Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/fd479964a87dfa089478061ff10fdcf352c0004a.roa
File:                     fd479964a87dfa089478061ff10fdcf352c0004a.roa (raw, json)
Hash identifier:          2xc2eDOpdb/NLrxXHHMWpf6LNDxwrfuQhvQSqEkcZn0=
Subject key identifier:   70:38:5E:31:92:E3:C3:3A:61:5D:D3:85:10:B1:59:37:A9:1C:54:DD
Certificate issuer:       /CN=a5dbc03364e9394bad095f89989ac67e2c05347f
Certificate serial:       0CDDC2
Authority key identifier: 77:EE:86:C6:68:E8:84:1B:25:51:9B:C4:B2:A2:FB:C9:49:BC:F8:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5dbc03364e9394bad095f89989ac67e2c05347f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/fd479964a87dfa089478061ff10fdcf352c0004a.roa
Signing time:             Wed 24 Mar 2021 14:30:14 +0000
ROA not before:           Wed 24 Mar 2021 14:30:14 +0000
ROA not after:            Tue 24 Mar 2026 14:30:14 +0000
asID:                     270021
IP address blocks:        45.161.168.0/22 maxlen: 24
                          2803:eea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843202 (0xcddc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5dbc03364e9394bad095f89989ac67e2c05347f
        Validity
            Not Before: Mar 24 14:30:14 2021 GMT
            Not After : Mar 24 14:30:14 2026 GMT
        Subject: CN=fd479964a87dfa089478061ff10fdcf352c0004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:e3:0d:c9:03:8a:78:1b:2c:ac:86:65:90:
                    9a:74:3d:8c:5f:c5:17:fa:ab:0c:54:b2:bf:a7:90:
                    43:4e:ac:d6:db:b9:09:cc:6e:15:c3:6c:e8:28:f1:
                    a4:c5:e7:76:3c:ab:8d:69:e1:87:82:9b:38:31:e7:
                    13:a1:f2:83:b5:ad:05:90:bf:df:31:ef:64:7f:8e:
                    85:cc:fc:c2:f5:c1:c6:53:3d:04:4e:94:a4:90:bb:
                    a0:29:00:fc:0a:09:6e:6d:5f:ff:a6:9b:cb:55:9b:
                    57:3c:0b:bd:af:0b:a7:b0:c6:83:80:55:7f:a2:7e:
                    7d:85:88:8b:d8:e1:a3:7a:99:f3:43:3c:e4:e1:00:
                    01:09:b0:08:da:0e:00:38:df:b8:eb:c5:7d:6b:d8:
                    1d:30:13:85:9e:81:47:03:51:84:e4:ef:f3:cb:26:
                    58:4f:13:dc:19:46:61:a4:e4:2f:e5:b2:88:84:dd:
                    c5:3e:2f:9e:64:87:37:3e:85:1e:36:b5:d4:8f:f7:
                    6a:00:e4:e3:ee:18:44:27:d1:07:42:31:81:72:9e:
                    c5:ea:e4:27:6c:c1:17:9c:e0:a8:76:37:fa:a7:75:
                    7b:d5:8b:21:45:9b:78:d0:5c:a5:c7:9d:6a:04:9e:
                    ee:8d:c9:72:87:6e:bd:e6:56:ca:f1:5d:cc:d8:5d:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:5E:31:92:E3:C3:3A:61:5D:D3:85:10:B1:59:37:A9:1C:54:DD
            X509v3 Authority Key Identifier:
                keyid:77:EE:86:C6:68:E8:84:1B:25:51:9B:C4:B2:A2:FB:C9:49:BC:F8:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5dbc03364e9394bad095f89989ac67e2c05347f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/fd479964a87dfa089478061ff10fdcf352c0004a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/a5dbc03364e9394bad095f89989ac67e2c05347f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.168.0/22
                IPv6:
                  2803:eea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:1b:ca:ef:d2:99:4d:cb:53:e5:10:6f:ee:85:98:be:4b:
         58:5d:3e:07:ab:88:30:d4:26:67:6d:64:e8:97:de:f6:06:00:
         f8:8b:17:fb:64:8a:69:e7:13:17:9d:84:e3:4f:11:ad:d6:c1:
         01:3d:59:91:ea:16:ec:b5:2b:00:d5:32:8c:b0:c3:be:65:01:
         42:95:8b:7d:a1:cf:41:ec:1c:da:06:6a:5f:c6:df:ff:57:59:
         b0:3f:d7:9e:83:8b:9e:86:81:fc:f6:e3:24:c4:ae:7b:3f:a4:
         6e:40:93:66:ba:b7:71:cd:be:10:b6:97:43:b8:99:2c:53:eb:
         d4:37:0a:68:81:41:d4:27:3e:73:95:04:f1:0d:84:2d:dd:f9:
         32:22:77:9d:bf:12:0a:8f:4b:bd:6b:c9:b5:60:f1:10:77:dc:
         df:8b:55:cf:8f:e3:36:b9:f2:35:4e:f1:1d:86:0d:d0:8f:a9:
         db:18:97:d1:1e:5f:83:87:d2:84:f5:ee:51:b8:ce:f2:88:73:
         5f:11:97:c5:37:70:62:6e:c9:c2:f6:49:29:e9:56:9f:bf:76:
         17:b1:6b:dc:49:97:7d:20:de:94:37:2b:7a:68:85:75:d3:84:
         1b:12:e7:a8:95:2a:04:5d:b3:96:56:87:e5:7d:40:ae:5c:2e:
         8e:52:25:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDN3CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
ZGJjMDMzNjRlOTM5NGJhZDA5NWY4OTk4OWFjNjdlMmMwNTM0N2YwHhcNMjEwMzI0
MTQzMDE0WhcNMjYwMzI0MTQzMDE0WjAzMTEwLwYDVQQDEyhmZDQ3OTk2NGE4N2Rm
YTA4OTQ3ODA2MWZmMTBmZGNmMzUyYzAwMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArn7jDckDingbLKyGZZCadD2MX8UX+qsMVLK/p5BDTqzW27kJ
zG4Vw2zoKPGkxed2PKuNaeGHgps4MecTofKDta0FkL/fMe9kf46FzPzC9cHGUz0E
TpSkkLugKQD8CglubV//ppvLVZtXPAu9rwunsMaDgFV/on59hYiL2OGjepnzQzzk
4QABCbAI2g4AON+468V9a9gdMBOFnoFHA1GE5O/zyyZYTxPcGUZhpOQv5bKIhN3F
Pi+eZIc3PoUeNrXUj/dqAOTj7hhEJ9EHQjGBcp7F6uQnbMEXnOCodjf6p3V71Ysh
RZt40Fylx51qBJ7ujclyh2695lbK8V3M2F2q8QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHA4XjGS48M6YV3ThRCxWTepHFTdMB8GA1UdIwQYMBaAFHfuhsZo6IQbJVGb
xLKi+8lJvPitMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYmMw
MzM2NGU5Mzk0YmFkMDk1Zjg5OTg5YWM2N2UyYzA1MzQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTZlMGJkNDMtYmI2Zi00NzhmLTkwNmEtZWY4NzQy
NzI3YWU2L2ZkNDc5OTY0YTg3ZGZhMDg5NDc4MDYxZmYxMGZkY2YzNTJjMDAwNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNmUwYmQ0My1iYjZmLTQ3OGYtOTA2YS1lZjg3
NDI3MjdhZTYvYTVkYmMwMzM2NGU5Mzk0YmFkMDk1Zjg5OTg5YWM2N2UyYzA1MzQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2hqDANBAIAAjAHAwUAKAPuoDANBgkqhkiG9w0BAQsFAAOC
AQEAHxgbyu/SmU3LU+UQb+6FmL5LWF0+B6uIMNQmZ21k6Jfe9gYA+IsX+2SKaecT
F52E408RrdbBAT1ZkeoW7LUrANUyjLDDvmUBQpWLfaHPQewc2gZqX8bf/1dZsD/X
noOLnoaB/PbjJMSuez+kbkCTZrq3cc2+ELaXQ7iZLFPr1DcKaIFB1Cc+c5UE8Q2E
Ld35MiJ3nb8SCo9LvWvJtWDxEHfc34tVz4/jNrnyNU7xHYYN0I+p2xiX0R5fg4fS
hPXuUbjO8ohzXxGXxTdwYm7JwvZJKelWn792F7Fr3EmXfSDelDcremiFddOEGxLn
qJUqBF2zllaH5X1ArlwujlIlSQ==
-----END CERTIFICATE-----