Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/f6cb9e6fe570040c2b706769b64b17afe389af44.roa
File:                     f6cb9e6fe570040c2b706769b64b17afe389af44.roa (raw, json)
Hash identifier:          UDcDSIQRrUgY+EL8h1Kq08F+e3DMSewHqbYTg/3GEm4=
Subject key identifier:   F8:4C:32:B3:3B:20:7B:E0:77:39:2D:EA:F0:AA:BF:AA:B3:80:45:6F
Certificate issuer:       /CN=c619c73c049b2f8bbf3acabea01c01e066fd9b63
Certificate serial:       033FE1
Authority key identifier: 28:7C:F6:8F:66:1F:D1:01:E0:BA:CE:16:60:D3:CE:31:81:A8:8F:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c619c73c049b2f8bbf3acabea01c01e066fd9b63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/f6cb9e6fe570040c2b706769b64b17afe389af44.roa
Signing time:             Wed 24 Mar 2021 14:31:27 +0000
ROA not before:           Wed 24 Mar 2021 14:31:27 +0000
ROA not after:            Tue 24 Mar 2026 14:31:27 +0000
asID:                     271797
IP address blocks:        45.224.100.0/22 maxlen: 24
                          2803:8010::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212961 (0x33fe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c619c73c049b2f8bbf3acabea01c01e066fd9b63
        Validity
            Not Before: Mar 24 14:31:27 2021 GMT
            Not After : Mar 24 14:31:27 2026 GMT
        Subject: CN=f6cb9e6fe570040c2b706769b64b17afe389af44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:9c:12:a4:ab:c7:ea:12:01:41:93:55:be:
                    da:ad:24:62:47:b3:c8:bc:eb:26:ff:6c:c8:2b:be:
                    9b:1b:84:33:25:e2:cf:29:45:51:a7:22:76:a9:a3:
                    2d:7c:21:f6:71:3e:b2:ad:9c:2d:cc:88:3b:a0:a5:
                    2f:49:c6:c1:70:2f:f4:63:3d:1f:40:7a:b4:17:e0:
                    73:3f:8a:b2:6c:75:28:32:3b:d1:9d:7f:ad:a8:f9:
                    06:78:01:4f:a3:a5:10:5a:8f:e5:50:a8:93:6c:1b:
                    79:ac:05:4d:90:54:26:ff:be:04:81:77:fa:bd:62:
                    17:1e:e1:ca:0e:68:17:25:72:9b:34:f2:fe:7a:af:
                    e6:b4:06:85:e9:c3:37:41:3b:d8:4e:9d:e9:17:bc:
                    8e:d9:2a:29:cb:a8:0b:0e:97:6c:57:fb:a4:b7:fb:
                    f7:58:02:b6:fe:47:b5:a4:67:aa:25:5b:37:de:10:
                    a3:d4:18:6a:36:6f:83:60:c4:48:ab:fd:b3:99:6f:
                    06:67:d8:49:b8:c4:3b:c3:93:d6:8f:c7:d5:62:23:
                    62:d7:4d:ca:93:c6:97:ed:6c:e6:da:9e:99:24:8d:
                    78:81:e3:91:40:9b:f7:78:a6:db:67:55:5d:fe:b4:
                    e1:74:fd:07:12:ca:de:f4:eb:18:cf:46:cb:da:d1:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:32:B3:3B:20:7B:E0:77:39:2D:EA:F0:AA:BF:AA:B3:80:45:6F
            X509v3 Authority Key Identifier:
                keyid:28:7C:F6:8F:66:1F:D1:01:E0:BA:CE:16:60:D3:CE:31:81:A8:8F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c619c73c049b2f8bbf3acabea01c01e066fd9b63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/f6cb9e6fe570040c2b706769b64b17afe389af44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/c619c73c049b2f8bbf3acabea01c01e066fd9b63.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.100.0/22
                IPv6:
                  2803:8010::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:97:16:69:d6:7e:f8:5b:43:4b:21:57:75:4d:9f:b3:34:38:
         fe:08:74:63:97:ca:11:16:7a:e1:83:67:c2:07:3f:27:b4:19:
         27:b6:e3:27:ff:7c:a7:7b:20:c4:2f:a3:6f:fc:a4:84:74:07:
         2e:e3:20:f0:20:de:ec:eb:2e:5c:a9:ab:f9:8f:f0:fd:65:bc:
         b5:19:73:6e:5d:14:fd:4b:23:30:85:9f:d8:aa:0a:96:ef:bf:
         64:28:ba:c9:c5:de:33:14:44:4d:50:ce:09:82:e3:69:16:6b:
         67:92:9a:25:b5:ac:54:38:19:c2:d3:80:97:ed:b5:e0:17:48:
         6e:d7:be:ea:49:f3:f3:10:e8:73:87:9c:e7:3c:a9:43:0b:1b:
         bc:33:ed:b5:5b:9d:96:fc:08:6f:63:52:b3:e2:03:c3:0b:3a:
         ca:35:a4:e3:77:94:76:f0:64:36:20:b3:92:2a:58:2d:73:cb:
         3d:10:b7:b1:23:c6:2e:34:ec:b5:a9:9a:71:49:2e:cd:69:75:
         41:a3:a1:7f:2d:14:21:33:44:bb:dc:66:f4:10:30:d7:4e:2e:
         ed:73:b3:ad:28:8a:e5:78:ae:7b:c1:08:62:a4:4c:86:f4:61:
         d9:ee:59:68:d7:5b:cb:82:d3:ba:97:25:b3:6f:62:b9:5d:be:
         58:5f:94:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAz/hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
MTljNzNjMDQ5YjJmOGJiZjNhY2FiZWEwMWMwMWUwNjZmZDliNjMwHhcNMjEwMzI0
MTQzMTI3WhcNMjYwMzI0MTQzMTI3WjAzMTEwLwYDVQQDEyhmNmNiOWU2ZmU1NzAw
NDBjMmI3MDY3NjliNjRiMTdhZmUzODlhZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmAicEqSrx+oSAUGTVb7arSRiR7PIvOsm/2zIK76bG4QzJeLP
KUVRpyJ2qaMtfCH2cT6yrZwtzIg7oKUvScbBcC/0Yz0fQHq0F+BzP4qybHUoMjvR
nX+tqPkGeAFPo6UQWo/lUKiTbBt5rAVNkFQm/74EgXf6vWIXHuHKDmgXJXKbNPL+
eq/mtAaF6cM3QTvYTp3pF7yO2Sopy6gLDpdsV/ukt/v3WAK2/ke1pGeqJVs33hCj
1BhqNm+DYMRIq/2zmW8GZ9hJuMQ7w5PWj8fVYiNi103Kk8aX7Wzm2p6ZJI14geOR
QJv3eKbbZ1Vd/rThdP0HEsre9OsYz0bL2tGyFQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPhMMrM7IHvgdzkt6vCqv6qzgEVvMB8GA1UdIwQYMBaAFCh89o9mH9EB4LrO
FmDTzjGBqI+xMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzYxOWM3
M2MwNDliMmY4YmJmM2FjYWJlYTAxYzAxZTA2NmZkOWI2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWE2NmNjYTEtZTc0Zi00ZGM5LWI3ZGMtYzQ0NjNm
MjE3ZjAzL2Y2Y2I5ZTZmZTU3MDA0MGMyYjcwNjc2OWI2NGIxN2FmZTM4OWFmNDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTY2Y2NhMS1lNzRmLTRkYzktYjdkYy1jNDQ2
M2YyMTdmMDMvYzYxOWM3M2MwNDliMmY4YmJmM2FjYWJlYTAxYzAxZTA2NmZkOWI2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3gZDANBAIAAjAHAwUAKAOAEDANBgkqhkiG9w0BAQsFAAOC
AQEAgpcWadZ++FtDSyFXdU2fszQ4/gh0Y5fKERZ64YNnwgc/J7QZJ7bjJ/98p3sg
xC+jb/ykhHQHLuMg8CDe7OsuXKmr+Y/w/WW8tRlzbl0U/UsjMIWf2KoKlu+/ZCi6
ycXeMxRETVDOCYLjaRZrZ5KaJbWsVDgZwtOAl+214BdIbte+6knz8xDoc4ec5zyp
QwsbvDPttVudlvwIb2NSs+IDwws6yjWk43eUdvBkNiCzkipYLXPLPRC3sSPGLjTs
tamacUkuzWl1QaOhfy0UITNEu9xm9BAw104u7XOzrSiK5Xiue8EIYqRMhvRh2e5Z
aNdby4LTupcls29iuV2+WF+Umw==
-----END CERTIFICATE-----