Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92dd1711-26eb-4c9f-8998-9f3a37eec05a/879cecbfae140f4bb4a42d88ca548417dd9e18b5.roa
File:                     879cecbfae140f4bb4a42d88ca548417dd9e18b5.roa (raw, json)
Hash identifier:          8vi+pNs6ubslhPlSAsVXGEvEaB6qk/YZoZGC8ivZlYw=
Subject key identifier:   5E:3F:A2:4A:65:8F:D9:6A:F3:2A:13:1A:69:9C:48:F6:F1:9E:BF:50
Certificate issuer:       /CN=fd25c906bff41fcb22192b97e84d90146dde8500
Certificate serial:       163888
Authority key identifier: 69:F1:CA:ED:24:82:3D:25:92:A4:37:16:94:97:BA:E3:4D:BA:E5:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c906bff41fcb22192b97e84d90146dde8500.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92dd1711-26eb-4c9f-8998-9f3a37eec05a/879cecbfae140f4bb4a42d88ca548417dd9e18b5.roa
Signing time:             Wed 13 Jul 2022 20:18:15 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     269798
IP address blocks:        45.186.20.0/22 maxlen: 22
                          2803:8b60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456264 (0x163888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd25c906bff41fcb22192b97e84d90146dde8500
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=879cecbfae140f4bb4a42d88ca548417dd9e18b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:db:ea:b3:1d:12:e9:af:4f:4e:33:22:f3:
                    18:ce:6a:85:4c:1e:97:5e:33:78:e1:b0:ac:c6:69:
                    2b:84:3c:52:88:3f:7e:da:cf:62:0b:1c:eb:b2:48:
                    80:46:f5:26:84:92:31:a5:b9:be:67:eb:a8:9a:0f:
                    03:78:3d:19:0b:79:4c:cd:87:a5:06:0e:e8:c8:22:
                    f5:8d:36:b1:ea:ed:1a:de:3e:19:05:54:9d:59:a8:
                    40:cc:07:e4:5a:4e:a8:29:36:3d:1b:9d:d6:cb:39:
                    e6:ea:42:55:19:fa:99:c7:34:74:1a:a8:4b:a3:53:
                    b3:32:0e:a3:d3:c6:de:64:93:df:f5:1a:3c:e3:da:
                    c8:5a:db:40:e0:2f:9e:c2:d5:37:d5:6c:61:97:97:
                    83:16:f0:be:eb:0d:6d:8d:33:16:c2:07:f1:7e:31:
                    27:1c:0d:fa:be:51:dc:de:b5:3f:37:af:8c:58:bd:
                    9e:e1:a8:24:69:7e:95:77:80:03:20:6a:94:25:91:
                    ef:31:1e:48:9e:e6:14:9c:24:b2:89:11:4f:25:bc:
                    7f:65:f5:56:dd:33:1f:09:5a:4d:7a:06:75:38:89:
                    92:08:c7:f1:cb:73:78:cc:77:1e:9f:bd:49:9e:84:
                    67:f1:06:bb:f5:eb:1d:ce:9e:d9:43:c8:ec:5e:73:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3F:A2:4A:65:8F:D9:6A:F3:2A:13:1A:69:9C:48:F6:F1:9E:BF:50
            X509v3 Authority Key Identifier:
                keyid:69:F1:CA:ED:24:82:3D:25:92:A4:37:16:94:97:BA:E3:4D:BA:E5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c906bff41fcb22192b97e84d90146dde8500.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92dd1711-26eb-4c9f-8998-9f3a37eec05a/879cecbfae140f4bb4a42d88ca548417dd9e18b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92dd1711-26eb-4c9f-8998-9f3a37eec05a/fd25c906bff41fcb22192b97e84d90146dde8500.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.20.0/22
                IPv6:
                  2803:8b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:05:ae:56:ee:81:a3:81:6b:75:9e:6b:a9:a0:45:f4:25:
         b4:13:40:5e:65:1a:9b:df:af:c9:e2:18:dd:d4:a0:e8:03:b8:
         12:c8:67:f0:62:14:bc:11:5c:bf:2e:1b:48:84:59:92:49:da:
         c1:2b:71:70:61:cd:e0:64:a1:8c:c7:fd:86:4e:8e:c2:d5:46:
         0c:ea:c1:27:80:87:ca:d4:ad:40:f8:61:3c:45:40:f6:97:f7:
         73:bf:2b:f1:bb:2f:1d:7c:b5:54:65:7e:d0:21:40:12:9c:7e:
         19:f6:5a:77:cf:70:ae:37:f1:83:53:ba:20:2f:96:89:fe:ac:
         87:f1:eb:dd:ec:69:07:46:dd:6f:e6:fb:79:b0:18:ff:53:76:
         d7:e4:31:8e:bd:6a:55:4c:e7:c9:ab:18:6a:9d:30:72:88:e4:
         d6:da:e2:ac:7c:7f:2c:e0:2f:ce:cc:e6:84:16:e3:a0:2e:4c:
         58:55:89:28:34:24:3f:3d:b6:00:bb:b0:70:7c:3a:8d:eb:37:
         a8:75:ee:aa:f2:1d:92:be:87:82:ec:41:cd:9b:c5:c5:fb:9f:
         fd:8a:18:ad:bb:6d:74:75:5e:3d:23:95:55:25:7b:40:87:05:
         49:4d:be:64:c1:e7:4b:32:7a:09:8f:f2:70:1f:cf:4e:f4:de:
         93:39:71:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFjiIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
MjVjOTA2YmZmNDFmY2IyMjE5MmI5N2U4NGQ5MDE0NmRkZTg1MDAwHhcNMjIwNzEz
MDMwMDAwWhcNMjQwNzEzMDMwMDAwWjAzMTEwLwYDVQQDEyg4NzljZWNiZmFlMTQw
ZjRiYjRhNDJkODhjYTU0ODQxN2RkOWUxOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgsDb6rMdEumvT04zIvMYzmqFTB6XXjN44bCsxmkrhDxSiD9+
2s9iCxzrskiARvUmhJIxpbm+Z+uomg8DeD0ZC3lMzYelBg7oyCL1jTax6u0a3j4Z
BVSdWahAzAfkWk6oKTY9G53Wyznm6kJVGfqZxzR0GqhLo1OzMg6j08beZJPf9Ro8
49rIWttA4C+ewtU31Wxhl5eDFvC+6w1tjTMWwgfxfjEnHA36vlHc3rU/N6+MWL2e
4agkaX6Vd4ADIGqUJZHvMR5InuYUnCSyiRFPJbx/ZfVW3TMfCVpNegZ1OImSCMfx
y3N4zHcen71JnoRn8Qa79esdzp7ZQ8jsXnNDOQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFF4/okplj9lq8yoTGmmcSPbxnr9QMB8GA1UdIwQYMBaAFGnxyu0kgj0lkqQ3
FpSXuuNNuuWAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyNWM5
MDZiZmY0MWZjYjIyMTkyYjk3ZTg0ZDkwMTQ2ZGRlODUwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTJkZDE3MTEtMjZlYi00YzlmLTg5OTgtOWYzYTM3
ZWVjMDVhLzg3OWNlY2JmYWUxNDBmNGJiNGE0MmQ4OGNhNTQ4NDE3ZGQ5ZTE4YjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MmRkMTcxMS0yNmViLTRjOWYtODk5OC05ZjNh
MzdlZWMwNWEvZmQyNWM5MDZiZmY0MWZjYjIyMTkyYjk3ZTg0ZDkwMTQ2ZGRlODUw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26FDANBAIAAjAHAwUAKAOLYDANBgkqhkiG9w0BAQsFAAOC
AQEAoe0FrlbugaOBa3Wea6mgRfQltBNAXmUam9+vyeIY3dSg6AO4Eshn8GIUvBFc
vy4bSIRZkknawStxcGHN4GShjMf9hk6OwtVGDOrBJ4CHytStQPhhPEVA9pf3c78r
8bsvHXy1VGV+0CFAEpx+GfZad89wrjfxg1O6IC+Wif6sh/Hr3expB0bdb+b7ebAY
/1N21+Qxjr1qVUznyasYap0wcojk1trirHx/LOAvzszmhBbjoC5MWFWJKDQkPz22
ALuwcHw6jes3qHXuqvIdkr6HguxBzZvFxfuf/YoYrbttdHVePSOVVSV7QIcFSU2+
ZMHnSzJ6CY/ycB/PTvTekzlxZQ==
-----END CERTIFICATE-----