:a5:60:c8:29:f3:
         58:57:19:4f:9a:b4:12:22:4f:f7:4a:87:be:8d:61:87:75:1b:
         b8:6e:0b:eb:f6:46:24:db:6a:96:6f:6a:55:6c:3d:ed:cb:d5:
         8c:10:1c:04:54:40:75:c4:0c:67:77:7c:b6:74:94:a8:e3:a0:
         72:de:97:e6:ee:4d:3c:7c:c5:f0:64:3b:d4:86:1c:a8:5c:ff:
         0f:92:ba:2f:2a:90:fe:4d:85:a1:ae:76:27:2c:97:b5:59:ed:
         c0:2c:46:e6:5e:9b:83:47:ba:30:31:2f:09:f8:f8:3f:a4:e1:
         4f:a7:6b:ec:a9:a2:37:55:00:c9:7c:a3:6d:37:6a:71:12:e2:
         94:22:4d:56:68:b0:1a:2f:41:75:21:a6:60:46:13:ca:1b:cd:
         8e:dc:1a:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC7rMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZh
MTFlODk0NmFiODY4NjNhOTZhZTI2MGIxNDlmMDMxYzFkMDgyMzIwHhcNMjEwMzI0
MTQzMDQ2WhcNMjYwMzI0MTQzMDQ2WjAzMTEwLwYDVQQDEyhhY2VlNGJkZDk5MGRm
YThmNTZhZDhiNDgyMTk5M2M0MDRkNmI2NDhiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhJrTJ085gLEM+VnggSgBxln099alxnp11i6fKAcu3g3+ai8j
9s/EygapXFUMab4GpEjIe+DIwwnJm0MDvJpocQHx10w+YvdRbtJysSzN7gOkXUPi
BJb/o56Bm7/KBqacEmIoUO6I8Fkl8hmpf8pPDD2nOuKdsutTdzR+OFfKXAr3HnaY
k3/mARwZ7Z7XDq78PUAm25VMdkFkV/EeoBvbVMWlokhjYF4Bzfz2T1ubs5WQM6fq
89wdaKmBYDbn1YkZukGGfRekRiZ3aqy5FX2PetrGumqOH/NXZV0GwoxkBzx2kU7L
3LLsWInbTwtfDWB2aK57rC2fScqlgXdk0s0OdQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOXP7SVTu6n8ImzYERYnv14BmsHgMB8GA1UdIwQYMBaAFCyXs3DTv00L05aU
ke8AJ45XW4/XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmExMWU4
OTQ2YWI4Njg2M2E5NmFlMjYwYjE0OWYwMzFjMWQwODIzMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGJiNzUxZmMtYWJkZi00OGE0LThiMjMtODFmN2Yx
ODQ0NzM1L2FjZWU0YmRkOTkwZGZhOGY1NmFkOGI0ODIxOTkzYzQwNGQ2YjY0OGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYmI3NTFmYy1hYmRmLTQ4YTQtOGIyMy04MWY3
ZjE4NDQ3MzUvZmExMWU4OTQ2YWI4Njg2M2E5NmFlMjYwYjE0OWYwMzFjMWQwODIz
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2tqDANBAIAAjAHAwUAKAMIYDANBgkqhkiG9w0BAQsFAAOC
AQEAfa2cS0mDMGRvha7dsLasqv5gUfs+F+zunnKk74dpCE0hyRnqZZA7uFhyuKnr
7hzCZM0pmGKZ7tUIJsp+L+gxBCicAb+tO7QNPLkoeAk5AeBOI6tE4/RwnXzvo0AC
erGq2GSWZySXfaVgyCnzWFcZT5q0EiJP90qHvo1hh3UbuG4L6/ZGJNtqlm9qVWw9
7cvVjBAcBFRAdcQMZ3d8tnSUqOOgct6X5u5NPHzF8GQ71IYcqFz/D5K6LyqQ/k2F
oa52JyyXtVntwCxG5l6bg0e6MDEvCfj4P6ThT6dr7KmiN1UAyXyjbTdqcRLilCJN
VmiwGi9BdSGmYEYTyhvNjtwaOQ==
-----END CERTIFICATE-----