Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a21c49ac-04c7-4115-9aef-283dbeb7c7c3/f191a4935aa232756e431ab24f9c4c8f38b07381.roa
File:                     f191a4935aa232756e431ab24f9c4c8f38b07381.roa (raw, json)
Hash identifier:          PtLL75TvgprtzI/WguNoJj91hFp0O/JF8AxlWi/FPq4=
Subject key identifier:   72:DE:57:88:4B:2E:AC:EE:E0:4C:A2:60:5F:86:F0:D5:DD:03:7F:00
Certificate issuer:       /CN=72fc040100393daeefed35379988ef6bfab0df99
Certificate serial:       08C3A0
Authority key identifier: 6F:A5:23:65:89:39:E9:5E:A6:77:85:BF:2C:42:32:C2:89:65:5D:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72fc040100393daeefed35379988ef6bfab0df99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a21c49ac-04c7-4115-9aef-283dbeb7c7c3/f191a4935aa232756e431ab24f9c4c8f38b07381.roa
Signing time:             Wed 24 Mar 2021 14:30:07 +0000
ROA not before:           Wed 24 Mar 2021 14:30:07 +0000
ROA not after:            Tue 24 Mar 2026 14:30:07 +0000
asID:                     269839
IP address blocks:        45.188.160.0/22 maxlen: 24
                          2803:df60::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574368 (0x8c3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72fc040100393daeefed35379988ef6bfab0df99
        Validity
            Not Before: Mar 24 14:30:07 2021 GMT
            Not After : Mar 24 14:30:07 2026 GMT
        Subject: CN=f191a4935aa232756e431ab24f9c4c8f38b07381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:64:e3:b6:a3:0a:60:a5:de:e3:e7:45:76:
                    a5:3b:e1:fe:45:f1:e4:4f:08:99:44:59:a4:4b:c2:
                    cc:66:da:e9:fd:db:88:fe:d7:37:ef:d5:62:89:46:
                    38:74:72:d2:fe:e5:6d:45:62:d3:07:04:9f:72:20:
                    95:d4:75:58:10:ec:58:54:4e:d2:76:a1:26:a3:70:
                    09:a3:08:69:b2:e5:22:04:6b:2d:b7:88:cf:9e:e0:
                    4c:7e:43:4d:80:b9:7c:80:da:6e:0a:c1:f1:6c:a2:
                    b3:77:b5:ff:2b:d2:9a:6e:14:36:59:1d:95:f0:97:
                    eb:d2:c0:cc:7a:25:60:67:31:97:c9:31:9e:49:ec:
                    5a:f2:48:ec:35:80:cb:e6:be:2a:3e:12:b4:c6:17:
                    ac:4f:fb:a6:6c:e2:06:43:e0:6e:32:7f:f4:12:8a:
                    f2:cf:ea:af:37:8e:47:e7:5d:1a:fc:55:ed:e5:04:
                    91:4d:9f:46:4d:4b:1f:de:eb:a2:29:5f:2e:ff:fc:
                    17:7b:b4:c2:8b:16:2e:9d:dd:d4:e0:aa:95:75:b2:
                    da:10:f1:e6:f2:c1:4b:e8:0b:f0:fe:09:83:5c:b0:
                    3e:48:c6:b3:9a:a3:fb:37:b4:84:ad:01:18:1a:51:
                    40:3b:30:e3:ce:2c:d2:af:5f:db:27:1b:f0:db:d4:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DE:57:88:4B:2E:AC:EE:E0:4C:A2:60:5F:86:F0:D5:DD:03:7F:00
            X509v3 Authority Key Identifier:
                keyid:6F:A5:23:65:89:39:E9:5E:A6:77:85:BF:2C:42:32:C2:89:65:5D:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72fc040100393daeefed35379988ef6bfab0df99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a21c49ac-04c7-4115-9aef-283dbeb7c7c3/f191a4935aa232756e431ab24f9c4c8f38b07381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a21c49ac-04c7-4115-9aef-283dbeb7c7c3/72fc040100393daeefed35379988ef6bfab0df99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.160.0/22
                IPv6:
                  2803:df60::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:4b:a3:94:e7:d9:2c:64:8b:fd:81:28:cc:a2:c0:d4:a8:d5:
         c7:91:74:04:45:dc:88:6c:03:fa:52:03:dc:4b:ba:60:57:3e:
         80:14:74:aa:ef:ec:f4:ca:8a:f2:b8:be:5c:7a:1e:b6:8a:58:
         bb:8b:52:13:5a:5b:a4:84:0a:66:70:c2:45:76:54:09:12:1a:
         31:41:5e:3a:6c:34:d8:e7:5a:41:d5:10:4c:9f:03:82:d0:f9:
         20:f6:56:1c:10:de:b0:67:a2:2b:82:25:62:78:c5:f3:56:92:
         5d:b9:a8:f6:ec:cf:46:ed:75:34:40:35:6f:01:1a:6f:19:74:
         87:d4:a5:a1:20:a4:37:8f:d8:75:24:bf:a5:4d:1b:ba:57:0e:
         ac:96:75:36:d2:47:70:99:8f:d9:f9:9d:d6:e4:2d:57:22:1e:
         50:c3:1d:d7:34:d1:39:11:21:6c:92:95:95:50:08:1f:5c:fe:
         1d:c0:a8:c1:c2:48:8d:50:19:f3:69:20:55:fc:f4:a8:06:2d:
         fd:d4:f6:11:93:28:e1:38:4e:19:a9:e9:f7:bd:b1:64:67:fa:
         1b:31:63:4b:c3:1e:52:b0:0d:b2:28:57:35:ed:16:fb:34:42:
         96:d4:52:cd:b9:c6:b9:e7:1e:0c:a4:30:e4:c1:26:72:57:fc:
         0c:5c:8a:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCMOgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
ZmMwNDAxMDAzOTNkYWVlZmVkMzUzNzk5ODhlZjZiZmFiMGRmOTkwHhcNMjEwMzI0
MTQzMDA3WhcNMjYwMzI0MTQzMDA3WjAzMTEwLwYDVQQDEyhmMTkxYTQ5MzVhYTIz
Mjc1NmU0MzFhYjI0ZjljNGM4ZjM4YjA3MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhypk47ajCmCl3uPnRXalO+H+RfHkTwiZRFmkS8LMZtrp/duI
/tc379ViiUY4dHLS/uVtRWLTBwSfciCV1HVYEOxYVE7SdqEmo3AJowhpsuUiBGst
t4jPnuBMfkNNgLl8gNpuCsHxbKKzd7X/K9KabhQ2WR2V8Jfr0sDMeiVgZzGXyTGe
Sexa8kjsNYDL5r4qPhK0xhesT/umbOIGQ+BuMn/0Eoryz+qvN45H510a/FXt5QSR
TZ9GTUsf3uuiKV8u//wXe7TCixYund3U4KqVdbLaEPHm8sFL6Avw/gmDXLA+SMaz
mqP7N7SErQEYGlFAOzDjzizSr1/bJxvw29Q1TQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHLeV4hLLqzu4EyiYF+G8NXdA38AMB8GA1UdIwQYMBaAFG+lI2WJOelepneF
vyxCMsKJZV1+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzJmYzA0
MDEwMDM5M2RhZWVmZWQzNTM3OTk4OGVmNmJmYWIwZGY5OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTIxYzQ5YWMtMDRjNy00MTE1LTlhZWYtMjgzZGJl
YjdjN2MzL2YxOTFhNDkzNWFhMjMyNzU2ZTQzMWFiMjRmOWM0YzhmMzhiMDczODEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjFjNDlhYy0wNGM3LTQxMTUtOWFlZi0yODNk
YmViN2M3YzMvNzJmYzA0MDEwMDM5M2RhZWVmZWQzNTM3OTk4OGVmNmJmYWIwZGY5
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi28oDANBAIAAjAHAwUAKAPfYDANBgkqhkiG9w0BAQsFAAOC
AQEASUujlOfZLGSL/YEozKLA1KjVx5F0BEXciGwD+lID3Eu6YFc+gBR0qu/s9MqK
8ri+XHoetopYu4tSE1pbpIQKZnDCRXZUCRIaMUFeOmw02OdaQdUQTJ8DgtD5IPZW
HBDesGeiK4IlYnjF81aSXbmo9uzPRu11NEA1bwEabxl0h9SloSCkN4/YdSS/pU0b
ulcOrJZ1NtJHcJmP2fmd1uQtVyIeUMMd1zTROREhbJKVlVAIH1z+HcCowcJIjVAZ
82kgVfz0qAYt/dT2EZMo4ThOGanp972xZGf6GzFjS8MeUrANsihXNe0W+zRCltRS
zbnGueceDKQw5MEmclf8DFyKcQ==
-----END CERTIFICATE-----