Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/a625ea610c71d87f67c6d4bf2ee44e9b01541a4b.roa
File:                     a625ea610c71d87f67c6d4bf2ee44e9b01541a4b.roa (raw, json)
Hash identifier:          TDlArDVD6CRXkQRoFUbG4wm1K/gJ7Go2zVz9hZX8swk=
Subject key identifier:   E0:4A:F6:A0:F4:3C:F8:96:FE:AC:B5:D7:DC:39:D0:AD:F6:4C:42:78
Certificate issuer:       /CN=2086a00004044e8c0e8b528587668a00a96069ba
Certificate serial:       0CC4A9
Authority key identifier: C9:6D:B0:C9:47:6E:B3:BC:86:FB:1C:7B:0F:4B:BD:EE:8C:78:0A:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2086a00004044e8c0e8b528587668a00a96069ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/a625ea610c71d87f67c6d4bf2ee44e9b01541a4b.roa
Signing time:             Wed 24 Mar 2021 14:35:50 +0000
ROA not before:           Wed 24 Mar 2021 14:35:49 +0000
ROA not after:            Tue 24 Mar 2026 14:35:49 +0000
asID:                     267842
IP address blocks:        45.174.224.0/23 maxlen: 23
                          192.92.154.0/24 maxlen: 24
                          2803:9460::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836777 (0xcc4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2086a00004044e8c0e8b528587668a00a96069ba
        Validity
            Not Before: Mar 24 14:35:49 2021 GMT
            Not After : Mar 24 14:35:49 2026 GMT
        Subject: CN=a625ea610c71d87f67c6d4bf2ee44e9b01541a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:5f:d7:80:58:55:36:76:16:6d:2a:9f:af:
                    2d:62:fe:81:16:8b:34:a4:47:38:5b:e7:70:09:ba:
                    8d:04:e4:4d:16:02:be:36:f4:ab:52:3e:29:8a:87:
                    58:30:75:f5:4e:72:02:a6:f7:4c:f9:1d:df:a4:b7:
                    7d:cf:e0:94:31:b6:27:ee:ef:8d:90:01:08:3a:9c:
                    59:58:80:d4:22:a8:ce:32:93:23:db:d1:57:ae:5b:
                    30:48:1f:8f:99:ce:95:55:49:c0:3a:10:90:38:51:
                    9c:a8:ad:b5:5b:37:52:45:35:ee:50:c6:bc:a7:9f:
                    9e:1b:49:4a:6b:51:8f:8b:d6:39:e4:6c:61:5e:df:
                    95:06:e3:c4:fd:ca:40:f2:36:88:05:fc:56:e0:07:
                    79:7f:0f:71:9c:1d:69:58:d9:e2:a2:d9:61:ba:bc:
                    48:b0:0b:8b:c6:b3:a5:88:5d:fe:62:39:f9:54:c1:
                    b6:25:84:72:db:48:94:44:ba:f5:df:42:d7:07:2e:
                    7d:fe:50:b2:e5:37:d0:f8:6b:34:26:86:aa:ec:42:
                    70:8c:84:c9:e5:82:af:a7:7f:53:0f:38:39:0a:21:
                    2b:5a:02:e4:22:cf:ce:8f:4d:d8:72:37:84:b5:20:
                    45:0a:be:b0:09:8c:cb:f5:5a:63:17:fc:3b:28:6f:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:F6:A0:F4:3C:F8:96:FE:AC:B5:D7:DC:39:D0:AD:F6:4C:42:78
            X509v3 Authority Key Identifier:
                keyid:C9:6D:B0:C9:47:6E:B3:BC:86:FB:1C:7B:0F:4B:BD:EE:8C:78:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2086a00004044e8c0e8b528587668a00a96069ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/a625ea610c71d87f67c6d4bf2ee44e9b01541a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/2086a00004044e8c0e8b528587668a00a96069ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.224.0/23
                  192.92.154.0/24
                IPv6:
                  2803:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:e7:53:65:40:fb:6d:95:32:4d:8f:d5:21:05:3c:26:09:
         19:ff:e9:0d:f9:25:16:bb:d4:bf:0e:87:66:54:e8:44:e1:1b:
         c1:e0:cd:c4:bd:c8:51:68:19:d9:32:ad:33:75:ac:b2:e5:af:
         a1:84:2a:22:78:05:18:5e:b0:ae:b7:2c:35:9c:1a:35:ab:fb:
         ce:3f:e6:32:72:82:f4:44:6b:11:a5:99:72:e2:e4:50:41:97:
         fb:66:c2:e7:34:41:71:e6:c1:25:9d:0b:fd:30:da:05:70:b6:
         e1:56:0b:42:9d:f0:50:ed:2c:78:96:fd:7e:09:92:8b:fd:d7:
         fc:19:bf:19:8b:2c:e8:f5:39:69:b9:c3:19:a5:bf:43:d5:75:
         9e:7f:13:6f:22:06:6f:b1:58:90:ba:b8:d9:ff:60:16:d3:49:
         3a:02:c4:dc:04:79:03:79:2c:62:2f:7a:86:c5:21:48:51:25:
         1b:a4:a0:ab:59:bf:0d:4f:9c:3a:74:a3:e3:25:04:9d:bf:3e:
         22:f5:0f:8e:6e:8b:ae:5f:92:a4:cf:16:c1:95:c0:5f:1a:fd:
         98:53:c3:8b:ec:f1:bc:bd:5b:28:e3:17:73:4e:ff:5e:87:c8:
         1d:89:40:cb:ff:e6:90:66:42:1f:2c:10:db:cf:8f:f8:53:8e:
         2a:e4:cf:2a
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDMSpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
ODZhMDAwMDQwNDRlOGMwZThiNTI4NTg3NjY4YTAwYTk2MDY5YmEwHhcNMjEwMzI0
MTQzNTQ5WhcNMjYwMzI0MTQzNTQ5WjAzMTEwLwYDVQQDEyhhNjI1ZWE2MTBjNzFk
ODdmNjdjNmQ0YmYyZWU0NGU5YjAxNTQxYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoT5f14BYVTZ2Fm0qn68tYv6BFos0pEc4W+dwCbqNBORNFgK+
NvSrUj4piodYMHX1TnICpvdM+R3fpLd9z+CUMbYn7u+NkAEIOpxZWIDUIqjOMpMj
29FXrlswSB+Pmc6VVUnAOhCQOFGcqK21WzdSRTXuUMa8p5+eG0lKa1GPi9Y55Gxh
Xt+VBuPE/cpA8jaIBfxW4Ad5fw9xnB1pWNniotlhurxIsAuLxrOliF3+Yjn5VMG2
JYRy20iURLr130LXBy59/lCy5TfQ+Gs0Joaq7EJwjITJ5YKvp39TDzg5CiErWgLk
Is/Oj03YcjeEtSBFCr6wCYzL9VpjF/w7KG+jnQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFOBK9qD0PPiW/qy119w50K32TEJ4MB8GA1UdIwQYMBaAFMltsMlHbrO8hvsc
ew9Lve6MeApYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjA4NmEw
MDAwNDA0NGU4YzBlOGI1Mjg1ODc2NjhhMDBhOTYwNjliYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTU2YjAxMTMtZTUwMS00NGZmLTk1ZDAtMTk3Mjdm
NDg1NjBlL2E2MjVlYTYxMGM3MWQ4N2Y2N2M2ZDRiZjJlZTQ0ZTliMDE1NDFhNGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNTZiMDExMy1lNTAxLTQ0ZmYtOTVkMC0xOTcy
N2Y0ODU2MGUvMjA4NmEwMDAwNDA0NGU4YzBlOGI1Mjg1ODc2NjhhMDBhOTYwNjli
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAS2u4AMEAMBcmjANBAIAAjAHAwUAKAOUYDANBgkqhkiG9w0B
AQsFAAOCAQEAeJrnU2VA+22VMk2P1SEFPCYJGf/pDfklFrvUvw6HZlToROEbweDN
xL3IUWgZ2TKtM3WssuWvoYQqIngFGF6wrrcsNZwaNav7zj/mMnKC9ERrEaWZcuLk
UEGX+2bC5zRBcebBJZ0L/TDaBXC24VYLQp3wUO0seJb9fgmSi/3X/Bm/GYss6PU5
abnDGaW/Q9V1nn8TbyIGb7FYkLq42f9gFtNJOgLE3AR5A3ksYi96hsUhSFElG6Sg
q1m/DU+cOnSj4yUEnb8+IvUPjm6Lrl+SpM8WwZXAXxr9mFPDi+zxvL1bKOMXc07/
XofIHYlAy//mkGZCHywQ28+P+FOOKuTPKg==
-----END CERTIFICATE-----