Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/581fea0f-e01c-4b08-858d-0c26dd75e501/4fde3dd35e1c7a66b2834d12c71fdac226ce5e70.roa
File:                     4fde3dd35e1c7a66b2834d12c71fdac226ce5e70.roa (raw, json)
Hash identifier:          hWK5USthnyJvRwPoclMR08IlLZ3PAuJXulrK23AFsUw=
Subject key identifier:   A9:D6:B4:8C:FF:F8:8B:C0:B2:F4:A6:3A:E5:E0:68:46:45:E8:E4:53
Certificate issuer:       /CN=62c2c2898d5f2fa382bcb78dac4f9551a02d42f6
Certificate serial:       0B6B0C
Authority key identifier: 13:12:72:53:4F:66:0B:5D:4A:AA:5F:F6:EB:FC:DF:21:62:C3:3E:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62c2c2898d5f2fa382bcb78dac4f9551a02d42f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581fea0f-e01c-4b08-858d-0c26dd75e501/4fde3dd35e1c7a66b2834d12c71fdac226ce5e70.roa
Signing time:             Wed 24 Mar 2021 14:48:01 +0000
ROA not before:           Wed 24 Mar 2021 14:48:01 +0000
ROA not after:            Tue 24 Mar 2026 14:48:01 +0000
asID:                     269775
IP address blocks:        45.181.77.0/24 maxlen: 24
                          2803:1560::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748300 (0xb6b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c2c2898d5f2fa382bcb78dac4f9551a02d42f6
        Validity
            Not Before: Mar 24 14:48:01 2021 GMT
            Not After : Mar 24 14:48:01 2026 GMT
        Subject: CN=4fde3dd35e1c7a66b2834d12c71fdac226ce5e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:77:ea:53:58:d8:26:b1:fc:e4:bb:ce:7e:
                    06:e8:71:7b:d9:73:af:cd:60:3d:af:7a:76:f6:f8:
                    40:6e:63:f6:2b:a1:7f:6d:20:bd:16:b9:44:7f:56:
                    eb:4d:7f:ab:60:e7:c4:65:be:0d:09:23:1e:9d:2e:
                    33:7f:36:2d:a2:cd:01:7f:81:ea:3c:cf:da:77:c5:
                    af:4d:fa:5e:23:92:31:76:f6:4b:3a:e2:3c:d8:47:
                    ce:cf:dd:61:dd:5a:fd:5a:39:b9:a6:af:75:9e:61:
                    b9:9f:7d:7e:5f:20:c0:5b:7a:ed:60:5e:70:38:c3:
                    dd:f2:f0:56:64:f7:55:20:d9:17:4e:4e:11:99:f7:
                    81:e3:1e:57:35:88:84:93:bd:a6:e3:35:1b:98:0e:
                    4e:fa:54:54:fd:96:b3:fb:64:a3:28:3d:58:27:11:
                    a4:e5:2c:10:11:b5:0e:f4:73:af:4b:f4:c8:0b:63:
                    d7:14:46:38:fa:c1:66:37:20:ba:ab:96:0e:68:92:
                    cd:af:82:be:24:8f:f2:5a:98:3a:b9:cc:a9:1f:a8:
                    ee:c1:18:42:7d:a9:fc:26:99:cc:fe:6a:a0:c9:5e:
                    75:d3:b2:50:22:f4:39:17:05:6e:90:28:57:53:92:
                    3b:80:45:4b:18:1e:ba:e9:2b:ba:d0:b2:1f:66:f6:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:B4:8C:FF:F8:8B:C0:B2:F4:A6:3A:E5:E0:68:46:45:E8:E4:53
            X509v3 Authority Key Identifier:
                keyid:13:12:72:53:4F:66:0B:5D:4A:AA:5F:F6:EB:FC:DF:21:62:C3:3E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62c2c2898d5f2fa382bcb78dac4f9551a02d42f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581fea0f-e01c-4b08-858d-0c26dd75e501/4fde3dd35e1c7a66b2834d12c71fdac226ce5e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581fea0f-e01c-4b08-858d-0c26dd75e501/62c2c2898d5f2fa382bcb78dac4f9551a02d42f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.77.0/24
                IPv6:
                  2803:1560::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:10:48:e3:95:4b:da:74:d4:92:bd:8e:ba:a7:08:fb:e7:
         e4:a0:7c:a3:ba:24:8c:38:b7:72:04:cc:42:54:40:17:a2:cc:
         6e:bb:84:a8:a4:4d:6c:b7:5e:59:76:eb:a9:93:e8:79:84:1a:
         25:b7:a3:96:5b:d3:a8:79:4c:7b:d6:2c:a4:a9:8c:e1:34:02:
         7d:61:ea:2c:50:8d:4f:45:3b:d8:9b:29:e4:70:60:8d:7e:06:
         5a:f5:f6:bc:91:63:a2:92:e0:e9:29:2a:80:fc:4c:3a:61:80:
         46:4e:67:a9:8d:21:68:85:d6:b1:2b:c0:83:76:6d:93:2f:1a:
         50:73:9f:88:e9:72:ee:83:1d:52:18:fe:bb:db:c8:42:17:5a:
         e2:47:1f:aa:17:5c:18:d6:70:c5:f3:b5:12:2b:8f:fd:f2:c5:
         c3:07:b8:df:22:e0:ff:5b:7d:74:bf:55:74:95:ad:5d:14:f3:
         38:d4:f3:6d:58:a7:6c:66:5b:b8:bb:47:83:7f:b1:9e:5d:37:
         f5:5a:42:74:d2:3e:4a:ca:b1:b4:39:cc:2b:65:e8:cf:e3:88:
         e0:ec:cf:85:de:e3:8e:4c:4a:e1:c9:72:19:b1:ae:55:b1:46:
         40:5b:22:26:ae:4b:c4:c5:0c:20:40:c5:d4:eb:f6:7c:a6:a6:
         03:b2:4c:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC2sMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YzJjMjg5OGQ1ZjJmYTM4MmJjYjc4ZGFjNGY5NTUxYTAyZDQyZjYwHhcNMjEwMzI0
MTQ0ODAxWhcNMjYwMzI0MTQ0ODAxWjAzMTEwLwYDVQQDEyg0ZmRlM2RkMzVlMWM3
YTY2YjI4MzRkMTJjNzFmZGFjMjI2Y2U1ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzER36lNY2Cax/OS7zn4G6HF72XOvzWA9r3p29vhAbmP2K6F/
bSC9FrlEf1brTX+rYOfEZb4NCSMenS4zfzYtos0Bf4HqPM/ad8WvTfpeI5IxdvZL
OuI82EfOz91h3Vr9Wjm5pq91nmG5n31+XyDAW3rtYF5wOMPd8vBWZPdVINkXTk4R
mfeB4x5XNYiEk72m4zUbmA5O+lRU/Zaz+2SjKD1YJxGk5SwQEbUO9HOvS/TIC2PX
FEY4+sFmNyC6q5YOaJLNr4K+JI/yWpg6ucypH6juwRhCfan8JpnM/mqgyV5107JQ
IvQ5FwVukChXU5I7gEVLGB666Su60LIfZvY4VQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKnWtIz/+IvAsvSmOuXgaEZF6ORTMB8GA1UdIwQYMBaAFBMSclNPZgtdSqpf
9uv83yFiwz5oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJjMmMy
ODk4ZDVmMmZhMzgyYmNiNzhkYWM0Zjk1NTFhMDJkNDJmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTgxZmVhMGYtZTAxYy00YjA4LTg1OGQtMGMyNmRk
NzVlNTAxLzRmZGUzZGQzNWUxYzdhNjZiMjgzNGQxMmM3MWZkYWMyMjZjZTVlNzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ODFmZWEwZi1lMDFjLTRiMDgtODU4ZC0wYzI2
ZGQ3NWU1MDEvNjJjMmMyODk4ZDVmMmZhMzgyYmNiNzhkYWM0Zjk1NTFhMDJkNDJm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC21TTANBAIAAjAHAwUAKAMVYDANBgkqhkiG9w0BAQsFAAOC
AQEAq9kQSOOVS9p01JK9jrqnCPvn5KB8o7okjDi3cgTMQlRAF6LMbruEqKRNbLde
WXbrqZPoeYQaJbejllvTqHlMe9YspKmM4TQCfWHqLFCNT0U72Jsp5HBgjX4GWvX2
vJFjopLg6SkqgPxMOmGARk5nqY0haIXWsSvAg3Ztky8aUHOfiOly7oMdUhj+u9vI
Qhda4kcfqhdcGNZwxfO1EiuP/fLFwwe43yLg/1t9dL9VdJWtXRTzONTzbVinbGZb
uLtHg3+xnl039VpCdNI+SsqxtDnMK2Xoz+OI4OzPhd7jjkxK4clyGbGuVbFGQFsi
Jq5LxMUMIEDF1Ov2fKamA7JMCQ==
-----END CERTIFICATE-----