Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/8adb5d490a4e45e544bfb126c462a7b68094238f.roa
File:                     8adb5d490a4e45e544bfb126c462a7b68094238f.roa (raw, json)
Hash identifier:          TRq85Y96K96XeM6O7t/wzBy23iL6vRA7ymkjees48SM=
Subject key identifier:   59:85:FC:C8:2F:0C:CB:23:D6:AD:44:FD:A4:D2:54:37:34:0B:A0:DA
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       03075D
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/8adb5d490a4e45e544bfb126c462a7b68094238f.roa
Signing time:             Tue 01 Feb 2022 20:41:51 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Mon 15 Jan 2024 03:00:00 +0000
asID:                     23059
IP address blocks:        45.227.88.0/22 maxlen: 24
                          2801:114::/44 maxlen: 48
                          2803:9310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198493 (0x3075d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Jan 15 03:00:00 2024 GMT
        Subject: CN=8adb5d490a4e45e544bfb126c462a7b68094238f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:f2:f9:17:cd:f1:2c:4c:6b:8c:e2:42:93:
                    39:f3:8d:db:ef:87:72:43:8d:4e:72:b7:13:6a:5e:
                    3d:6f:b0:55:e9:55:c9:1c:12:49:d8:82:8c:99:f8:
                    49:87:ec:5b:5b:ae:e6:88:22:0c:0d:db:1e:52:cc:
                    ad:b7:d0:ec:1e:57:3b:0c:13:09:ab:78:13:95:e9:
                    a0:dd:8e:05:77:4f:cc:25:de:b0:69:b2:86:1d:a7:
                    3f:bd:a7:7b:b0:60:cc:82:97:f9:d1:e2:92:76:b2:
                    94:65:e5:4d:67:b3:aa:2c:ba:d1:0e:72:61:22:de:
                    bc:13:fd:1f:0a:f8:fa:8b:c2:7d:5a:f1:d6:8e:65:
                    4b:2d:03:6e:b4:79:11:95:f3:bc:ae:9b:9d:8b:e5:
                    f7:d6:e9:f3:19:59:ff:46:c7:a8:9d:59:af:76:24:
                    87:29:45:1b:ae:af:1c:f5:39:e1:cd:0e:f7:69:e6:
                    63:a5:e9:40:03:d0:4b:0d:85:e6:b7:b7:25:66:7c:
                    08:d6:ee:d1:4e:c8:ac:00:7c:69:7e:19:2c:ca:0c:
                    bb:11:a2:84:dc:78:ae:47:74:bd:df:d7:bd:35:4c:
                    be:70:14:ef:0c:44:46:e1:68:b5:39:de:8b:45:13:
                    41:14:a2:ed:67:b8:41:e7:17:ef:4d:a6:67:6b:9b:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:85:FC:C8:2F:0C:CB:23:D6:AD:44:FD:A4:D2:54:37:34:0B:A0:DA
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/8adb5d490a4e45e544bfb126c462a7b68094238f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.88.0/22
                IPv6:
                  2801:114::/44
                  2803:9310::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:b0:b6:7e:7b:17:e9:7e:c6:72:92:69:9c:d7:06:07:ad:
         0b:61:8b:de:a7:46:6b:6d:2e:88:40:14:8b:61:a9:5f:bb:03:
         66:3d:4d:a7:35:87:af:9d:c2:4f:2e:55:7e:cf:2c:91:13:8c:
         8e:e8:5e:4b:a6:04:d4:fe:d0:61:36:37:c4:59:34:91:0a:2b:
         f7:8d:2d:8e:04:d7:8c:f7:e8:22:73:fb:17:2e:34:72:3a:80:
         eb:7e:83:b6:2f:60:89:ee:57:3d:d9:73:32:42:7d:a5:54:5c:
         dc:ae:cc:4b:78:8b:86:92:ad:26:f0:0b:ba:ce:0b:72:6f:e0:
         9c:e1:8c:2b:e1:17:48:a4:fb:27:78:c7:e5:06:38:34:c0:00:
         59:5e:ba:69:23:49:7b:5d:ea:eb:f3:d4:08:c5:92:80:09:45:
         ac:67:5a:cd:43:2f:5e:5d:8a:1c:bd:10:b1:67:fd:24:21:da:
         6e:3d:fa:56:a8:e4:64:fe:ad:c5:79:45:a4:34:c5:17:70:8d:
         59:e0:35:c2:b5:79:3d:c3:cb:40:1c:6c:c7:b2:31:7c:6b:35:
         42:5b:46:cf:c6:ea:e7:41:15:d9:04:45:e9:22:a8:da:67:2f:
         90:a6:8f:a2:63:a1:45:3d:f1:e1:1f:48:d7:ef:14:e4:69:2c:
         da:5c:c5:46
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDAwddMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NGFhZjlkNzBjMjE2NTUxYjFiNjE5YmM0Yzg1NzNjM2IzZTFiNTIwHhcNMjEwOTMw
MDMwMDAwWhcNMjQwMTE1MDMwMDAwWjAzMTEwLwYDVQQDEyg4YWRiNWQ0OTBhNGU0
NWU1NDRiZmIxMjZjNDYyYTdiNjgwOTQyMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoj/y+RfN8SxMa4ziQpM5843b74dyQ41OcrcTal49b7BV6VXJ
HBJJ2IKMmfhJh+xbW67miCIMDdseUsytt9DsHlc7DBMJq3gTlemg3Y4Fd0/MJd6w
abKGHac/vad7sGDMgpf50eKSdrKUZeVNZ7OqLLrRDnJhIt68E/0fCvj6i8J9WvHW
jmVLLQNutHkRlfO8rpudi+X31unzGVn/RseonVmvdiSHKUUbrq8c9TnhzQ73aeZj
pelAA9BLDYXmt7clZnwI1u7RTsisAHxpfhksygy7EaKE3HiuR3S939e9NUy+cBTv
DERG4Wi1Od6LRRNBFKLtZ7hB5xfvTaZna5upqwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFFmF/MgvDMsj1q1E/aTSVDc0C6DaMB8GA1UdIwQYMBaAFISm8Fb2MnQz/0/c
UNnzstjFz/6bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY0YWFm
OWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2VhZmY4OWEtODU3YS00ODcwLTgxMmMtN2E1NzRk
ZTE2YjI2LzhhZGI1ZDQ5MGE0ZTQ1ZTU0NGJmYjEyNmM0NjJhN2I2ODA5NDIzOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZWFmZjg5YS04NTdhLTQ4NzAtODEyYy03YTU3
NGRlMTZiMjYvNDY0YWFmOWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwDAQCAAEwBgMEAi3jWDAWBAIAAjAQAwcEKAEBFAAAAwUAKAOTEDANBgkqhkiG
9w0BAQsFAAOCAQEAkK2wtn57F+l+xnKSaZzXBgetC2GL3qdGa20uiEAUi2GpX7sD
Zj1NpzWHr53CTy5Vfs8skROMjuheS6YE1P7QYTY3xFk0kQor940tjgTXjPfoInP7
Fy40cjqA636Dti9gie5XPdlzMkJ9pVRc3K7MS3iLhpKtJvALus4Lcm/gnOGMK+EX
SKT7J3jH5QY4NMAAWV66aSNJe13q6/PUCMWSgAlFrGdazUMvXl2KHL0QsWf9JCHa
bj36VqjkZP6txXlFpDTFF3CNWeA1wrV5PcPLQBxsx7IxfGs1QltGz8bq50EV2QRF
6SKo2mcvkKaPomOhRT3x4R9I1+8U5Gks2lzFRg==
-----END CERTIFICATE-----