Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/286a706f5ca756dc03cf7df2716a8bdf7266a216.roa
File:                     286a706f5ca756dc03cf7df2716a8bdf7266a216.roa (raw, json)
Hash identifier:          000KUkBnNc4F7AIRyDhvCCl4Y9a8CbGyyBPXsgHk1FY=
Subject key identifier:   78:B2:CE:45:49:3D:F7:B7:50:52:97:F6:B9:E9:E0:7E:B2:93:E9:B5
Certificate issuer:       /CN=bd14ab01086637c7b6f31d7a05d0d21a056c4687
Certificate serial:       0BB610
Authority key identifier: BF:7D:DC:D1:EC:24:93:BD:20:72:66:DA:27:94:71:D8:95:A9:E3:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd14ab01086637c7b6f31d7a05d0d21a056c4687.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/286a706f5ca756dc03cf7df2716a8bdf7266a216.roa
Signing time:             Wed 24 Mar 2021 14:32:03 +0000
ROA not before:           Wed 24 Mar 2021 14:32:03 +0000
ROA not after:            Tue 24 Mar 2026 14:32:03 +0000
asID:                     266854
IP address blocks:        45.239.60.0/22 maxlen: 22
                          2803:62a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767504 (0xbb610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd14ab01086637c7b6f31d7a05d0d21a056c4687
        Validity
            Not Before: Mar 24 14:32:03 2021 GMT
            Not After : Mar 24 14:32:03 2026 GMT
        Subject: CN=286a706f5ca756dc03cf7df2716a8bdf7266a216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:72:41:74:5f:6d:2a:ac:b6:00:4b:e8:c0:
                    f2:71:d1:e8:09:88:06:45:c2:eb:35:11:8c:6b:2a:
                    47:08:87:83:c6:a9:8d:de:cb:bb:ca:69:d6:a2:15:
                    bc:3c:df:95:bc:d2:a7:7c:46:2b:9d:ef:e7:5d:e7:
                    8e:2a:13:0a:61:87:5a:e1:c8:fc:7a:11:93:0c:38:
                    86:92:9b:99:42:12:c9:2a:86:cf:70:a5:75:5e:4e:
                    9c:82:66:03:85:65:4f:31:0b:b2:23:44:2f:02:39:
                    9b:b6:14:ed:52:e5:4a:1a:9b:cc:e9:9f:8d:01:44:
                    8c:18:69:15:b6:0a:b7:40:da:06:60:5c:a8:a6:c1:
                    dd:0e:69:99:6e:49:81:93:05:32:5d:88:60:fb:18:
                    fc:74:30:4c:e0:57:10:4f:52:3a:c5:cf:8c:cd:e0:
                    c2:45:99:ed:5b:2c:38:fb:5d:ec:16:34:ea:d1:24:
                    56:e2:7d:e6:71:42:b2:ec:d4:4b:29:7a:f7:1c:5d:
                    44:50:0c:69:0b:91:ed:78:00:e4:a7:26:85:3a:5c:
                    34:7b:a5:c1:02:bb:b7:79:1b:06:52:ac:d4:28:d2:
                    58:bf:97:70:01:f4:15:b9:89:9e:7d:48:2c:90:13:
                    48:c8:81:d6:8d:db:01:fa:c2:9b:3c:fa:31:8b:6c:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:CE:45:49:3D:F7:B7:50:52:97:F6:B9:E9:E0:7E:B2:93:E9:B5
            X509v3 Authority Key Identifier:
                keyid:BF:7D:DC:D1:EC:24:93:BD:20:72:66:DA:27:94:71:D8:95:A9:E3:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd14ab01086637c7b6f31d7a05d0d21a056c4687.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/286a706f5ca756dc03cf7df2716a8bdf7266a216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/bd14ab01086637c7b6f31d7a05d0d21a056c4687.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.60.0/22
                IPv6:
                  2803:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:b6:02:ec:00:58:50:e6:91:e0:0b:c3:92:e0:81:97:c8:
         b3:5e:e1:64:b1:3d:a6:0d:c3:2d:5f:a9:34:8f:7e:26:de:d0:
         7a:93:82:a7:65:4c:72:6f:79:3a:9c:da:05:e2:80:d0:e3:7c:
         f6:97:17:3e:6d:36:76:00:c0:30:e6:7a:67:81:48:f0:e8:5c:
         19:77:97:81:d4:2a:72:60:af:00:1d:cc:26:4e:94:a1:4c:1a:
         18:3d:16:d7:55:54:11:75:1d:ac:d1:39:4a:b8:d7:ed:fa:02:
         76:f4:61:2b:96:82:52:f3:d3:21:32:7c:e7:92:67:3f:9b:d7:
         6c:d4:92:42:f9:8a:3b:87:2d:41:c3:44:08:0b:7a:6c:c6:7b:
         58:5d:a3:99:aa:41:4b:63:3a:18:af:3e:7b:b7:51:98:51:25:
         9b:30:a9:8e:36:cb:09:46:2c:81:a3:de:7f:05:74:15:6f:66:
         fc:79:b0:0f:36:0e:56:fb:c8:18:b7:7e:ff:22:b7:05:bf:ed:
         51:3d:a7:8d:ff:91:48:4c:57:59:f5:a2:e5:7c:7d:7c:bc:76:
         38:d8:98:8e:a3:24:4d:13:1d:ad:8f:d0:6c:07:8a:7f:08:26:
         c1:82:97:2c:74:58:ce:d5:0f:d1:00:7e:fc:88:31:73:50:17:
         7f:c0:d4:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC7YQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk
MTRhYjAxMDg2NjM3YzdiNmYzMWQ3YTA1ZDBkMjFhMDU2YzQ2ODcwHhcNMjEwMzI0
MTQzMjAzWhcNMjYwMzI0MTQzMjAzWjAzMTEwLwYDVQQDEygyODZhNzA2ZjVjYTc1
NmRjMDNjZjdkZjI3MTZhOGJkZjcyNjZhMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqiFyQXRfbSqstgBL6MDycdHoCYgGRcLrNRGMaypHCIeDxqmN
3su7ymnWohW8PN+VvNKnfEYrne/nXeeOKhMKYYda4cj8ehGTDDiGkpuZQhLJKobP
cKV1Xk6cgmYDhWVPMQuyI0QvAjmbthTtUuVKGpvM6Z+NAUSMGGkVtgq3QNoGYFyo
psHdDmmZbkmBkwUyXYhg+xj8dDBM4FcQT1I6xc+MzeDCRZntWyw4+13sFjTq0SRW
4n3mcUKy7NRLKXr3HF1EUAxpC5HteADkpyaFOlw0e6XBAru3eRsGUqzUKNJYv5dw
AfQVuYmefUgskBNIyIHWjdsB+sKbPPoxi2yG2QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHiyzkVJPfe3UFKX9rnp4H6yk+m1MB8GA1UdIwQYMBaAFL993NHsJJO9IHJm
2ieUcdiVqeNyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQxNGFi
MDEwODY2MzdjN2I2ZjMxZDdhMDVkMGQyMWEwNTZjNDY4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmQ0YmVjNTYtZTllYS00N2Q1LWI5NzMtNzY0YTU0
OWI1NTdjLzI4NmE3MDZmNWNhNzU2ZGMwM2NmN2RmMjcxNmE4YmRmNzI2NmEyMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZDRiZWM1Ni1lOWVhLTQ3ZDUtYjk3My03NjRh
NTQ5YjU1N2MvYmQxNGFiMDEwODY2MzdjN2I2ZjMxZDdhMDVkMGQyMWEwNTZjNDY4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3vPDANBAIAAjAHAwUAKANioDANBgkqhkiG9w0BAQsFAAOC
AQEAZ7q2AuwAWFDmkeALw5LggZfIs17hZLE9pg3DLV+pNI9+Jt7QepOCp2VMcm95
OpzaBeKA0ON89pcXPm02dgDAMOZ6Z4FI8OhcGXeXgdQqcmCvAB3MJk6UoUwaGD0W
11VUEXUdrNE5SrjX7foCdvRhK5aCUvPTITJ855JnP5vXbNSSQvmKO4ctQcNECAt6
bMZ7WF2jmapBS2M6GK8+e7dRmFElmzCpjjbLCUYsgaPefwV0FW9m/HmwDzYOVvvI
GLd+/yK3Bb/tUT2njf+RSExXWfWi5Xx9fLx2ONiYjqMkTRMdrY/QbAeKfwgmwYKX
LHRYztUP0QB+/Igxc1AXf8DU+w==
-----END CERTIFICATE-----