Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/6f747ca41a5ba31f5988ffc904fa67c0785867ec.roa
File:                     6f747ca41a5ba31f5988ffc904fa67c0785867ec.roa (raw, json)
Hash identifier:          yiNvSGFVOZ5bW02uqRQ3Rf6mSZEoK0ytAU1wNdVtum4=
Subject key identifier:   FE:D1:D7:22:9D:8F:E4:0C:79:8B:0A:89:00:70:07:02:ED:21:7C:A7
Certificate issuer:       /CN=003287505ad0145205e27f7baa2a3101a343097b
Certificate serial:       16DD9A
Authority key identifier: D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/6f747ca41a5ba31f5988ffc904fa67c0785867ec.roa
Signing time:             Tue 13 Sep 2022 17:01:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265530
IP address blocks:        45.168.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498522 (0x16dd9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003287505ad0145205e27f7baa2a3101a343097b
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6f747ca41a5ba31f5988ffc904fa67c0785867ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:66:8b:6d:eb:b1:ff:69:2a:c4:56:9c:12:
                    92:a8:96:5e:cf:65:27:87:1e:7a:00:71:79:9c:12:
                    9c:a1:da:60:b7:2a:dc:34:e4:29:69:22:50:c4:88:
                    27:d8:3b:cc:b8:fc:24:94:e5:11:1d:15:2b:cb:12:
                    ac:c2:3a:8d:05:ed:91:a3:fe:cc:c5:b9:9b:bb:da:
                    3c:8d:de:b3:8a:b3:7d:40:24:bd:c9:7d:32:37:b8:
                    c5:d2:7b:0b:a3:a9:4a:1d:5d:a4:a5:63:e3:7b:d9:
                    a3:8f:a9:6b:d9:2b:0a:97:ed:17:1a:36:32:fe:97:
                    d3:45:ef:84:b1:49:9d:59:b7:0d:48:fd:80:b6:47:
                    6f:67:ba:6c:da:33:3c:9e:67:9d:10:b4:c1:80:b5:
                    e0:9a:d3:7b:48:e7:7d:cd:e4:64:3a:c9:e5:8c:c7:
                    3d:45:bd:11:0b:ba:89:d8:f3:f8:14:bd:07:20:b8:
                    90:12:92:5d:c6:22:42:2f:93:60:79:9c:0c:50:61:
                    6a:76:1f:d7:02:d5:21:e1:d6:ca:61:2f:5b:38:db:
                    e1:de:40:c5:38:43:8d:2c:aa:dc:36:45:c8:53:dc:
                    58:95:0d:88:79:e8:0a:93:be:8b:61:a0:4e:65:7d:
                    bb:5e:82:48:19:a4:85:0e:4c:8f:f9:4a:34:90:11:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:D7:22:9D:8F:E4:0C:79:8B:0A:89:00:70:07:02:ED:21:7C:A7
            X509v3 Authority Key Identifier:
                keyid:D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/6f747ca41a5ba31f5988ffc904fa67c0785867ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/003287505ad0145205e27f7baa2a3101a343097b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:e7:eb:90:ba:99:76:c3:7d:36:bb:a3:12:36:62:55:44:
         14:28:20:de:55:a5:00:75:4e:3e:96:1c:04:9f:bb:f0:f9:ab:
         cf:a4:54:6d:86:3c:51:10:84:8e:84:02:8e:b4:93:1a:9e:c1:
         13:b2:c3:25:c1:39:64:d8:06:18:4f:0d:c5:27:bd:a1:db:e4:
         21:82:e0:72:f7:46:11:e3:a5:68:d7:13:af:4c:66:75:84:67:
         f7:9c:57:8b:b3:e3:fb:fb:43:70:7c:9c:74:4e:10:63:49:d5:
         c0:52:4c:9a:ad:0e:54:9e:8d:39:29:9a:68:9f:7f:74:58:cd:
         ee:c9:96:ec:34:34:66:75:08:d2:36:7c:c5:b4:8a:f1:ef:5d:
         c8:39:09:24:27:a8:a8:8d:67:56:a9:15:8b:0e:9a:3a:30:b7:
         39:65:4c:3e:03:48:82:00:79:ab:c2:e3:ec:fe:83:34:28:be:
         e3:04:a4:da:2b:20:56:e6:bd:6a:8e:39:7a:56:0a:67:e5:b0:
         38:b9:72:25:94:dc:1a:8a:9b:19:fa:ce:2f:9c:89:93:7e:51:
         df:a6:0d:32:6f:a9:a0:f7:77:68:8e:83:76:d1:22:8d:45:59:
         7f:da:31:e0:83:4b:81:f4:a1:80:1d:1a:1b:92:61:86:52:2f:
         6e:f3:25:0d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFt2aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAw
MzI4NzUwNWFkMDE0NTIwNWUyN2Y3YmFhMmEzMTAxYTM0MzA5N2IwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2Zjc0N2NhNDFhNWJh
MzFmNTk4OGZmYzkwNGZhNjdjMDc4NTg2N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh3Nmi23rsf9pKsRWnBKSqJZez2Unhx56AHF5nBKcodpgtyrc
NOQpaSJQxIgn2DvMuPwklOURHRUryxKswjqNBe2Ro/7Mxbmbu9o8jd6zirN9QCS9
yX0yN7jF0nsLo6lKHV2kpWPje9mjj6lr2SsKl+0XGjYy/pfTRe+EsUmdWbcNSP2A
tkdvZ7ps2jM8nmedELTBgLXgmtN7SOd9zeRkOsnljMc9Rb0RC7qJ2PP4FL0HILiQ
EpJdxiJCL5NgeZwMUGFqdh/XAtUh4dbKYS9bONvh3kDFOEONLKrcNkXIU9xYlQ2I
eegKk76LYaBOZX27XoJIGaSFDkyP+Uo0kBELmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP7R1yKdj+QMeYsKiQBwBwLtIXynMB8GA1UdIwQYMBaAFNN3RKvwpX/6juNM
YjsrcWN0wHukMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDAzMjg3
NTA1YWQwMTQ1MjA1ZTI3ZjdiYWEyYTMxMDFhMzQzMDk3Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQ5NGIyOGYtM2EwYS00MWYwLWExYTktNDc3OTVm
YTgwNDQzLzZmNzQ3Y2E0MWE1YmEzMWY1OTg4ZmZjOTA0ZmE2N2MwNzg1ODY3ZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDk0YjI4Zi0zYTBhLTQxZjAtYTFhOS00Nzc5
NWZhODA0NDMvMDAzMjg3NTA1YWQwMTQ1MjA1ZTI3ZjdiYWEyYTMxMDFhMzQzMDk3
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2o7zANBgkqhkiG9w0BAQsFAAOCAQEAj9vn65C6mXbDfTa7
oxI2YlVEFCgg3lWlAHVOPpYcBJ+78Pmrz6RUbYY8URCEjoQCjrSTGp7BE7LDJcE5
ZNgGGE8NxSe9odvkIYLgcvdGEeOlaNcTr0xmdYRn95xXi7Pj+/tDcHycdE4QY0nV
wFJMmq0OVJ6NOSmaaJ9/dFjN7smW7DQ0ZnUI0jZ8xbSK8e9dyDkJJCeoqI1nVqkV
iw6aOjC3OWVMPgNIggB5q8Lj7P6DNCi+4wSk2isgVua9ao45elYKZ+WwOLlyJZTc
GoqbGfrOL5yJk35R36YNMm+poPd3aI6DdtEijUVZf9ox4INLgfShgB0aG5JhhlIv
bvMlDQ==
-----END CERTIFICATE-----