Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/fdc8562b4dcaa93760a0954bb2c092c5a6d84e84.roa
File:                     fdc8562b4dcaa93760a0954bb2c092c5a6d84e84.roa (raw, json)
Hash identifier:          ri35aapycwxKmTLVxvPBHYnvg0pYyHmTdqyq99p5gmg=
Subject key identifier:   E2:62:BB:16:12:99:0F:2B:65:AD:FF:E1:62:4B:6F:F7:B3:1E:AD:0D
Certificate issuer:       /CN=072ad058a243e3c867d14ea1739782d9765281de
Certificate serial:       0C0245
Authority key identifier: 56:19:28:47:8A:D1:F2:0D:1A:49:32:E5:B2:7E:CE:2E:3B:FF:7D:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/072ad058a243e3c867d14ea1739782d9765281de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/fdc8562b4dcaa93760a0954bb2c092c5a6d84e84.roa
Signing time:             Wed 24 Mar 2021 14:37:32 +0000
ROA not before:           Wed 24 Mar 2021 14:37:32 +0000
ROA not after:            Tue 24 Mar 2026 14:37:32 +0000
asID:                     52468
IP address blocks:        45.182.43.0/24 maxlen: 24
                          2803:b560::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787013 (0xc0245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072ad058a243e3c867d14ea1739782d9765281de
        Validity
            Not Before: Mar 24 14:37:32 2021 GMT
            Not After : Mar 24 14:37:32 2026 GMT
        Subject: CN=fdc8562b4dcaa93760a0954bb2c092c5a6d84e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:6d:eb:f2:ce:98:20:da:df:ae:f9:2e:a7:
                    f3:93:e6:3c:33:b7:65:fc:10:7c:55:47:bb:8a:4b:
                    81:2c:3c:87:75:3f:c8:36:32:0c:55:52:bf:da:37:
                    cc:53:9e:0a:24:e0:3a:6e:d3:42:ba:d0:2e:4f:84:
                    e1:51:b3:a2:48:7b:35:68:40:d9:cb:b1:84:de:77:
                    5f:08:1d:2f:b8:39:e3:b0:f0:06:2e:60:1b:35:19:
                    cb:7a:00:21:0f:72:57:69:4e:5d:e3:e5:03:54:3e:
                    d4:a6:03:75:f1:33:ae:89:59:81:42:c7:0e:c2:3b:
                    b9:d6:05:cb:9e:29:d5:dd:6c:12:cb:24:f5:6c:94:
                    fe:dd:cb:2f:86:02:7e:d4:12:07:7d:5e:c4:e8:72:
                    20:dd:27:02:7d:6c:cc:a6:33:6a:05:47:0c:fd:19:
                    34:9e:40:2d:a3:e9:71:95:8c:5f:7d:f6:fe:f6:a3:
                    71:13:fe:4f:21:2b:c6:8f:29:c3:cf:de:bf:20:5c:
                    8b:03:aa:b9:2b:b0:2d:16:3c:58:42:60:c4:b7:b4:
                    0b:36:5e:3f:bd:f8:37:be:c6:ac:2b:5d:5c:6a:63:
                    32:0f:31:59:6a:f7:04:f4:3d:81:49:ad:4c:77:46:
                    e8:09:22:d0:bb:ec:e3:d1:c3:56:86:1d:46:0a:ab:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:BB:16:12:99:0F:2B:65:AD:FF:E1:62:4B:6F:F7:B3:1E:AD:0D
            X509v3 Authority Key Identifier:
                keyid:56:19:28:47:8A:D1:F2:0D:1A:49:32:E5:B2:7E:CE:2E:3B:FF:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/072ad058a243e3c867d14ea1739782d9765281de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/fdc8562b4dcaa93760a0954bb2c092c5a6d84e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9764d977-b72f-4580-9e0e-7e7a7b74d521/072ad058a243e3c867d14ea1739782d9765281de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.43.0/24
                IPv6:
                  2803:b560::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:4d:a9:c1:88:50:d2:94:e2:bd:ef:4d:44:bc:2e:d2:87:
         dc:b0:5f:99:77:cd:81:39:74:e0:40:6f:a9:e1:df:42:a8:dd:
         22:3e:2c:d1:7c:58:9a:2a:3c:de:e5:ba:84:9c:b5:93:ee:0a:
         20:f9:46:22:e6:c5:41:e5:6e:e3:28:62:6e:86:31:fb:b1:95:
         49:83:31:90:8d:a5:b2:07:a0:59:5f:86:6c:a9:fe:56:d8:2d:
         e2:b9:a1:a6:48:7e:c5:44:ea:5d:52:fd:9c:d4:70:12:ad:e5:
         d1:2b:24:cb:50:17:c3:d3:7e:1a:ee:21:3c:20:9f:1c:cb:cd:
         d1:09:04:c0:c2:94:fe:92:0d:40:b8:59:f3:38:00:fc:41:60:
         38:3c:e4:69:14:b8:47:53:05:56:62:1d:0d:ed:72:74:3c:50:
         2c:2b:4f:d7:08:5a:f8:7c:e6:db:61:af:31:40:f1:79:65:a9:
         d0:56:d9:cb:e3:39:69:74:19:eb:a7:42:d9:5b:81:3b:10:aa:
         61:b5:4c:3e:f6:36:31:30:4f:27:f9:c2:ec:6e:01:55:83:06:
         b3:90:3c:f1:1e:6a:fd:c2:41:50:fd:9b:74:11:68:23:18:07:
         fc:95:4c:61:53:9f:03:b0:83:41:d3:3f:30:cd:fc:3e:cc:db:
         9c:1c:07:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDAJFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
MmFkMDU4YTI0M2UzYzg2N2QxNGVhMTczOTc4MmQ5NzY1MjgxZGUwHhcNMjEwMzI0
MTQzNzMyWhcNMjYwMzI0MTQzNzMyWjAzMTEwLwYDVQQDEyhmZGM4NTYyYjRkY2Fh
OTM3NjBhMDk1NGJiMmMwOTJjNWE2ZDg0ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0v9t6/LOmCDa3675Lqfzk+Y8M7dl/BB8VUe7ikuBLDyHdT/I
NjIMVVK/2jfMU54KJOA6btNCutAuT4ThUbOiSHs1aEDZy7GE3ndfCB0vuDnjsPAG
LmAbNRnLegAhD3JXaU5d4+UDVD7UpgN18TOuiVmBQscOwju51gXLninV3WwSyyT1
bJT+3csvhgJ+1BIHfV7E6HIg3ScCfWzMpjNqBUcM/Rk0nkAto+lxlYxfffb+9qNx
E/5PISvGjynDz96/IFyLA6q5K7AtFjxYQmDEt7QLNl4/vfg3vsasK11camMyDzFZ
avcE9D2BSa1Md0boCSLQu+zj0cNWhh1GCqtlIwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOJiuxYSmQ8rZa3/4WJLb/ezHq0NMB8GA1UdIwQYMBaAFFYZKEeK0fINGkky
5bJ+zi47/30nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDcyYWQw
NThhMjQzZTNjODY3ZDE0ZWExNzM5NzgyZDk3NjUyODFkZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc2NGQ5NzctYjcyZi00NTgwLTllMGUtN2U3YTdi
NzRkNTIxL2ZkYzg1NjJiNGRjYWE5Mzc2MGEwOTU0YmIyYzA5MmM1YTZkODRlODQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzY0ZDk3Ny1iNzJmLTQ1ODAtOWUwZS03ZTdh
N2I3NGQ1MjEvMDcyYWQwNThhMjQzZTNjODY3ZDE0ZWExNzM5NzgyZDk3NjUyODFk
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAC22KzANBAIAAjAHAwUAKAO1YDANBgkqhkiG9w0BAQsFAAOC
AQEABQ5NqcGIUNKU4r3vTUS8LtKH3LBfmXfNgTl04EBvqeHfQqjdIj4s0XxYmio8
3uW6hJy1k+4KIPlGIubFQeVu4yhiboYx+7GVSYMxkI2lsgegWV+GbKn+Vtgt4rmh
pkh+xUTqXVL9nNRwEq3l0Ssky1AXw9N+Gu4hPCCfHMvN0QkEwMKU/pINQLhZ8zgA
/EFgODzkaRS4R1MFVmIdDe1ydDxQLCtP1wha+Hzm22GvMUDxeWWp0FbZy+M5aXQZ
66dC2VuBOxCqYbVMPvY2MTBPJ/nC7G4BVYMGs5A88R5q/cJBUP2bdBFoIxgH/JVM
YVOfA7CDQdM/MM38PszbnBwH+A==
-----END CERTIFICATE-----