Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/3ea8558f89a00145dad6f48a9a17ea1779ba5b90.roa
File:                     3ea8558f89a00145dad6f48a9a17ea1779ba5b90.roa (raw, json)
Hash identifier:          dmbtqUFfCKdCXIJTXGhetmRFDq4viR45fEUEcW42mlw=
Subject key identifier:   19:C1:BB:26:E6:CE:9B:2E:97:D6:61:61:B3:51:FB:20:35:86:8E:74
Certificate issuer:       /CN=477d2a4e265c1328f40087525488d3a51bdaf082
Certificate serial:       0CC0D8
Authority key identifier: 56:98:D7:51:E1:B4:C3:CB:85:BD:89:3F:25:24:D3:47:1C:DF:E8:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477d2a4e265c1328f40087525488d3a51bdaf082.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/3ea8558f89a00145dad6f48a9a17ea1779ba5b90.roa
Signing time:             Wed 24 Mar 2021 14:47:48 +0000
ROA not before:           Wed 24 Mar 2021 14:47:47 +0000
ROA not after:            Tue 24 Mar 2026 14:47:47 +0000
asID:                     267701
IP address blocks:        45.236.120.0/24 maxlen: 24
                          2803:74a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835800 (0xcc0d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477d2a4e265c1328f40087525488d3a51bdaf082
        Validity
            Not Before: Mar 24 14:47:47 2021 GMT
            Not After : Mar 24 14:47:47 2026 GMT
        Subject: CN=3ea8558f89a00145dad6f48a9a17ea1779ba5b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:2d:a7:68:2c:99:30:44:1e:38:d1:a5:63:
                    51:d8:5f:e5:e1:74:95:dd:43:2e:16:4a:2a:bb:91:
                    08:7b:bb:55:11:6c:9f:ca:53:4e:14:b8:96:6d:61:
                    16:2d:bd:6e:f3:a8:20:2c:ba:04:88:9b:10:48:6d:
                    7e:0a:4f:54:41:00:13:d4:a0:c6:13:a6:b2:1a:28:
                    fc:05:55:61:ca:07:c8:45:7d:3c:0d:32:eb:f6:61:
                    fa:a9:2e:ee:39:2a:56:82:ee:45:ab:31:8e:d3:c5:
                    d7:ba:43:13:e3:ac:02:27:cc:7a:6f:95:59:d7:03:
                    95:a6:19:ad:97:c7:0b:39:27:e0:7f:f7:7c:c0:94:
                    92:86:90:9d:40:eb:00:b8:3e:99:f0:4d:6e:4c:f3:
                    69:8d:14:8f:21:3d:66:69:1b:4c:94:5a:29:09:ab:
                    41:33:46:7e:8d:9c:7a:5a:17:8a:04:48:5d:08:77:
                    3d:dc:92:f9:2a:53:e2:e2:7c:cf:39:bf:90:c7:de:
                    9f:c8:30:51:f9:27:a5:93:00:0e:c8:c8:38:0f:57:
                    8d:ca:ce:87:f8:d2:d6:5d:f1:d4:d1:ee:44:53:40:
                    6d:ab:57:7a:15:48:f4:02:96:5f:4b:eb:59:cd:3e:
                    6e:d6:fc:73:da:fe:76:1d:ef:39:d0:51:ea:5f:f6:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C1:BB:26:E6:CE:9B:2E:97:D6:61:61:B3:51:FB:20:35:86:8E:74
            X509v3 Authority Key Identifier:
                keyid:56:98:D7:51:E1:B4:C3:CB:85:BD:89:3F:25:24:D3:47:1C:DF:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477d2a4e265c1328f40087525488d3a51bdaf082.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/3ea8558f89a00145dad6f48a9a17ea1779ba5b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c702a78-37cd-423b-9c24-00efd9d041eb/477d2a4e265c1328f40087525488d3a51bdaf082.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.120.0/24
                IPv6:
                  2803:74a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:47:a7:f5:ef:a3:27:4f:f6:83:58:5d:97:01:8e:38:91:7e:
         62:76:ca:95:d1:8f:42:06:77:0a:26:e2:18:c2:12:05:2b:be:
         7d:c4:ef:bb:1b:56:1d:4a:38:d4:50:f4:cb:d7:55:e0:f4:55:
         3e:a8:62:f5:ea:0b:98:7e:6d:39:82:5e:96:fe:88:e2:ea:89:
         bb:1a:2c:7b:77:57:a1:3f:93:52:de:12:9e:c8:50:b0:f7:36:
         01:c4:06:31:ba:1c:b1:79:f5:3e:f1:98:5a:c2:a0:d3:19:5e:
         d3:88:4d:f4:16:7c:25:26:f3:95:c5:ef:3d:22:e3:67:55:d5:
         3f:31:f0:35:77:52:7d:cf:83:ad:50:81:98:bb:5f:0a:a1:f5:
         f5:e3:0b:b9:34:f2:2f:a6:d8:16:91:33:f2:b4:fd:26:df:7a:
         44:a7:2b:74:8d:a3:b8:80:7b:31:3b:10:09:c3:60:6a:9b:ec:
         5c:72:15:1a:5f:ee:14:7c:a3:37:11:df:c2:a6:79:38:15:12:
         89:f7:ac:a4:c3:bc:1a:1a:f0:a1:c1:b5:ba:92:a4:ae:37:b9:
         4c:d3:d5:ff:94:6d:2c:ed:47:2a:99:a3:78:25:0b:93:53:19:
         e2:37:b1:10:ca:94:1c:1a:da:0d:9f:19:95:0d:07:15:fe:ec:
         51:92:2d:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDMDYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
N2QyYTRlMjY1YzEzMjhmNDAwODc1MjU0ODhkM2E1MWJkYWYwODIwHhcNMjEwMzI0
MTQ0NzQ3WhcNMjYwMzI0MTQ0NzQ3WjAzMTEwLwYDVQQDEygzZWE4NTU4Zjg5YTAw
MTQ1ZGFkNmY0OGE5YTE3ZWExNzc5YmE1YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsYwtp2gsmTBEHjjRpWNR2F/l4XSV3UMuFkoqu5EIe7tVEWyf
ylNOFLiWbWEWLb1u86ggLLoEiJsQSG1+Ck9UQQAT1KDGE6ayGij8BVVhygfIRX08
DTLr9mH6qS7uOSpWgu5FqzGO08XXukMT46wCJ8x6b5VZ1wOVphmtl8cLOSfgf/d8
wJSShpCdQOsAuD6Z8E1uTPNpjRSPIT1maRtMlFopCatBM0Z+jZx6WheKBEhdCHc9
3JL5KlPi4nzPOb+Qx96fyDBR+SelkwAOyMg4D1eNys6H+NLWXfHU0e5EU0Btq1d6
FUj0ApZfS+tZzT5u1vxz2v52He850FHqX/YC+QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBnBuybmzpsul9ZhYbNR+yA1ho50MB8GA1UdIwQYMBaAFFaY11HhtMPLhb2J
PyUk00cc3+goMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDc3ZDJh
NGUyNjVjMTMyOGY0MDA4NzUyNTQ4OGQzYTUxYmRhZjA4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM3MDJhNzgtMzdjZC00MjNiLTljMjQtMDBlZmQ5
ZDA0MWViLzNlYTg1NThmODlhMDAxNDVkYWQ2ZjQ4YTlhMTdlYTE3NzliYTViOTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzcwMmE3OC0zN2NkLTQyM2ItOWMyNC0wMGVm
ZDlkMDQxZWIvNDc3ZDJhNGUyNjVjMTMyOGY0MDA4NzUyNTQ4OGQzYTUxYmRhZjA4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC3seDANBAIAAjAHAwUAKAN0oDANBgkqhkiG9w0BAQsFAAOC
AQEAUUen9e+jJ0/2g1hdlwGOOJF+YnbKldGPQgZ3CibiGMISBSu+fcTvuxtWHUo4
1FD0y9dV4PRVPqhi9eoLmH5tOYJelv6I4uqJuxose3dXoT+TUt4SnshQsPc2AcQG
MbocsXn1PvGYWsKg0xle04hN9BZ8JSbzlcXvPSLjZ1XVPzHwNXdSfc+DrVCBmLtf
CqH19eMLuTTyL6bYFpEz8rT9Jt96RKcrdI2juIB7MTsQCcNgapvsXHIVGl/uFHyj
NxHfwqZ5OBUSifespMO8GhrwocG1upKkrje5TNPV/5RtLO1HKpmjeCULk1MZ4jex
EMqUHBraDZ8ZlQ0HFf7sUZIt4A==
-----END CERTIFICATE-----