Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/fcc3fe4bef959530aa60c287753fca707ed39f1f.roa
File:                     fcc3fe4bef959530aa60c287753fca707ed39f1f.roa (raw, json)
Hash identifier:          sJMYLGEySFVyGpn66oiY5VdFkVEd7VMTEM8bglgABPg=
Subject key identifier:   2C:25:57:E1:B8:E0:6F:77:DB:EE:1F:D5:0B:52:44:E1:6F:52:C4:44
Certificate issuer:       /CN=0713c7b2b5cb013b7f19fe45deaa596902879bea
Certificate serial:       0925
Authority key identifier: 83:D5:28:4F:08:19:A0:1F:49:22:0A:F2:0E:CF:5F:8B:81:A1:AA:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0713c7b2b5cb013b7f19fe45deaa596902879bea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/fcc3fe4bef959530aa60c287753fca707ed39f1f.roa
Signing time:             Mon 25 Apr 2022 03:15:07 +0000
ROA not before:           Mon 25 Apr 2022 03:00:00 +0000
ROA not after:            Thu 25 Apr 2024 03:00:00 +0000
asID:                     265706
IP address blocks:        45.5.28.0/22 maxlen: 24
                          2803:89c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0713c7b2b5cb013b7f19fe45deaa596902879bea
        Validity
            Not Before: Apr 25 03:00:00 2022 GMT
            Not After : Apr 25 03:00:00 2024 GMT
        Subject: CN=fcc3fe4bef959530aa60c287753fca707ed39f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:b8:af:ba:ec:16:5a:83:77:d5:28:ee:f4:
                    44:b2:39:5d:e7:ea:2c:ae:20:9b:84:e0:6f:6a:1c:
                    2a:26:26:5b:08:85:5c:b8:d7:c6:81:d2:ca:ed:f3:
                    bc:11:10:bf:52:a3:5c:4f:1c:84:20:a6:91:6c:a6:
                    07:32:b0:6a:ce:85:86:3b:16:6a:04:1c:7a:1f:87:
                    c5:0e:3d:b8:d8:fe:c2:dc:85:be:dc:c4:e5:49:4a:
                    5f:e3:14:d9:b4:7d:b9:5d:b2:70:0b:f3:f8:fa:b8:
                    f0:fd:17:56:9a:7a:52:34:9c:0d:08:5d:3a:ba:55:
                    95:24:cc:81:68:79:a9:df:0d:72:35:56:6c:b5:20:
                    ec:2d:5a:54:e4:db:52:dd:21:ce:c3:5d:99:aa:4d:
                    2b:01:e9:2a:a8:c3:57:b7:9e:38:0e:b7:b1:05:c1:
                    4c:bf:07:74:a1:4f:f2:43:b5:77:da:9a:3c:59:e8:
                    27:6a:18:34:37:8f:f1:02:31:e6:f1:39:89:b8:0e:
                    39:ab:56:19:bc:4d:e7:11:49:46:07:83:a3:8d:b8:
                    46:7e:b4:dd:8e:12:a6:15:de:5e:2f:d4:bb:d7:8d:
                    f2:9b:ee:93:10:ff:72:69:19:d0:63:50:d7:ff:b9:
                    69:0d:da:4a:db:53:4e:25:05:31:15:94:b8:21:07:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:57:E1:B8:E0:6F:77:DB:EE:1F:D5:0B:52:44:E1:6F:52:C4:44
            X509v3 Authority Key Identifier:
                keyid:83:D5:28:4F:08:19:A0:1F:49:22:0A:F2:0E:CF:5F:8B:81:A1:AA:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0713c7b2b5cb013b7f19fe45deaa596902879bea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/fcc3fe4bef959530aa60c287753fca707ed39f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/986af92b-6eb3-4200-9568-8b52fc0b7311/0713c7b2b5cb013b7f19fe45deaa596902879bea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.28.0/22
                IPv6:
                  2803:89c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:61:77:fb:ca:2b:70:bc:ea:9a:c8:d6:38:dd:75:6a:f5:
         28:0d:1b:93:c3:69:a9:9d:4b:17:a6:5f:ec:48:8a:a7:59:30:
         3d:93:db:00:30:4b:af:11:bf:57:8b:c5:90:c8:e6:89:f0:4d:
         5b:4d:0f:96:e4:fe:dd:b5:4f:2c:e7:6c:4c:b5:c3:4c:d0:35:
         1d:82:a4:3d:b2:3a:86:1b:85:42:99:bc:d1:d8:58:5b:f1:40:
         83:eb:1a:f3:d0:e1:5b:a8:73:58:46:b0:17:7b:f9:0f:f6:19:
         dd:3b:7d:af:14:70:7b:b3:bc:f0:90:bb:76:1a:92:d7:92:f6:
         c9:e6:fd:dc:e8:cc:5f:60:21:14:99:b7:e9:e6:c3:31:78:a5:
         3d:5b:43:0f:c8:d5:73:30:fe:0e:4f:b4:82:57:50:ac:e8:0f:
         36:c9:55:f7:7d:61:fd:e0:f0:27:56:29:fc:b1:e1:88:1d:30:
         bd:29:34:32:99:cc:24:53:70:40:80:8b:60:56:fa:35:00:ee:
         ca:e2:2a:21:e9:f5:72:bc:32:7f:93:9e:41:83:1f:7b:b5:42:
         47:ca:01:09:96:dd:25:f7:b5:26:e5:a0:f1:31:70:c2:1c:f8:
         e2:66:87:9a:e7:5e:c4:8c:ef:b9:c7:e8:0d:5e:9a:2c:c4:1d:
         70:32:e7:42
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDcx
M2M3YjJiNWNiMDEzYjdmMTlmZTQ1ZGVhYTU5NjkwMjg3OWJlYTAeFw0yMjA0MjUw
MzAwMDBaFw0yNDA0MjUwMzAwMDBaMDMxMTAvBgNVBAMTKGZjYzNmZTRiZWY5NTk1
MzBhYTYwYzI4Nzc1M2ZjYTcwN2VkMzlmMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq4rivuuwWWoN31Sju9ESyOV3n6iyuIJuE4G9qHComJlsIhVy4
18aB0srt87wREL9So1xPHIQgppFspgcysGrOhYY7FmoEHHofh8UOPbjY/sLchb7c
xOVJSl/jFNm0fbldsnAL8/j6uPD9F1aaelI0nA0IXTq6VZUkzIFoeanfDXI1Vmy1
IOwtWlTk21LdIc7DXZmqTSsB6Sqow1e3njgOt7EFwUy/B3ShT/JDtXfamjxZ6Cdq
GDQ3j/ECMebxOYm4DjmrVhm8TecRSUYHg6ONuEZ+tN2OEqYV3l4v1LvXjfKb7pMQ
/3JpGdBjUNf/uWkN2krbU04lBTEVlLghB1wdAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQULCVX4bjgb3fb7h/VC1JE4W9SxEQwHwYDVR0jBBgwFoAUg9UoTwgZoB9JIgry
Ds9fi4GhqpgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wNzEzYzdi
MmI1Y2IwMTNiN2YxOWZlNDVkZWFhNTk2OTAyODc5YmVhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85ODZhZjkyYi02ZWIzLTQyMDAtOTU2OC04YjUyZmMw
YjczMTEvZmNjM2ZlNGJlZjk1OTUzMGFhNjBjMjg3NzUzZmNhNzA3ZWQzOWYxZi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzk4NmFmOTJiLTZlYjMtNDIwMC05NTY4LThiNTJm
YzBiNzMxMS8wNzEzYzdiMmI1Y2IwMTNiN2YxOWZlNDVkZWFhNTk2OTAyODc5YmVh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLQUcMA0EAgACMAcDBQAoA4nAMA0GCSqGSIb3DQEBCwUAA4IB
AQBF+mF3+8orcLzqmsjWON11avUoDRuTw2mpnUsXpl/sSIqnWTA9k9sAMEuvEb9X
i8WQyOaJ8E1bTQ+W5P7dtU8s52xMtcNM0DUdgqQ9sjqGG4VCmbzR2Fhb8UCD6xrz
0OFbqHNYRrAXe/kP9hndO32vFHB7s7zwkLt2GpLXkvbJ5v3c6MxfYCEUmbfp5sMx
eKU9W0MPyNVzMP4OT7SCV1Cs6A82yVX3fWH94PAnVin8seGIHTC9KTQymcwkU3BA
gItgVvo1AO7K4ioh6fVyvDJ/k55Bgx97tUJHygEJlt0l97Um5aDxMXDCHPjiZoea
517EjO+5x+gNXposxB1wMudC
-----END CERTIFICATE-----