Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa
File:                     aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa (raw, json)
Hash identifier:          ClZUSQDImpkEZ/bKB6a44I4i8NGzDSpS08TiANek15M=
Subject key identifier:   FD:81:62:61:73:8E:63:CA:C1:88:EE:7E:5B:A5:C0:56:03:FD:EE:6F
Certificate issuer:       /CN=a207cb2f14582ea28aa604734d5ad48d807bd643
Certificate serial:       0B5DC2
Authority key identifier: C0:6A:C0:F0:C7:04:DC:7E:24:D1:CB:D4:12:8A:2C:E2:26:64:37:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a207cb2f14582ea28aa604734d5ad48d807bd643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa
Signing time:             Wed 24 Mar 2021 14:45:22 +0000
ROA not before:           Wed 24 Mar 2021 14:45:22 +0000
ROA not after:            Tue 24 Mar 2026 14:45:22 +0000
asID:                     269736
IP address blocks:        45.181.68.0/22 maxlen: 22
                          2803:8960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744898 (0xb5dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a207cb2f14582ea28aa604734d5ad48d807bd643
        Validity
            Not Before: Mar 24 14:45:22 2021 GMT
            Not After : Mar 24 14:45:22 2026 GMT
        Subject: CN=aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:9f:09:f5:81:8e:55:4c:a3:a6:06:e6:99:
                    88:71:ff:e7:d8:d1:82:45:0e:15:b5:a6:13:c3:47:
                    5b:96:c8:a5:71:fe:2f:79:fa:b4:74:f3:f3:3b:e9:
                    e6:2f:4b:85:8a:94:e2:3b:e8:fa:a4:cf:0d:ea:d0:
                    d5:49:e7:87:20:3d:37:ad:62:cc:42:cf:cb:bb:2c:
                    42:e5:f5:ed:33:23:10:3e:95:68:22:91:16:e1:f0:
                    44:5a:d3:b0:7a:3b:a7:17:ac:4c:e2:1d:80:2f:3d:
                    0f:88:aa:18:0a:f0:26:d9:63:c1:ba:06:53:69:04:
                    8a:3d:56:2f:d7:da:c4:68:e2:97:e5:63:98:fb:0d:
                    41:5b:05:04:ab:4c:04:3a:b9:07:7c:81:83:ee:90:
                    a0:d3:61:35:20:6a:f0:f2:69:8a:36:ec:cf:74:0c:
                    fc:74:3a:45:01:73:29:a9:97:89:f9:0c:1f:2d:3d:
                    fa:6c:b8:91:df:e9:23:45:2e:2a:22:dc:7d:11:30:
                    f7:39:e0:a9:dd:4c:c0:bf:8e:23:ce:d9:89:28:20:
                    9f:8d:9c:56:55:d5:e6:7a:2e:6c:8f:23:0a:be:02:
                    37:b4:f8:5a:c3:06:af:7f:9e:0f:3b:5a:68:04:41:
                    8d:8d:ae:10:14:40:32:58:22:e3:70:ac:db:64:4b:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:62:61:73:8E:63:CA:C1:88:EE:7E:5B:A5:C0:56:03:FD:EE:6F
            X509v3 Authority Key Identifier:
                keyid:C0:6A:C0:F0:C7:04:DC:7E:24:D1:CB:D4:12:8A:2C:E2:26:64:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a207cb2f14582ea28aa604734d5ad48d807bd643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/aefa7a9306503d0a7ed20daab13ddcba2c5f3ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/a207cb2f14582ea28aa604734d5ad48d807bd643.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.68.0/22
                IPv6:
                  2803:8960::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:db:ed:5a:d2:49:e1:69:71:b2:bb:64:31:8c:1d:ad:d6:
         29:77:0e:45:7a:8d:c3:f4:1e:25:e5:c0:04:56:1d:8a:e5:28:
         2a:6c:0d:6d:59:87:b0:2b:8b:9f:64:39:3d:22:9c:ec:23:d8:
         ca:2f:d7:dd:fa:3b:e2:de:be:de:47:c8:15:15:3f:a0:2e:e5:
         0e:b6:d8:3d:8e:40:ac:2b:d3:e4:7c:b2:d3:ad:27:d6:49:40:
         e9:59:8a:df:64:80:2d:2c:4c:f3:75:2f:ae:43:4e:5d:1a:e5:
         b0:01:1f:e6:ce:03:74:3d:62:fb:12:0e:6c:92:1e:cf:ad:8c:
         4a:5c:9b:61:08:95:db:cf:d2:ed:9e:bc:cd:37:aa:66:8d:cf:
         d0:5a:9d:e3:19:29:47:c2:bf:e2:2e:ee:86:9c:3c:5b:43:57:
         2d:05:1f:95:bf:57:06:5a:3e:03:22:f1:f5:6c:ee:ae:29:8f:
         fc:6b:2e:54:39:33:18:5f:26:b6:4e:0a:99:ea:a1:03:f5:db:
         24:79:25:5e:90:e5:91:67:2d:62:45:0f:41:42:67:85:14:cc:
         0d:7e:49:bd:aa:f6:1f:de:e1:bc:1f:5d:75:7c:78:99:69:fb:
         f7:59:11:c5:b9:91:37:a5:15:07:83:7d:ba:ff:e3:f4:1a:a8:
         e8:a6:a2:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC13CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEy
MDdjYjJmMTQ1ODJlYTI4YWE2MDQ3MzRkNWFkNDhkODA3YmQ2NDMwHhcNMjEwMzI0
MTQ0NTIyWhcNMjYwMzI0MTQ0NTIyWjAzMTEwLwYDVQQDEyhhZWZhN2E5MzA2NTAz
ZDBhN2VkMjBkYWFiMTNkZGNiYTJjNWYzZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvfqfCfWBjlVMo6YG5pmIcf/n2NGCRQ4VtaYTw0dblsilcf4v
efq0dPPzO+nmL0uFipTiO+j6pM8N6tDVSeeHID03rWLMQs/LuyxC5fXtMyMQPpVo
IpEW4fBEWtOwejunF6xM4h2ALz0PiKoYCvAm2WPBugZTaQSKPVYv19rEaOKX5WOY
+w1BWwUEq0wEOrkHfIGD7pCg02E1IGrw8mmKNuzPdAz8dDpFAXMpqZeJ+QwfLT36
bLiR3+kjRS4qItx9ETD3OeCp3UzAv44jztmJKCCfjZxWVdXmei5sjyMKvgI3tPha
wwavf54PO1poBEGNja4QFEAyWCLjcKzbZEuoTwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFP2BYmFzjmPKwYjuflulwFYD/e5vMB8GA1UdIwQYMBaAFMBqwPDHBNx+JNHL
1BKKLOImZDcRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTIwN2Ni
MmYxNDU4MmVhMjhhYTYwNDczNGQ1YWQ0OGQ4MDdiZDY0My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTA2ZjIwNDUtNzdjMi00MzVkLThlMmEtZDY1NzZi
NTA3ZGJlL2FlZmE3YTkzMDY1MDNkMGE3ZWQyMGRhYWIxM2RkY2JhMmM1ZjNlZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MDZmMjA0NS03N2MyLTQzNWQtOGUyYS1kNjU3
NmI1MDdkYmUvYTIwN2NiMmYxNDU4MmVhMjhhYTYwNDczNGQ1YWQ0OGQ4MDdiZDY0
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi21RDANBAIAAjAHAwUAKAOJYDANBgkqhkiG9w0BAQsFAAOC
AQEAE37b7VrSSeFpcbK7ZDGMHa3WKXcORXqNw/QeJeXABFYdiuUoKmwNbVmHsCuL
n2Q5PSKc7CPYyi/X3fo74t6+3kfIFRU/oC7lDrbYPY5ArCvT5Hyy060n1klA6VmK
32SALSxM83UvrkNOXRrlsAEf5s4DdD1i+xIObJIez62MSlybYQiV28/S7Z68zTeq
Zo3P0Fqd4xkpR8K/4i7uhpw8W0NXLQUflb9XBlo+AyLx9WzurimP/GsuVDkzGF8m
tk4KmeqhA/XbJHklXpDlkWctYkUPQUJnhRTMDX5Jvar2H97hvB9ddXx4mWn791kR
xbmRN6UVB4N9uv/j9Bqo6KaiOA==
-----END CERTIFICATE-----