Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/092c98dcfcbccf9917d19ad871312dc518b44ceb.roa
File:                     092c98dcfcbccf9917d19ad871312dc518b44ceb.roa (raw, json)
Hash identifier:          aWFOlfPjfjr7T+LJLjxhEoNw6+z51cM1m1rKk4LommE=
Subject key identifier:   DE:ED:61:C7:7F:1A:73:13:B1:5A:A0:CF:52:E9:A8:99:EF:D0:6A:E6
Certificate issuer:       /CN=6f5cefcbc57f263d526a772463f9ccfb9ba83615
Certificate serial:       10B1B1
Authority key identifier: F7:AD:7A:29:AD:05:42:75:F9:C8:C6:44:2B:A6:91:D6:BD:67:2D:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f5cefcbc57f263d526a772463f9ccfb9ba83615.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/092c98dcfcbccf9917d19ad871312dc518b44ceb.roa
Signing time:             Thu 30 Sep 2021 05:19:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     14754
IP address blocks:        45.168.196.0/22 maxlen: 24
                          2801:18:800::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094065 (0x10b1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5cefcbc57f263d526a772463f9ccfb9ba83615
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=092c98dcfcbccf9917d19ad871312dc518b44ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:1d:5b:d7:de:1e:e1:06:2d:68:2c:30:f7:
                    7b:5f:4d:7b:d5:2d:fd:10:61:b9:af:16:77:f1:fe:
                    e7:c7:8a:bf:36:86:a8:93:9f:3f:16:c0:63:4f:7d:
                    65:3d:b1:bf:56:11:51:c0:5b:07:db:6a:bd:8a:28:
                    b7:33:68:f2:47:48:2d:80:e7:c1:43:27:84:4a:51:
                    3e:bd:e9:0c:73:f1:cb:2a:f9:2e:7f:29:12:41:97:
                    cd:38:01:6e:05:29:c6:bf:04:66:63:9e:87:97:d4:
                    e3:5e:c3:0b:28:0c:2c:3a:f2:30:3c:1f:59:4a:10:
                    96:a2:93:08:29:e4:e5:1c:be:df:ef:bc:81:67:0a:
                    86:61:be:18:80:b5:c6:09:a6:ec:34:ca:62:74:e5:
                    9a:21:1a:d7:5a:85:8e:31:2d:13:2d:c2:18:1f:ff:
                    ba:38:8d:de:e0:63:e1:ca:16:66:74:c4:63:f3:08:
                    08:d7:96:e9:55:12:dc:81:2a:11:88:a3:9b:06:b7:
                    b6:91:f5:5a:fd:56:a2:8b:f5:28:25:d5:bf:ea:88:
                    16:9a:4b:79:f9:11:00:e5:ba:99:27:38:57:66:96:
                    9c:2c:5c:10:d2:a4:2f:5e:ac:de:75:c7:d9:8e:84:
                    cc:34:1f:70:f2:cd:4e:d9:b0:3e:ea:d9:3e:bc:20:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:61:C7:7F:1A:73:13:B1:5A:A0:CF:52:E9:A8:99:EF:D0:6A:E6
            X509v3 Authority Key Identifier:
                keyid:F7:AD:7A:29:AD:05:42:75:F9:C8:C6:44:2B:A6:91:D6:BD:67:2D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f5cefcbc57f263d526a772463f9ccfb9ba83615.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/092c98dcfcbccf9917d19ad871312dc518b44ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/6f5cefcbc57f263d526a772463f9ccfb9ba83615.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.196.0/22
                IPv6:
                  2801:18:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:f2:e6:07:95:2f:3e:26:ad:8b:61:ed:3f:12:7e:44:63:
         13:06:ce:fc:84:53:55:bb:ae:8c:59:6b:28:98:ae:97:28:0c:
         4d:a5:4a:5d:fb:dc:4c:14:f3:36:f3:96:6e:40:73:f6:a2:f4:
         2c:d1:25:5c:d8:8d:03:81:57:bf:19:a5:9c:05:70:aa:ee:ed:
         7f:68:8c:68:38:9a:e9:e1:e5:d7:f8:98:50:a0:06:1f:37:e6:
         7e:55:d0:45:75:5b:c9:aa:76:1c:b6:32:11:52:c7:8c:86:dd:
         b1:44:a2:e0:08:e9:dc:c8:aa:18:14:cc:79:8a:b8:21:24:eb:
         89:d5:1f:e8:60:7e:d1:91:81:f5:01:58:2a:36:ad:8c:9d:45:
         1a:46:e2:51:98:af:97:fe:49:c4:a3:63:63:9a:5e:df:4c:74:
         82:4c:64:76:b6:4f:6c:89:a1:05:df:64:aa:84:cc:46:69:16:
         63:30:d6:24:b6:63:5c:5c:b2:c1:8e:04:36:53:6c:21:c7:1f:
         5a:5c:b1:8b:02:84:db:d8:8e:b7:f9:06:10:64:74:bc:d7:d2:
         76:82:62:5a:7b:22:3c:c9:bb:b4:c4:08:a9:24:0f:1c:42:21:
         a7:34:2c:70:51:d9:ec:ea:c3:41:5c:d4:1e:fb:0f:68:15:35:
         9d:ab:09:b4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDELGxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZm
NWNlZmNiYzU3ZjI2M2Q1MjZhNzcyNDYzZjljY2ZiOWJhODM2MTUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygwOTJjOThkY2ZjYmNj
Zjk5MTdkMTlhZDg3MTMxMmRjNTE4YjQ0Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqrAdW9feHuEGLWgsMPd7X0171S39EGG5rxZ38f7nx4q/Noao
k58/FsBjT31lPbG/VhFRwFsH22q9iii3M2jyR0gtgOfBQyeESlE+vekMc/HLKvku
fykSQZfNOAFuBSnGvwRmY56Hl9TjXsMLKAwsOvIwPB9ZShCWopMIKeTlHL7f77yB
ZwqGYb4YgLXGCabsNMpidOWaIRrXWoWOMS0TLcIYH/+6OI3e4GPhyhZmdMRj8wgI
15bpVRLcgSoRiKObBre2kfVa/Vaii/UoJdW/6ogWmkt5+REA5bqZJzhXZpacLFwQ
0qQvXqzedcfZjoTMNB9w8s1O2bA+6tk+vCBB6wIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFN7tYcd/GnMTsVqgz1LpqJnv0GrmMB8GA1UdIwQYMBaAFPeteimtBUJ1+cjG
RCumkda9Zy0OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmY1Y2Vm
Y2JjNTdmMjYzZDUyNmE3NzI0NjNmOWNjZmI5YmE4MzYxNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGM2ZGExZTktNzg2Ni00OGQ4LThiNmMtM2E4NWFk
NjI2NTgwLzA5MmM5OGRjZmNiY2NmOTkxN2QxOWFkODcxMzEyZGM1MThiNDRjZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYzZkYTFlOS03ODY2LTQ4ZDgtOGI2Yy0zYTg1
YWQ2MjY1ODAvNmY1Y2VmY2JjNTdmMjYzZDUyNmE3NzI0NjNmOWNjZmI5YmE4MzYx
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAi2oxDAPBAIAAjAJAwcAKAEAGAgAMA0GCSqGSIb3DQEBCwUA
A4IBAQAx8vLmB5UvPiati2HtPxJ+RGMTBs78hFNVu66MWWsomK6XKAxNpUpd+9xM
FPM285ZuQHP2ovQs0SVc2I0DgVe/GaWcBXCq7u1/aIxoOJrp4eXX+JhQoAYfN+Z+
VdBFdVvJqnYctjIRUseMht2xRKLgCOncyKoYFMx5irghJOuJ1R/oYH7RkYH1AVgq
Nq2MnUUaRuJRmK+X/knEo2Njml7fTHSCTGR2tk9siaEF32SqhMxGaRZjMNYktmNc
XLLBjgQ2U2whxx9aXLGLAoTb2I63+QYQZHS819J2gmJaeyI8ybu0xAipJA8cQiGn
NCxwUdns6sNBXNQe+w9oFTWdqwm0
-----END CERTIFICATE-----