Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/6a5bdb5c18af7ce0870071141f5634212c766acf.roa
File:                     6a5bdb5c18af7ce0870071141f5634212c766acf.roa (raw, json)
Hash identifier:          YMtqaWFcGqRkAVEiUUtwyFCpKPhU2HSQvb8z2dO3c88=
Subject key identifier:   B9:17:20:C5:D5:17:DA:86:AE:49:B0:1F:3E:2E:3A:14:E2:9E:08:FD
Certificate issuer:       /CN=e5542707278f94f915cf6c50f07f27b7ca4d3a19
Certificate serial:       0BC616
Authority key identifier: E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/6a5bdb5c18af7ce0870071141f5634212c766acf.roa
Signing time:             Wed 24 Mar 2021 14:30:50 +0000
ROA not before:           Wed 24 Mar 2021 14:30:50 +0000
ROA not after:            Tue 24 Mar 2026 14:30:50 +0000
asID:                     267791
IP address blocks:        45.172.176.0/23 maxlen: 23
                          2803:afa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771606 (0xbc616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5542707278f94f915cf6c50f07f27b7ca4d3a19
        Validity
            Not Before: Mar 24 14:30:50 2021 GMT
            Not After : Mar 24 14:30:50 2026 GMT
        Subject: CN=6a5bdb5c18af7ce0870071141f5634212c766acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:3a:a9:15:6b:63:57:45:89:98:b1:55:b4:
                    e9:0f:e5:6c:cb:eb:79:4f:31:40:dd:71:b8:5d:c5:
                    46:89:ea:02:9d:4f:41:02:1a:f8:8f:52:b5:2e:70:
                    74:c3:27:84:b4:ea:21:c1:fc:65:f3:33:f3:88:1e:
                    da:31:39:52:b2:d2:25:b5:f2:a2:10:55:e2:3d:30:
                    ce:5f:e1:83:ab:38:0e:4c:b4:86:8d:65:23:40:89:
                    d2:65:17:fa:4e:78:d7:5a:3d:9d:18:b9:84:c6:e6:
                    8a:ab:5b:6f:fb:a0:29:88:d2:b3:17:64:45:30:ce:
                    23:50:47:e3:76:85:90:38:e2:14:a3:12:40:3c:e2:
                    bf:76:33:ae:ae:cb:f2:29:42:23:e0:ee:21:ed:71:
                    72:56:49:92:68:d4:57:5e:0a:1f:d4:bb:01:8e:f4:
                    cf:4f:1d:8a:6c:36:ba:f7:f1:a7:a1:dc:c7:c4:d3:
                    29:4c:94:0b:b7:6d:43:1f:3f:ef:b8:69:56:de:60:
                    d7:e3:ad:e5:e0:38:a3:06:65:86:e0:cf:c9:73:20:
                    6f:e3:65:db:bd:37:29:37:3e:52:82:a4:57:9d:e9:
                    a3:85:d5:60:e4:3b:d3:fa:3e:83:77:0d:fb:3e:bf:
                    58:07:53:0d:91:3b:26:db:aa:67:af:97:9e:0f:c1:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:20:C5:D5:17:DA:86:AE:49:B0:1F:3E:2E:3A:14:E2:9E:08:FD
            X509v3 Authority Key Identifier:
                keyid:E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/6a5bdb5c18af7ce0870071141f5634212c766acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/e5542707278f94f915cf6c50f07f27b7ca4d3a19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.176.0/23
                IPv6:
                  2803:afa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:34:50:42:ce:65:94:c8:17:13:cd:3a:31:6b:7a:56:02:82:
         70:33:e5:e9:03:a2:6c:f6:e8:23:76:59:97:a5:7c:66:f9:7e:
         52:4c:67:b1:3f:d2:04:ff:ee:87:3e:62:c3:99:ef:90:fc:63:
         12:58:e0:3e:b3:c4:15:1a:3e:63:1c:a2:d2:1c:18:5c:ec:5d:
         78:0e:6e:b9:0e:00:a2:f4:6a:3c:1f:3e:b0:bf:5a:03:48:d0:
         8e:bc:b0:2c:6e:b0:51:8d:58:e6:b6:06:12:db:30:a2:92:87:
         a4:a4:9c:44:00:1d:62:f1:cd:0f:e9:5f:c7:2b:7e:bc:27:e3:
         4a:24:6a:54:ab:9d:58:eb:01:d2:d3:0d:83:4e:de:4c:4a:f7:
         2a:40:b2:91:bc:61:30:cb:e3:34:8c:ca:85:f4:30:37:35:33:
         5b:03:62:23:b6:4f:ac:b6:bb:c1:f1:77:50:63:54:66:db:32:
         8e:48:95:19:d0:90:1d:a1:00:52:69:8f:34:d4:7f:04:29:eb:
         7c:89:e9:0c:ad:32:29:4f:ed:0f:91:85:24:24:47:2c:18:8d:
         07:24:9f:45:59:cd:49:08:9b:92:91:54:8a:cc:f0:41:21:96:
         cb:9b:a6:03:96:81:e1:81:8b:e8:75:2c:65:be:0e:51:d7:0c:
         24:23:42:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC8YWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
NTQyNzA3Mjc4Zjk0ZjkxNWNmNmM1MGYwN2YyN2I3Y2E0ZDNhMTkwHhcNMjEwMzI0
MTQzMDUwWhcNMjYwMzI0MTQzMDUwWjAzMTEwLwYDVQQDEyg2YTViZGI1YzE4YWY3
Y2UwODcwMDcxMTQxZjU2MzQyMTJjNzY2YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1oM6qRVrY1dFiZixVbTpD+Vsy+t5TzFA3XG4XcVGieoCnU9B
Ahr4j1K1LnB0wyeEtOohwfxl8zPziB7aMTlSstIltfKiEFXiPTDOX+GDqzgOTLSG
jWUjQInSZRf6TnjXWj2dGLmExuaKq1tv+6ApiNKzF2RFMM4jUEfjdoWQOOIUoxJA
POK/djOursvyKUIj4O4h7XFyVkmSaNRXXgof1LsBjvTPTx2KbDa69/GnodzHxNMp
TJQLt21DHz/vuGlW3mDX463l4DijBmWG4M/JcyBv42XbvTcpNz5SgqRXnemjhdVg
5DvT+j6Ddw37Pr9YB1MNkTsm26pnr5eeD8Ge0QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFLkXIMXVF9qGrkmwHz4uOhTingj9MB8GA1UdIwQYMBaAFOncZHSGVP6vtYOp
wKJWhVmG/RG5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTU1NDI3
MDcyNzhmOTRmOTE1Y2Y2YzUwZjA3ZjI3YjdjYTRkM2ExOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk4NTE5YzctZGNkZS00Y2RjLTkxMjEtZTRlZGUx
ZjhiZjRlLzZhNWJkYjVjMThhZjdjZTA4NzAwNzExNDFmNTYzNDIxMmM3NjZhY2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTg1MTljNy1kY2RlLTRjZGMtOTEyMS1lNGVk
ZTFmOGJmNGUvZTU1NDI3MDcyNzhmOTRmOTE1Y2Y2YzUwZjA3ZjI3YjdjYTRkM2Ex
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAS2ssDANBAIAAjAHAwUAKAOvoDANBgkqhkiG9w0BAQsFAAOC
AQEAiDRQQs5llMgXE806MWt6VgKCcDPl6QOibPboI3ZZl6V8Zvl+UkxnsT/SBP/u
hz5iw5nvkPxjEljgPrPEFRo+Yxyi0hwYXOxdeA5uuQ4AovRqPB8+sL9aA0jQjryw
LG6wUY1Y5rYGEtswopKHpKScRAAdYvHND+lfxyt+vCfjSiRqVKudWOsB0tMNg07e
TEr3KkCykbxhMMvjNIzKhfQwNzUzWwNiI7ZPrLa7wfF3UGNUZtsyjkiVGdCQHaEA
UmmPNNR/BCnrfInpDK0yKU/tD5GFJCRHLBiNBySfRVnNSQibkpFUiszwQSGWy5um
A5aB4YGL6HUsZb4OUdcMJCNC9w==
-----END CERTIFICATE-----