Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e2e105c-953e-4669-be01-b0af1a92650b/8ae5059acec61fbc0325f2374e8f1b75e3fb43e1.roa
File:                     8ae5059acec61fbc0325f2374e8f1b75e3fb43e1.roa (raw, json)
Hash identifier:          rIRGivx/ZnaBDQe2Oxu4x8FsAvOwxt41HUzxnfoVD6Y=
Subject key identifier:   8D:E4:D0:8F:E0:DB:12:21:67:14:C2:B8:36:4A:25:2F:E9:FF:34:0C
Certificate issuer:       /CN=f254b50d338f173800b13f79fd5c50d703713517
Certificate serial:       0287DB
Authority key identifier: 90:E5:81:7F:4D:B1:42:04:3A:AD:DA:DC:32:55:93:D7:73:EA:F6:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f254b50d338f173800b13f79fd5c50d703713517.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e2e105c-953e-4669-be01-b0af1a92650b/8ae5059acec61fbc0325f2374e8f1b75e3fb43e1.roa
Signing time:             Wed 24 Mar 2021 14:33:22 +0000
ROA not before:           Wed 24 Mar 2021 14:33:21 +0000
ROA not after:            Tue 24 Mar 2026 14:33:21 +0000
asID:                     271839
IP address blocks:        45.239.216.0/22 maxlen: 24
                          2803:3810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165851 (0x287db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f254b50d338f173800b13f79fd5c50d703713517
        Validity
            Not Before: Mar 24 14:33:21 2021 GMT
            Not After : Mar 24 14:33:21 2026 GMT
        Subject: CN=8ae5059acec61fbc0325f2374e8f1b75e3fb43e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:eb:ca:90:01:cc:9a:c8:ac:37:d1:68:83:
                    57:70:7b:88:13:88:a0:35:88:2b:58:3d:6d:3d:08:
                    b6:4b:96:63:c6:05:73:23:4b:f8:11:e7:ed:24:ad:
                    28:34:61:65:a7:f3:57:3c:06:f9:56:05:a9:0c:8b:
                    82:07:4a:c8:20:e9:7d:70:99:62:b3:de:2f:c3:fd:
                    0f:b1:bc:17:34:51:bc:84:75:84:8c:66:6f:96:41:
                    60:0e:55:5e:1f:e3:3e:c9:3b:12:3a:fb:8a:52:b9:
                    a3:6f:6f:df:bb:aa:bf:db:b1:e5:99:41:7e:bd:e4:
                    36:0e:71:14:88:d3:64:bb:fb:3f:62:f4:77:04:af:
                    86:c6:b9:c4:fd:34:7c:29:9c:ad:e1:ba:03:c3:15:
                    e1:12:1e:0c:a2:9b:d3:13:c2:1f:b7:e8:f1:5c:5d:
                    48:dc:40:d2:9d:29:b4:65:f0:c4:ae:17:b6:f0:0f:
                    bd:63:45:dc:91:c4:86:a2:f7:24:7e:20:6c:93:48:
                    64:5f:5b:2e:74:21:2f:b3:3a:7e:c2:63:a9:4c:07:
                    dd:da:95:06:3d:6f:9a:2c:d0:69:51:ed:72:eb:50:
                    ed:3b:e4:d1:24:cc:cc:6b:1a:3b:d9:b9:82:b4:ed:
                    f8:2c:ab:00:d4:e3:99:b3:c7:f7:23:74:46:be:c6:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:D0:8F:E0:DB:12:21:67:14:C2:B8:36:4A:25:2F:E9:FF:34:0C
            X509v3 Authority Key Identifier:
                keyid:90:E5:81:7F:4D:B1:42:04:3A:AD:DA:DC:32:55:93:D7:73:EA:F6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f254b50d338f173800b13f79fd5c50d703713517.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e2e105c-953e-4669-be01-b0af1a92650b/8ae5059acec61fbc0325f2374e8f1b75e3fb43e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e2e105c-953e-4669-be01-b0af1a92650b/f254b50d338f173800b13f79fd5c50d703713517.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.216.0/22
                IPv6:
                  2803:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:1e:90:78:50:f9:a5:e5:9e:61:63:c2:0a:bc:2d:a1:b6:
         fc:21:e8:23:a8:86:e9:29:de:e1:32:d7:71:cf:9a:78:4a:be:
         84:f6:f7:96:80:ce:a0:da:d4:f9:5b:51:a4:fc:5b:01:8c:59:
         0c:8a:db:07:8a:f8:cb:cc:f8:2f:35:40:b9:c2:06:a6:e8:2f:
         b8:5f:43:a6:82:0b:1e:b7:7e:5f:36:2f:1b:2d:de:64:3e:fb:
         95:5c:73:2b:fc:16:14:83:ae:91:9c:98:c5:e2:b4:89:3f:84:
         7c:92:4b:53:e7:0c:c1:51:4c:a9:92:9b:e8:e8:ce:95:3d:18:
         86:77:8f:f5:d6:46:24:45:bd:2f:85:f4:49:c3:21:58:10:ed:
         f9:4c:53:ab:42:72:9f:75:64:52:5d:10:ae:60:a1:d8:4e:df:
         f9:9f:3d:9a:f4:6f:18:16:96:1b:a7:35:32:fc:97:b9:a4:d7:
         bb:b1:5c:fc:2d:b6:a4:8a:5f:8f:42:fd:5c:2f:d5:5b:8f:47:
         8d:da:cd:42:01:b8:e5:9b:b0:b2:e1:83:8a:0e:3d:5a:8b:81:
         c8:f3:ee:9c:bb:39:83:87:67:cd:17:18:e1:cc:be:64:f7:be:
         e4:b3:3b:16:8d:d9:b7:35:c3:e0:68:66:73:a0:00:4a:42:8e:
         e8:d6:4f:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAofbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYy
NTRiNTBkMzM4ZjE3MzgwMGIxM2Y3OWZkNWM1MGQ3MDM3MTM1MTcwHhcNMjEwMzI0
MTQzMzIxWhcNMjYwMzI0MTQzMzIxWjAzMTEwLwYDVQQDEyg4YWU1MDU5YWNlYzYx
ZmJjMDMyNWYyMzc0ZThmMWI3NWUzZmI0M2UxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtyLrypABzJrIrDfRaINXcHuIE4igNYgrWD1tPQi2S5ZjxgVz
I0v4EeftJK0oNGFlp/NXPAb5VgWpDIuCB0rIIOl9cJlis94vw/0PsbwXNFG8hHWE
jGZvlkFgDlVeH+M+yTsSOvuKUrmjb2/fu6q/27HlmUF+veQ2DnEUiNNku/s/YvR3
BK+GxrnE/TR8KZyt4boDwxXhEh4MopvTE8Ift+jxXF1I3EDSnSm0ZfDErhe28A+9
Y0XckcSGovckfiBsk0hkX1sudCEvszp+wmOpTAfd2pUGPW+aLNBpUe1y61DtO+TR
JMzMaxo72bmCtO34LKsA1OOZs8f3I3RGvsZi0wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFI3k0I/g2xIhZxTCuDZKJS/p/zQMMB8GA1UdIwQYMBaAFJDlgX9NsUIEOq3a
3DJVk9dz6vbLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjI1NGI1
MGQzMzhmMTczODAwYjEzZjc5ZmQ1YzUwZDcwMzcxMzUxNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmUyZTEwNWMtOTUzZS00NjY5LWJlMDEtYjBhZjFh
OTI2NTBiLzhhZTUwNTlhY2VjNjFmYmMwMzI1ZjIzNzRlOGYxYjc1ZTNmYjQzZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZTJlMTA1Yy05NTNlLTQ2NjktYmUwMS1iMGFm
MWE5MjY1MGIvZjI1NGI1MGQzMzhmMTczODAwYjEzZjc5ZmQ1YzUwZDcwMzcxMzUx
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3v2DANBAIAAjAHAwUAKAM4EDANBgkqhkiG9w0BAQsFAAOC
AQEAZuIekHhQ+aXlnmFjwgq8LaG2/CHoI6iG6Sne4TLXcc+aeEq+hPb3loDOoNrU
+VtRpPxbAYxZDIrbB4r4y8z4LzVAucIGpugvuF9DpoILHrd+XzYvGy3eZD77lVxz
K/wWFIOukZyYxeK0iT+EfJJLU+cMwVFMqZKb6OjOlT0YhneP9dZGJEW9L4X0ScMh
WBDt+UxTq0Jyn3VkUl0QrmCh2E7f+Z89mvRvGBaWG6c1MvyXuaTXu7Fc/C22pIpf
j0L9XC/VW49HjdrNQgG45ZuwsuGDig49WouByPPunLs5g4dnzRcY4cy+ZPe+5LM7
Fo3ZtzXD4Ghmc6AASkKO6NZPnQ==
-----END CERTIFICATE-----