Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/6392d547c6d2345b8e66b1811bb78f798c0db767.roa
File:                     6392d547c6d2345b8e66b1811bb78f798c0db767.roa (raw, json)
Hash identifier:          qQAADA/O6BOUc6L1UOQ6ppD1gMbxIP2IlEHclcAKjRU=
Subject key identifier:   74:47:92:E9:62:80:28:8E:6A:4B:95:D0:B6:BC:E0:08:2F:83:E4:38
Certificate issuer:       /CN=008d84b9cd2a920928195441c2861e0a51e5d736
Certificate serial:       0CDE40
Authority key identifier: BA:61:65:43:DF:06:89:2E:D2:C6:8F:9F:90:65:89:49:58:05:B5:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/008d84b9cd2a920928195441c2861e0a51e5d736.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/6392d547c6d2345b8e66b1811bb78f798c0db767.roa
Signing time:             Wed 24 Mar 2021 14:46:16 +0000
ROA not before:           Wed 24 Mar 2021 14:46:16 +0000
ROA not after:            Tue 24 Mar 2026 14:46:16 +0000
asID:                     266677
IP address blocks:        45.228.60.0/22 maxlen: 24
                          2803:b920::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843328 (0xcde40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008d84b9cd2a920928195441c2861e0a51e5d736
        Validity
            Not Before: Mar 24 14:46:16 2021 GMT
            Not After : Mar 24 14:46:16 2026 GMT
        Subject: CN=6392d547c6d2345b8e66b1811bb78f798c0db767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:78:46:29:c7:d7:26:60:eb:88:90:f3:56:
                    23:89:c4:f2:8f:f4:15:96:c1:d0:98:5c:ef:1e:27:
                    e7:5a:68:8a:e4:d6:2e:26:88:bb:b2:aa:d9:e9:25:
                    4b:39:5a:da:65:2c:85:d4:30:ec:2b:48:83:6d:7c:
                    fb:60:76:ee:7d:fc:fd:24:67:22:de:08:aa:e6:a2:
                    b6:e9:d6:1d:2c:92:3d:61:51:6a:5a:26:28:db:23:
                    b8:04:20:1e:3b:f5:85:c6:ed:e8:0f:98:0d:33:a9:
                    c9:b7:aa:17:77:de:5d:60:aa:5b:15:cc:45:43:68:
                    89:73:43:d7:b8:3a:eb:47:2c:b5:1d:e3:b1:99:c4:
                    08:90:b1:01:d9:ef:7a:51:76:a3:69:a2:3e:58:2b:
                    13:ab:4c:8d:d1:9c:14:85:b9:26:ed:e9:c8:24:c0:
                    c0:df:2a:16:fb:64:4e:35:57:2c:35:db:7f:2d:e4:
                    d6:7d:31:7c:fb:b3:f5:8b:75:5f:0a:2f:01:1c:38:
                    85:78:4c:76:09:73:42:9f:2f:5a:d8:3b:a3:f2:18:
                    84:57:f9:bf:51:10:e4:e4:fd:18:0d:c4:0d:5b:8e:
                    62:b2:db:a2:0b:6c:54:84:a3:f6:76:81:fd:a3:61:
                    b5:b2:f4:1b:22:fe:32:5d:88:9d:c9:f5:7f:2d:7a:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:47:92:E9:62:80:28:8E:6A:4B:95:D0:B6:BC:E0:08:2F:83:E4:38
            X509v3 Authority Key Identifier:
                keyid:BA:61:65:43:DF:06:89:2E:D2:C6:8F:9F:90:65:89:49:58:05:B5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/008d84b9cd2a920928195441c2861e0a51e5d736.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/6392d547c6d2345b8e66b1811bb78f798c0db767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7267a8eb-f064-4be5-acbc-e8249750fc75/008d84b9cd2a920928195441c2861e0a51e5d736.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.60.0/22
                IPv6:
                  2803:b920::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:63:ca:a8:fd:c8:ac:2f:58:57:fa:53:e8:0a:39:cd:c8:75:
         51:12:d7:e2:60:5c:ec:3c:07:62:3b:05:f5:9f:8f:7c:00:7f:
         7b:03:27:6b:94:2e:25:d4:d9:76:56:66:b3:bf:29:f8:bc:f5:
         5b:a2:b6:ee:36:ec:f5:7b:44:44:e1:c9:9a:c2:b4:6f:17:7d:
         35:fa:83:e1:06:42:13:f6:b3:4a:cf:c9:2a:ef:09:e6:86:a5:
         e8:5a:92:da:0b:2a:77:76:8e:2c:9d:ca:4c:11:7f:1f:1f:7a:
         1d:46:7e:5b:dc:26:93:26:e2:f4:f7:df:ff:36:6b:80:ab:67:
         92:b1:42:84:17:5e:c7:7e:dd:93:25:69:c0:ea:3b:48:5a:30:
         e1:69:4b:3f:e8:d9:28:51:91:a2:64:25:cd:68:67:1a:5b:71:
         3e:ed:a7:1b:cf:c3:cb:e9:37:ec:34:34:28:7d:bf:d6:24:bb:
         e5:43:7b:4d:ca:7e:f7:7a:23:f8:55:52:ea:4d:94:03:7b:69:
         71:59:aa:e4:78:de:68:b0:9f:50:1d:ae:1b:3d:e8:ff:1e:bc:
         c7:8b:00:d5:b4:ea:7a:33:c3:c4:3a:5c:a5:91:e3:15:71:45:
         39:d4:79:13:94:0e:60:8a:c7:95:dc:c6:91:f3:e0:61:4b:0a:
         66:8a:98:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDN5AMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAw
OGQ4NGI5Y2QyYTkyMDkyODE5NTQ0MWMyODYxZTBhNTFlNWQ3MzYwHhcNMjEwMzI0
MTQ0NjE2WhcNMjYwMzI0MTQ0NjE2WjAzMTEwLwYDVQQDEyg2MzkyZDU0N2M2ZDIz
NDViOGU2NmIxODExYmI3OGY3OThjMGRiNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhRx4RinH1yZg64iQ81YjicTyj/QVlsHQmFzvHifnWmiK5NYu
Joi7sqrZ6SVLOVraZSyF1DDsK0iDbXz7YHbuffz9JGci3giq5qK26dYdLJI9YVFq
WiYo2yO4BCAeO/WFxu3oD5gNM6nJt6oXd95dYKpbFcxFQ2iJc0PXuDrrRyy1HeOx
mcQIkLEB2e96UXajaaI+WCsTq0yN0ZwUhbkm7enIJMDA3yoW+2RONVcsNdt/LeTW
fTF8+7P1i3VfCi8BHDiFeEx2CXNCny9a2Duj8hiEV/m/URDk5P0YDcQNW45istui
C2xUhKP2doH9o2G1svQbIv4yXYidyfV/LXqzQQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHRHkuligCiOakuV0La84Agvg+Q4MB8GA1UdIwQYMBaAFLphZUPfBoku0saP
n5BliUlYBbVoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDA4ZDg0
YjljZDJhOTIwOTI4MTk1NDQxYzI4NjFlMGE1MWU1ZDczNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzI2N2E4ZWItZjA2NC00YmU1LWFjYmMtZTgyNDk3
NTBmYzc1LzYzOTJkNTQ3YzZkMjM0NWI4ZTY2YjE4MTFiYjc4Zjc5OGMwZGI3Njcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MjY3YThlYi1mMDY0LTRiZTUtYWNiYy1lODI0
OTc1MGZjNzUvMDA4ZDg0YjljZDJhOTIwOTI4MTk1NDQxYzI4NjFlMGE1MWU1ZDcz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3kPDANBAIAAjAHAwUAKAO5IDANBgkqhkiG9w0BAQsFAAOC
AQEAV2PKqP3IrC9YV/pT6Ao5zch1URLX4mBc7DwHYjsF9Z+PfAB/ewMna5QuJdTZ
dlZms78p+Lz1W6K27jbs9XtEROHJmsK0bxd9NfqD4QZCE/azSs/JKu8J5oal6FqS
2gsqd3aOLJ3KTBF/Hx96HUZ+W9wmkybi9Pff/zZrgKtnkrFChBdex37dkyVpwOo7
SFow4WlLP+jZKFGRomQlzWhnGltxPu2nG8/Dy+k37DQ0KH2/1iS75UN7Tcp+93oj
+FVS6k2UA3tpcVmq5HjeaLCfUB2uGz3o/x68x4sA1bTqejPDxDpcpZHjFXFFOdR5
E5QOYIrHldzGkfPgYUsKZoqYiw==
-----END CERTIFICATE-----