Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/a2c54d72d0be65f3e44098f15faf678a43cae24c.roa
File:                     a2c54d72d0be65f3e44098f15faf678a43cae24c.roa (raw, json)
Hash identifier:          ErscMFYbNQuZ/yA5R9ZmjRZXlRnE01H5nC7R0CdtD8I=
Subject key identifier:   9A:58:E0:D8:E1:A2:7E:AD:2A:C7:D8:C0:11:53:9F:74:FC:46:B7:06
Certificate issuer:       /CN=764f53a9efe1db2fab97687005b125dfe130baea
Certificate serial:       110D67
Authority key identifier: 2F:62:61:05:27:11:8C:67:B3:D8:B3:FD:63:58:20:18:D3:9F:45:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/764f53a9efe1db2fab97687005b125dfe130baea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/a2c54d72d0be65f3e44098f15faf678a43cae24c.roa
Signing time:             Tue 09 Aug 2022 02:01:31 +0000
ROA not before:           Wed 24 Mar 2021 14:41:07 +0000
ROA not after:            Tue 24 Mar 2026 14:41:07 +0000
asID:                     271785
IP address blocks:        177.184.92.0/22 maxlen: 24
                          2803:5fe0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117543 (0x110d67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f53a9efe1db2fab97687005b125dfe130baea
        Validity
            Not Before: Mar 24 14:41:07 2021 GMT
            Not After : Mar 24 14:41:07 2026 GMT
        Subject: CN=a2c54d72d0be65f3e44098f15faf678a43cae24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:09:16:7c:21:e5:34:6b:8e:4d:71:a9:81:
                    ba:d5:81:49:4b:a7:a7:f8:de:d4:8c:f3:fb:ad:85:
                    5d:f9:9e:5d:90:fc:2b:23:16:a3:67:c5:d5:a5:68:
                    3c:ea:7c:92:05:67:74:20:b8:f2:60:6d:d1:86:9e:
                    b2:d7:5d:5c:07:b0:05:dc:4e:a9:c6:d4:42:75:3a:
                    9a:fe:20:86:b7:d5:68:b1:02:03:98:68:04:6c:c8:
                    76:05:ca:c5:7b:b5:ea:fa:de:aa:b3:c8:f4:3a:be:
                    25:f9:eb:32:c4:12:0a:64:a9:5d:01:05:93:e7:1c:
                    e1:90:88:80:9c:28:eb:5d:0e:02:9b:17:6f:32:89:
                    a9:42:29:31:ba:43:ba:45:f6:5a:21:75:99:28:f6:
                    b0:b2:63:b7:b3:39:33:02:8a:16:46:47:01:fc:12:
                    e1:d2:40:a7:b1:36:3e:75:75:eb:ff:b3:3c:c8:de:
                    ec:d3:7a:85:9f:24:b8:74:38:13:40:84:e7:c1:cb:
                    3b:78:2d:46:eb:b3:1c:bf:db:62:57:d8:f3:41:f4:
                    a8:59:7c:f0:3d:8c:d9:2a:bd:ff:1d:ce:55:a3:24:
                    ac:05:ab:8f:d1:38:08:a8:bd:aa:26:81:da:aa:67:
                    dd:66:f2:7a:81:e8:f3:53:f3:85:a2:86:d4:8e:20:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:58:E0:D8:E1:A2:7E:AD:2A:C7:D8:C0:11:53:9F:74:FC:46:B7:06
            X509v3 Authority Key Identifier:
                keyid:2F:62:61:05:27:11:8C:67:B3:D8:B3:FD:63:58:20:18:D3:9F:45:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/764f53a9efe1db2fab97687005b125dfe130baea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/a2c54d72d0be65f3e44098f15faf678a43cae24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/764f53a9efe1db2fab97687005b125dfe130baea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.92.0/22
                IPv6:
                  2803:5fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:a7:a3:0a:ed:af:7a:27:4c:75:50:c6:6e:fb:48:50:eb:6a:
         53:d1:3c:ee:1c:93:2e:09:f9:42:07:86:23:38:0e:c1:4c:50:
         f1:f3:69:f9:bf:e1:5a:f3:28:13:d5:02:39:ff:54:3f:1b:25:
         bd:fb:3c:40:5f:77:43:91:14:eb:1f:cf:e2:7d:1f:1a:dd:bb:
         4e:12:f7:9f:ce:1e:74:50:5a:5b:78:60:27:7d:da:a1:f7:c9:
         53:92:89:18:f4:b3:af:68:bb:cf:18:61:01:e3:1b:79:e8:1f:
         9b:7e:1d:57:65:42:ab:24:46:71:56:d8:47:f7:ba:a9:48:e5:
         46:66:c2:17:15:83:b2:70:25:1b:f3:f5:23:99:c4:fa:73:9c:
         22:77:fb:9f:0d:93:c4:7d:ac:a2:f5:b0:fc:74:4c:d0:ae:59:
         97:cf:45:51:17:7a:6b:2f:55:c2:29:91:5b:64:da:b8:12:d9:
         e5:c1:7e:72:ba:b5:0b:3b:7c:d6:9b:ef:9d:1f:8e:69:44:da:
         b4:2b:8e:c6:f9:17:28:10:5a:af:3f:e1:5e:a5:cc:83:ff:fd:
         39:88:ab:46:66:52:05:d2:3d:01:3a:45:c7:71:f2:44:00:16:
         96:3b:3b:56:aa:d4:3e:6b:58:8e:51:4c:a7:52:79:9b:98:72:
         df:5f:a1:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEQ1nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc2
NGY1M2E5ZWZlMWRiMmZhYjk3Njg3MDA1YjEyNWRmZTEzMGJhZWEwHhcNMjEwMzI0
MTQ0MTA3WhcNMjYwMzI0MTQ0MTA3WjAzMTEwLwYDVQQDEyhhMmM1NGQ3MmQwYmU2
NWYzZTQ0MDk4ZjE1ZmFmNjc4YTQzY2FlMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkcQJFnwh5TRrjk1xqYG61YFJS6en+N7UjPP7rYVd+Z5dkPwr
IxajZ8XVpWg86nySBWd0ILjyYG3Rhp6y111cB7AF3E6pxtRCdTqa/iCGt9VosQID
mGgEbMh2BcrFe7Xq+t6qs8j0Or4l+esyxBIKZKldAQWT5xzhkIiAnCjrXQ4Cmxdv
MompQikxukO6RfZaIXWZKPawsmO3szkzAooWRkcB/BLh0kCnsTY+dXXr/7M8yN7s
03qFnyS4dDgTQITnwcs7eC1G67Mcv9tiV9jzQfSoWXzwPYzZKr3/Hc5VoySsBauP
0TgIqL2qJoHaqmfdZvJ6gejzU/OFoobUjiA8PQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFJpY4Njhon6tKsfYwBFTn3T8RrcGMB8GA1UdIwQYMBaAFC9iYQUnEYxns9iz
/WNYIBjTn0WyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzY0ZjUz
YTllZmUxZGIyZmFiOTc2ODcwMDViMTI1ZGZlMTMwYmFlYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODczNzQ0YTUtN2Y3NS00MDFhLWJjY2UtNGE3N2U4
YjdmNGQ4L2EyYzU0ZDcyZDBiZTY1ZjNlNDQwOThmMTVmYWY2NzhhNDNjYWUyNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NzM3NDRhNS03Zjc1LTQwMWEtYmNjZS00YTc3
ZThiN2Y0ZDgvNzY0ZjUzYTllZmUxZGIyZmFiOTc2ODcwMDViMTI1ZGZlMTMwYmFl
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArG4XDANBAIAAjAHAwUAKANf4DANBgkqhkiG9w0BAQsFAAOC
AQEAYKejCu2veidMdVDGbvtIUOtqU9E87hyTLgn5QgeGIzgOwUxQ8fNp+b/hWvMo
E9UCOf9UPxslvfs8QF93Q5EU6x/P4n0fGt27ThL3n84edFBaW3hgJ33aoffJU5KJ
GPSzr2i7zxhhAeMbeegfm34dV2VCqyRGcVbYR/e6qUjlRmbCFxWDsnAlG/P1I5nE
+nOcInf7nw2TxH2sovWw/HRM0K5Zl89FURd6ay9VwimRW2TauBLZ5cF+crq1Czt8
1pvvnR+OaUTatCuOxvkXKBBarz/hXqXMg//9OYirRmZSBdI9ATpFx3HyRAAWljs7
VqrUPmtYjlFMp1J5m5hy31+hfQ==
-----END CERTIFICATE-----