Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa
File:                     46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa (raw, json)
Hash identifier:          ycWuSQJzAYEKoCEy22cvx6DCRWw/1O2PCvTH5XyBhvo=
Subject key identifier:   1A:AE:98:2B:A3:78:70:58:4C:DA:DC:C3:11:02:C7:4B:FA:E9:70:93
Certificate issuer:       /CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
Certificate serial:       0BBDAA
Authority key identifier: 29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa
Signing time:             Wed 24 Mar 2021 14:40:11 +0000
ROA not before:           Wed 24 Mar 2021 14:40:11 +0000
ROA not after:            Tue 24 Mar 2026 14:40:11 +0000
asID:                     266894
IP address blocks:        45.161.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769450 (0xbbdaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
        Validity
            Not Before: Mar 24 14:40:11 2021 GMT
            Not After : Mar 24 14:40:11 2026 GMT
        Subject: CN=46cad6f1e5c56a8feef5373c5e1ceb5771539c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:95:61:d6:c9:1c:22:05:43:3c:e7:7f:50:
                    8f:c8:0d:b0:98:94:f9:79:2e:5b:f1:e5:c6:3c:24:
                    36:bc:38:44:9d:bb:ec:e4:ed:52:a0:ae:4c:61:96:
                    17:9b:dc:f8:58:ba:07:8a:ba:26:3e:36:5c:6b:18:
                    8e:da:07:92:76:e1:d0:80:cb:f5:c8:e0:1c:cc:d3:
                    91:23:6f:63:4d:18:f4:90:42:88:f3:93:3c:d9:9e:
                    2a:40:bd:60:63:2e:de:a9:f0:a7:1d:1b:53:50:5a:
                    84:4a:7f:b6:b8:c3:29:a8:3d:0e:60:9b:1e:4f:07:
                    12:49:fa:9a:af:2f:45:75:e6:7d:ee:f0:39:a2:1a:
                    4a:01:6f:47:d7:9f:83:79:ea:c1:be:a1:fc:43:6b:
                    c1:ae:40:1f:d0:3e:a4:74:d8:dd:e4:9a:0d:91:4f:
                    27:44:55:15:6a:69:7c:dd:7b:07:b4:4a:73:b2:66:
                    c5:95:a0:e7:33:05:56:d8:18:7a:a8:12:ef:92:dc:
                    a5:1f:eb:98:7f:e6:11:41:de:9f:43:2d:96:6a:3a:
                    39:6a:41:ac:d3:d1:b7:e7:9b:cf:85:62:7a:b3:f0:
                    14:17:e8:56:9b:4b:08:cc:ba:4a:13:59:c3:58:74:
                    f0:9e:8f:7f:6f:40:1a:db:33:b9:a6:47:b9:4c:ea:
                    4d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:98:2B:A3:78:70:58:4C:DA:DC:C3:11:02:C7:4B:FA:E9:70:93
            X509v3 Authority Key Identifier:
                keyid:29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/46cad6f1e5c56a8feef5373c5e1ceb5771539c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:4f:7b:ff:c8:54:0f:76:a9:d1:3e:97:e3:19:a9:55:f9:
         7a:6d:bf:04:41:82:eb:c3:94:d9:61:aa:b7:a7:59:a5:df:fe:
         a6:be:c1:92:90:be:0e:a8:67:a8:60:52:1f:8c:f6:a9:9f:ed:
         cd:c4:bd:17:6d:d5:02:17:59:2a:d7:d8:13:78:73:44:29:2f:
         e3:ad:12:bb:5f:0a:38:64:19:c1:58:0a:cf:ed:90:9c:b6:ed:
         15:d5:92:af:a9:95:08:fc:e9:3a:ec:6c:6e:d2:51:3c:7c:5d:
         a7:34:7a:fb:1c:12:1e:02:77:76:12:75:15:71:9b:64:68:e7:
         a6:1c:31:ee:da:33:2d:67:95:be:81:c0:38:d7:2f:f7:ba:59:
         f2:09:eb:02:93:0c:e9:4a:8b:75:24:46:4d:1b:fe:a1:af:6b:
         e3:fd:45:e5:16:ed:b4:63:5f:af:9e:81:6c:de:01:f9:fc:5a:
         8b:05:21:a5:b3:7b:41:36:e6:97:fa:dd:1c:fa:ce:40:90:0f:
         f0:7b:d8:68:a0:ee:37:f1:e3:f3:ee:ee:4e:4b:ad:6a:95:73:
         ea:94:34:e0:e9:c9:dd:08:63:54:be:af:1b:c5:84:9f:5a:1f:
         ce:45:92:82:68:ac:eb:0b:c7:03:dd:1e:00:e6:e2:ef:c7:2b:
         13:b9:54:bd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC72qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
OWQzYjJlMTRkYzYxYjE1ZGQ1ZTM2NDViYTU3YzExNDU1Zjk4NzYwHhcNMjEwMzI0
MTQ0MDExWhcNMjYwMzI0MTQ0MDExWjAzMTEwLwYDVQQDEyg0NmNhZDZmMWU1YzU2
YThmZWVmNTM3M2M1ZTFjZWI1NzcxNTM5YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkTeVYdbJHCIFQzznf1CPyA2wmJT5eS5b8eXGPCQ2vDhEnbvs
5O1SoK5MYZYXm9z4WLoHiromPjZcaxiO2geSduHQgMv1yOAczNORI29jTRj0kEKI
85M82Z4qQL1gYy7eqfCnHRtTUFqESn+2uMMpqD0OYJseTwcSSfqary9FdeZ97vA5
ohpKAW9H15+DeerBvqH8Q2vBrkAf0D6kdNjd5JoNkU8nRFUVaml83XsHtEpzsmbF
laDnMwVW2Bh6qBLvktylH+uYf+YRQd6fQy2Wajo5akGs09G355vPhWJ6s/AUF+hW
m0sIzLpKE1nDWHTwno9/b0Aa2zO5pke5TOpN1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBqumCujeHBYTNrcwxECx0v66XCTMB8GA1UdIwQYMBaAFClDub9cQgME2r5p
5QrmyQHiX+msMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODg5ZDNi
MmUxNGRjNjFiMTVkZDVlMzY0NWJhNTdjMTE0NTVmOTg3Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjFiZmIwMmQtZWQyZi00OTgyLTgzMmYtMWFmOGQ4
N2VhN2IwLzQ2Y2FkNmYxZTVjNTZhOGZlZWY1MzczYzVlMWNlYjU3NzE1MzljMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMWJmYjAyZC1lZDJmLTQ5ODItODMyZi0xYWY4
ZDg3ZWE3YjAvODg5ZDNiMmUxNGRjNjFiMTVkZDVlMzY0NWJhNTdjMTE0NTVmOTg3
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2hIDANBgkqhkiG9w0BAQsFAAOCAQEAKHtPe//IVA92qdE+
l+MZqVX5em2/BEGC68OU2WGqt6dZpd/+pr7BkpC+DqhnqGBSH4z2qZ/tzcS9F23V
AhdZKtfYE3hzRCkv460Su18KOGQZwVgKz+2QnLbtFdWSr6mVCPzpOuxsbtJRPHxd
pzR6+xwSHgJ3dhJ1FXGbZGjnphwx7tozLWeVvoHAONcv97pZ8gnrApMM6UqLdSRG
TRv+oa9r4/1F5RbttGNfr56BbN4B+fxaiwUhpbN7QTbml/rdHPrOQJAP8HvYaKDu
N/Hj8+7uTkutapVz6pQ04OnJ3QhjVL6vG8WEn1ofzkWSgmis6wvHA90eAObi78cr
E7lUvQ==
-----END CERTIFICATE-----