Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/a74b814f5cfd071d1b4dcc6958281d2bb3594292.roa
File:                     a74b814f5cfd071d1b4dcc6958281d2bb3594292.roa (raw, json)
Hash identifier:          0NIVDbaYKMVuiWUumy15vA6UnVxv/xbaW3k/DLrC5h0=
Subject key identifier:   86:CF:BA:59:20:AF:72:88:93:2F:B4:D7:84:7C:29:49:57:8F:86:19
Certificate issuer:       /CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Certificate serial:       0D17BD
Authority key identifier: 7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/a74b814f5cfd071d1b4dcc6958281d2bb3594292.roa
Signing time:             Wed 24 Mar 2021 14:40:32 +0000
ROA not before:           Wed 24 Mar 2021 14:40:32 +0000
ROA not after:            Tue 24 Mar 2026 14:40:32 +0000
asID:                     264668
IP address blocks:        45.224.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858045 (0xd17bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
        Validity
            Not Before: Mar 24 14:40:32 2021 GMT
            Not After : Mar 24 14:40:32 2026 GMT
        Subject: CN=a74b814f5cfd071d1b4dcc6958281d2bb3594292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:a5:ae:b0:94:94:c8:46:01:b5:1a:f5:0b:
                    b6:ca:06:34:17:4f:9d:e5:af:8e:95:b8:50:46:68:
                    40:57:f6:fa:09:3a:64:b3:8c:ed:70:ff:f5:5e:26:
                    78:52:d5:aa:42:51:c3:41:1a:fd:72:a1:69:0d:e9:
                    6c:b1:c6:c0:cf:15:87:21:d2:7e:b9:3b:42:7f:28:
                    d5:03:60:37:b8:54:ff:78:78:61:db:f8:31:d9:de:
                    ae:47:c5:5d:20:6d:b0:82:0e:06:68:41:12:39:e2:
                    ae:d2:7c:6b:f7:9f:4c:12:9d:c0:8a:e3:b8:87:26:
                    b1:ac:20:b1:2f:52:29:e0:c0:9d:e7:b5:a0:6b:85:
                    3c:0e:75:61:46:92:00:6e:e2:eb:60:26:4b:75:4c:
                    c4:f7:0b:fe:d6:d4:f1:e1:54:b3:36:2a:ea:7b:6c:
                    83:9b:bb:e4:dd:95:91:aa:0e:3e:af:0e:ad:0c:fc:
                    d8:d5:24:95:91:b7:38:c5:d2:75:ed:5c:97:66:a8:
                    d1:ca:c5:9c:b3:d0:2a:3e:93:70:14:15:e7:9c:5e:
                    3c:d8:f2:27:34:7f:8e:1c:47:63:2f:bc:58:dd:17:
                    b8:50:15:e8:b4:4b:bf:d8:d4:d3:ad:58:e3:ff:69:
                    c7:66:83:10:6e:97:3d:f5:d9:4c:af:51:39:9c:c8:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CF:BA:59:20:AF:72:88:93:2F:B4:D7:84:7C:29:49:57:8F:86:19
            X509v3 Authority Key Identifier:
                keyid:7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/a74b814f5cfd071d1b4dcc6958281d2bb3594292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:c2:a1:8f:86:e3:fc:4b:bf:20:68:bb:94:10:f6:7b:6b:
         25:ed:55:c6:af:cd:9d:f6:f7:d1:3c:da:f8:14:37:8f:50:b0:
         a7:de:b4:62:05:19:bc:b3:f0:05:6f:ff:fe:e2:06:1a:d4:41:
         51:66:e6:e1:d9:d7:60:be:60:d9:3f:16:28:66:cb:a0:f3:5d:
         4f:37:4d:ea:8d:d4:75:35:11:2c:33:95:21:fc:8a:48:15:48:
         ac:29:22:ac:16:d6:25:4d:5d:f4:e3:68:95:ed:dc:cb:17:3e:
         13:5c:c6:0d:3e:52:5d:ba:1e:2b:1a:8c:65:19:6b:47:1a:59:
         9c:a5:33:da:74:5e:c8:85:af:50:58:c6:66:04:c2:ea:23:99:
         1f:89:94:7c:2f:01:35:bf:c5:71:8f:0c:91:1a:34:f5:82:d2:
         6c:03:ee:39:fa:1b:eb:29:55:1b:fd:b4:70:dc:1e:26:7f:dd:
         4c:4d:ad:ef:67:85:12:d2:ca:df:e2:1c:fc:64:ca:f1:9c:09:
         2c:c9:5c:17:e5:16:18:20:31:6e:3b:e2:4b:93:b9:b4:d7:e3:
         f9:4d:31:7b:0e:5a:08:c6:54:22:6f:f0:5c:5f:9f:31:06:26:
         84:41:ad:44:1c:1c:52:ea:8e:30:6d:04:17:54:75:6c:46:cd:
         02:99:f2:05
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDRe9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
OWNhMjZjZGE0NzZlYWM1NmMyZGE0MWNkMTExYzhlNGExYjFmMzYwHhcNMjEwMzI0
MTQ0MDMyWhcNMjYwMzI0MTQ0MDMyWjAzMTEwLwYDVQQDEyhhNzRiODE0ZjVjZmQw
NzFkMWI0ZGNjNjk1ODI4MWQyYmIzNTk0MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkx2lrrCUlMhGAbUa9Qu2ygY0F0+d5a+OlbhQRmhAV/b6CTpk
s4ztcP/1XiZ4UtWqQlHDQRr9cqFpDelsscbAzxWHIdJ+uTtCfyjVA2A3uFT/eHhh
2/gx2d6uR8VdIG2wgg4GaEESOeKu0nxr959MEp3AiuO4hyaxrCCxL1Ip4MCd57Wg
a4U8DnVhRpIAbuLrYCZLdUzE9wv+1tTx4VSzNirqe2yDm7vk3ZWRqg4+rw6tDPzY
1SSVkbc4xdJ17VyXZqjRysWcs9AqPpNwFBXnnF482PInNH+OHEdjL7xY3Re4UBXo
tEu/2NTTrVjj/2nHZoMQbpc99dlMr1E5nMhNLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIbPulkgr3KIky+014R8KUlXj4YZMB8GA1UdIwQYMBaAFH76Ka+qLPa2l63e
33hjjwbgt+dpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGQ5Y2Ey
NmNkYTQ3NmVhYzU2YzJkYTQxY2QxMTFjOGU0YTFiMWYzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzNkM2U0ZTAtMTEwNC00NjVmLTgwNDYtM2QwMDBm
Nzk4NGQxL2E3NGI4MTRmNWNmZDA3MWQxYjRkY2M2OTU4MjgxZDJiYjM1OTQyOTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83M2QzZTRlMC0xMTA0LTQ2NWYtODA0Ni0zZDAw
MGY3OTg0ZDEvOGQ5Y2EyNmNkYTQ3NmVhYzU2YzJkYTQxY2QxMTFjOGU0YTFiMWYz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3gmDANBgkqhkiG9w0BAQsFAAOCAQEAdMLCoY+G4/xLvyBo
u5QQ9ntrJe1Vxq/Nnfb30Tza+BQ3j1Cwp960YgUZvLPwBW///uIGGtRBUWbm4dnX
YL5g2T8WKGbLoPNdTzdN6o3UdTURLDOVIfyKSBVIrCkirBbWJU1d9ONole3cyxc+
E1zGDT5SXboeKxqMZRlrRxpZnKUz2nReyIWvUFjGZgTC6iOZH4mUfC8BNb/FcY8M
kRo09YLSbAPuOfob6ylVG/20cNweJn/dTE2t72eFEtLK3+Ic/GTK8ZwJLMlcF+UW
GCAxbjviS5O5tNfj+U0xew5aCMZUIm/wXF+fMQYmhEGtRBwcUuqOMG0EF1R1bEbN
ApnyBQ==
-----END CERTIFICATE-----