Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/a34fa451bbba668a6a59367c9c2a24adf3c34917.roa
File:                     a34fa451bbba668a6a59367c9c2a24adf3c34917.roa (raw, json)
Hash identifier:          qyFUy2pWhzsMJHJ6+kwPiZU06+G2VZxG6TPG6kZ7dAk=
Subject key identifier:   BC:B8:97:B6:7C:A5:46:F0:25:BF:49:33:AA:FA:3A:D0:74:7D:9E:1E
Certificate issuer:       /CN=477cbcab0219a0cea1fe864323f2777db756c459
Certificate serial:       044274
Authority key identifier: 0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/a34fa451bbba668a6a59367c9c2a24adf3c34917.roa
Signing time:             Wed 24 Mar 2021 14:30:30 +0000
ROA not before:           Wed 24 Mar 2021 14:30:30 +0000
ROA not after:            Tue 24 Mar 2026 14:30:30 +0000
asID:                     269916
IP address blocks:        45.191.188.0/22 maxlen: 24
                          2803:fce0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279156 (0x44274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477cbcab0219a0cea1fe864323f2777db756c459
        Validity
            Not Before: Mar 24 14:30:30 2021 GMT
            Not After : Mar 24 14:30:30 2026 GMT
        Subject: CN=a34fa451bbba668a6a59367c9c2a24adf3c34917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:67:0a:36:d9:db:9b:1f:76:2a:eb:c7:f4:
                    c9:08:74:40:cb:d2:54:14:22:28:5d:15:7b:7f:21:
                    8e:28:4e:9d:e8:9c:f3:0b:55:5f:cf:64:ac:bf:56:
                    48:b8:61:b3:47:06:3f:54:9c:bf:98:75:63:c6:d3:
                    ea:3a:3e:ac:4f:c6:d8:c1:b2:67:f1:1e:3c:43:56:
                    6f:b2:d3:76:23:2d:b7:df:7a:c1:36:6a:07:a7:dd:
                    f5:60:db:32:ce:31:27:f5:3a:55:28:12:24:df:80:
                    d9:aa:b0:83:44:70:16:61:19:8f:95:4c:22:e2:09:
                    a0:a0:e3:7a:96:ae:1b:0a:ee:fd:a1:a1:cc:8a:77:
                    bf:09:fd:2a:f0:a2:1f:b1:49:a4:35:2d:67:26:ec:
                    72:54:ba:ef:9f:6d:3f:cb:a7:19:c5:2b:92:db:73:
                    24:e4:e3:69:79:b5:11:b4:78:0f:de:92:18:a3:ae:
                    82:c9:9f:5a:f3:d0:b2:c2:68:c3:11:b7:52:eb:26:
                    8f:9c:af:3d:57:c1:91:0f:c6:84:a4:6b:62:77:ce:
                    a7:04:34:14:79:4f:75:5c:cf:1e:4e:19:42:ad:e0:
                    03:5f:a8:dc:8b:2d:0c:81:c5:53:3b:9a:8b:f5:26:
                    fa:ce:4a:84:56:71:ec:2e:7d:3e:24:eb:c6:28:5a:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:97:B6:7C:A5:46:F0:25:BF:49:33:AA:FA:3A:D0:74:7D:9E:1E
            X509v3 Authority Key Identifier:
                keyid:0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/a34fa451bbba668a6a59367c9c2a24adf3c34917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/477cbcab0219a0cea1fe864323f2777db756c459.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.188.0/22
                IPv6:
                  2803:fce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:90:d7:7b:5b:26:4f:16:cc:a6:52:b6:35:e0:94:e9:4e:69:
         52:c7:7d:19:8b:54:e0:cb:65:ad:af:57:50:fc:56:e3:57:9d:
         53:79:c6:26:83:cb:bc:b3:08:f0:5f:ff:06:24:7c:26:5e:fa:
         99:4a:e1:02:3d:ff:18:c2:9d:46:35:0d:7e:a8:75:d9:8d:5a:
         41:3f:75:c3:d4:fa:c3:eb:3d:f1:01:4d:5f:b2:98:98:54:3e:
         a6:16:fa:1a:39:92:06:e3:fc:7f:30:72:2f:f1:81:2c:b8:87:
         7b:f8:d0:1c:36:b4:15:b4:9a:18:81:3d:62:97:d5:3c:4a:23:
         6d:14:a5:75:e0:d1:de:e5:5c:65:97:96:68:62:c2:f1:35:bf:
         69:0e:d8:ce:25:6e:1a:ce:68:d2:98:ca:28:89:d1:c3:f6:e1:
         c4:eb:19:b9:51:38:90:9a:62:00:71:be:3b:bb:3e:3d:6a:9f:
         ca:ff:e4:0e:39:25:2d:09:bb:2f:eb:e3:36:46:c1:9b:8a:3c:
         d8:7e:ce:71:59:25:42:94:ea:67:9e:16:06:f3:83:3b:fb:29:
         ba:9e:7c:de:25:a7:30:9a:e3:0b:02:49:01:85:56:5e:7a:3d:
         b3:5d:5d:d7:a1:ab:16:01:a6:3c:3e:4d:4a:58:1c:29:74:17:
         4a:39:3e:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBEJ0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
N2NiY2FiMDIxOWEwY2VhMWZlODY0MzIzZjI3NzdkYjc1NmM0NTkwHhcNMjEwMzI0
MTQzMDMwWhcNMjYwMzI0MTQzMDMwWjAzMTEwLwYDVQQDEyhhMzRmYTQ1MWJiYmE2
NjhhNmE1OTM2N2M5YzJhMjRhZGYzYzM0OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqJpnCjbZ25sfdirrx/TJCHRAy9JUFCIoXRV7fyGOKE6d6Jzz
C1Vfz2Ssv1ZIuGGzRwY/VJy/mHVjxtPqOj6sT8bYwbJn8R48Q1ZvstN2Iy2333rB
NmoHp931YNsyzjEn9TpVKBIk34DZqrCDRHAWYRmPlUwi4gmgoON6lq4bCu79oaHM
ine/Cf0q8KIfsUmkNS1nJuxyVLrvn20/y6cZxSuS23Mk5ONpebURtHgP3pIYo66C
yZ9a89CywmjDEbdS6yaPnK89V8GRD8aEpGtid86nBDQUeU91XM8eThlCreADX6jc
iy0MgcVTO5qL9Sb6zkqEVnHsLn0+JOvGKFrmQwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFLy4l7Z8pUbwJb9JM6r6OtB0fZ4eMB8GA1UdIwQYMBaAFAqOk/A3ZcvrJLz0
s1isQCK0Ta1/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDc3Y2Jj
YWIwMjE5YTBjZWExZmU4NjQzMjNmMjc3N2RiNzU2YzQ1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmMyOGUzZmYtZjczMi00NmFmLTgxZTQtYTBlNThm
YmQ3NGEwL2EzNGZhNDUxYmJiYTY2OGE2YTU5MzY3YzljMmEyNGFkZjNjMzQ5MTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYzI4ZTNmZi1mNzMyLTQ2YWYtODFlNC1hMGU1
OGZiZDc0YTAvNDc3Y2JjYWIwMjE5YTBjZWExZmU4NjQzMjNmMjc3N2RiNzU2YzQ1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2/vDANBAIAAjAHAwUAKAP84DANBgkqhkiG9w0BAQsFAAOC
AQEAaJDXe1smTxbMplK2NeCU6U5pUsd9GYtU4Mtlra9XUPxW41edU3nGJoPLvLMI
8F//BiR8Jl76mUrhAj3/GMKdRjUNfqh12Y1aQT91w9T6w+s98QFNX7KYmFQ+phb6
GjmSBuP8fzByL/GBLLiHe/jQHDa0FbSaGIE9YpfVPEojbRSldeDR3uVcZZeWaGLC
8TW/aQ7YziVuGs5o0pjKKInRw/bhxOsZuVE4kJpiAHG+O7s+PWqfyv/kDjklLQm7
L+vjNkbBm4o82H7OcVklQpTqZ54WBvODO/spup583iWnMJrjCwJJAYVWXno9s11d
16GrFgGmPD5NSlgcKXQXSjk+jQ==
-----END CERTIFICATE-----