Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/4a526d9616908d4b9a9badbaf8763bf4314ee2fb.roa
File:                     4a526d9616908d4b9a9badbaf8763bf4314ee2fb.roa (raw, json)
Hash identifier:          MCqyM4N8JwgtuEpq1SP2VCCZNiOHsiofrAuLZQ8ti3A=
Subject key identifier:   74:BF:4D:13:C0:49:68:EF:B1:BA:B2:EB:CF:2F:FC:9D:30:6E:C2:F2
Certificate issuer:       /CN=19bb457acda75f5283f608e48db8eea3b601f0a2
Certificate serial:       0C959B
Authority key identifier: 81:CB:FA:ED:CD:35:1D:A3:36:1A:0B:0B:15:FB:98:4D:52:A0:C6:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bb457acda75f5283f608e48db8eea3b601f0a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/4a526d9616908d4b9a9badbaf8763bf4314ee2fb.roa
Signing time:             Wed 24 Mar 2021 14:41:29 +0000
ROA not before:           Wed 24 Mar 2021 14:41:29 +0000
ROA not after:            Tue 24 Mar 2026 14:41:29 +0000
asID:                     267684
IP address blocks:        45.163.204.0/22 maxlen: 24
                          2803:dea0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824731 (0xc959b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb457acda75f5283f608e48db8eea3b601f0a2
        Validity
            Not Before: Mar 24 14:41:29 2021 GMT
            Not After : Mar 24 14:41:29 2026 GMT
        Subject: CN=4a526d9616908d4b9a9badbaf8763bf4314ee2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:69:42:91:93:04:ee:18:11:f3:e3:eb:d9:
                    6e:ee:42:04:59:3e:1a:74:13:b9:86:0e:f9:2a:e2:
                    d3:31:64:67:aa:d3:0f:78:8c:d2:fd:f8:20:dd:8a:
                    fc:33:4f:d5:76:9d:af:4e:df:61:3b:e0:42:7b:0a:
                    c7:cf:8b:2d:a0:17:fa:59:fa:f2:9b:54:6c:79:c5:
                    bc:3b:d3:7a:a7:01:38:e2:9e:b1:96:60:c4:96:31:
                    e4:1b:ce:ac:f5:70:d4:8d:fb:92:9f:9f:6a:c8:bd:
                    6b:4e:32:0b:25:6b:a6:9a:ac:55:08:a9:66:b2:15:
                    c0:fb:d5:37:8b:81:c7:78:0f:18:1c:34:63:b7:39:
                    18:c3:3b:d5:a6:8a:b3:f0:b9:36:41:11:f8:ee:7f:
                    b9:ae:08:1e:12:31:dd:10:5b:d0:9c:b6:13:6f:80:
                    6b:73:07:5a:22:03:ce:7b:48:7f:31:21:fd:55:d9:
                    b8:f0:27:69:43:df:b6:6b:33:36:bd:75:ba:27:bd:
                    dd:b4:d2:a0:4e:b2:f5:d3:e2:6f:44:e1:4c:d8:72:
                    e7:ca:69:99:50:6a:b7:8d:40:92:de:b4:5d:67:cb:
                    96:ae:e3:d0:19:7c:b7:bb:28:e0:bb:e3:04:32:4b:
                    65:5b:d9:04:82:08:71:ca:3b:40:9a:e0:a9:f9:05:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:4D:13:C0:49:68:EF:B1:BA:B2:EB:CF:2F:FC:9D:30:6E:C2:F2
            X509v3 Authority Key Identifier:
                keyid:81:CB:FA:ED:CD:35:1D:A3:36:1A:0B:0B:15:FB:98:4D:52:A0:C6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bb457acda75f5283f608e48db8eea3b601f0a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/4a526d9616908d4b9a9badbaf8763bf4314ee2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/159c705c-e3bd-4f1c-be9a-4dd47ee6f23a/19bb457acda75f5283f608e48db8eea3b601f0a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.204.0/22
                IPv6:
                  2803:dea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:0a:6e:6c:24:ee:fe:98:91:a3:2e:26:33:95:8d:86:95:
         78:9b:43:b3:73:cb:78:e1:a9:7e:cd:a3:12:8e:46:0a:43:9e:
         70:69:aa:07:db:f5:1d:60:4e:a5:ae:61:40:c4:bf:be:36:ac:
         48:06:51:68:bb:0e:6b:b0:14:41:7c:cc:41:d8:7d:18:e7:76:
         0b:0e:7a:76:5c:bb:43:34:a1:5c:9e:66:bf:52:46:31:fd:1a:
         72:4c:91:7b:2a:a3:e0:42:2e:d1:dc:36:ca:bc:d6:c2:13:e5:
         6c:30:4c:c4:14:ef:65:30:ff:f3:5f:28:92:3b:dc:dc:3b:cd:
         5f:99:e9:19:df:83:2e:3f:6b:97:47:60:50:f2:cd:7e:38:7d:
         65:71:f7:ba:5e:98:eb:3e:1b:27:36:84:e7:65:86:85:79:ff:
         d8:87:ad:2e:01:f9:3c:79:1e:e8:a3:98:53:56:7b:4c:b3:e5:
         17:22:06:fe:84:9a:bb:7e:b9:71:b1:a1:7c:f7:60:2d:b0:82:
         a3:7e:ed:3e:6a:98:8e:16:53:95:ee:36:88:a7:4a:4c:d2:1e:
         76:7f:f3:99:f8:7c:a8:e0:aa:87:e7:c3:f3:48:1e:db:28:94:
         7d:51:d3:87:de:09:4d:90:12:8b:74:89:98:90:05:ea:8c:d0:
         51:48:a8:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDJWbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE5
YmI0NTdhY2RhNzVmNTI4M2Y2MDhlNDhkYjhlZWEzYjYwMWYwYTIwHhcNMjEwMzI0
MTQ0MTI5WhcNMjYwMzI0MTQ0MTI5WjAzMTEwLwYDVQQDEyg0YTUyNmQ5NjE2OTA4
ZDRiOWE5YmFkYmFmODc2M2JmNDMxNGVlMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxk9pQpGTBO4YEfPj69lu7kIEWT4adBO5hg75KuLTMWRnqtMP
eIzS/fgg3Yr8M0/Vdp2vTt9hO+BCewrHz4stoBf6Wfrym1RsecW8O9N6pwE44p6x
lmDEljHkG86s9XDUjfuSn59qyL1rTjILJWummqxVCKlmshXA+9U3i4HHeA8YHDRj
tzkYwzvVpoqz8Lk2QRH47n+5rggeEjHdEFvQnLYTb4BrcwdaIgPOe0h/MSH9Vdm4
8CdpQ9+2azM2vXW6J73dtNKgTrL10+JvROFM2HLnymmZUGq3jUCS3rRdZ8uWruPQ
GXy3uyjgu+MEMktlW9kEgghxyjtAmuCp+QWZ9QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHS/TRPASWjvsbqy688v/J0wbsLyMB8GA1UdIwQYMBaAFIHL+u3NNR2jNhoL
CxX7mE1SoMarMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTliYjQ1
N2FjZGE3NWY1MjgzZjYwOGU0OGRiOGVlYTNiNjAxZjBhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTU5YzcwNWMtZTNiZC00ZjFjLWJlOWEtNGRkNDdl
ZTZmMjNhLzRhNTI2ZDk2MTY5MDhkNGI5YTliYWRiYWY4NzYzYmY0MzE0ZWUyZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNTljNzA1Yy1lM2JkLTRmMWMtYmU5YS00ZGQ0
N2VlNmYyM2EvMTliYjQ1N2FjZGE3NWY1MjgzZjYwOGU0OGRiOGVlYTNiNjAxZjBh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2jzDANBAIAAjAHAwUAKAPeoDANBgkqhkiG9w0BAQsFAAOC
AQEADKMKbmwk7v6YkaMuJjOVjYaVeJtDs3PLeOGpfs2jEo5GCkOecGmqB9v1HWBO
pa5hQMS/vjasSAZRaLsOa7AUQXzMQdh9GOd2Cw56dly7QzShXJ5mv1JGMf0ackyR
eyqj4EIu0dw2yrzWwhPlbDBMxBTvZTD/818okjvc3DvNX5npGd+DLj9rl0dgUPLN
fjh9ZXH3ul6Y6z4bJzaE52WGhXn/2IetLgH5PHke6KOYU1Z7TLPlFyIG/oSau365
cbGhfPdgLbCCo37tPmqYjhZTle42iKdKTNIedn/zmfh8qOCqh+fD80ge2yiUfVHT
h94JTZASi3SJmJAF6ozQUUiocw==
-----END CERTIFICATE-----