Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a82a1180-c726-4291-92d4-e2ee4a975ec2/5306148072f8066c45cfc8684d1d8a934f224e7f.roa
File:                     5306148072f8066c45cfc8684d1d8a934f224e7f.roa (raw, json)
Hash identifier:          qc09bNPkndVFyd4kqlRsxBKBu8Y2b9+bN60gM+dkDGg=
Subject key identifier:   52:0A:53:A5:18:3D:61:0B:DF:5B:8E:69:2C:F1:CB:3A:D8:2B:19:5E
Certificate issuer:       /CN=8dbf5a75b9855e2e7edfe88ab6c155838a48f153
Certificate serial:       03710B
Authority key identifier: 67:2C:3A:EF:9E:72:BB:BB:1D:4A:E0:EE:84:FF:6C:93:21:F6:24:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbf5a75b9855e2e7edfe88ab6c155838a48f153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a82a1180-c726-4291-92d4-e2ee4a975ec2/5306148072f8066c45cfc8684d1d8a934f224e7f.roa
Signing time:             Wed 24 Mar 2021 14:45:14 +0000
ROA not before:           Wed 24 Mar 2021 14:45:14 +0000
ROA not after:            Tue 24 Mar 2026 14:45:14 +0000
asID:                     269864
IP address blocks:        45.188.248.0/22 maxlen: 24
                          2803:f0e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225547 (0x3710b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbf5a75b9855e2e7edfe88ab6c155838a48f153
        Validity
            Not Before: Mar 24 14:45:14 2021 GMT
            Not After : Mar 24 14:45:14 2026 GMT
        Subject: CN=5306148072f8066c45cfc8684d1d8a934f224e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:4a:3a:4a:8c:6f:bc:f1:36:7f:47:67:ef:
                    51:39:03:a0:21:7d:9c:c8:b7:a3:e4:f6:f8:b0:4d:
                    56:53:a2:c9:57:6d:92:a1:f6:c0:cc:58:38:55:cd:
                    a7:64:b3:f3:41:23:8c:95:74:a1:8f:c0:82:e4:3a:
                    53:15:06:c9:36:6c:2b:f2:43:af:af:34:46:f6:b6:
                    43:45:88:86:6a:3c:50:ca:1d:b8:c9:01:88:99:79:
                    89:28:59:66:ec:01:cd:1b:3d:7a:1c:c6:53:84:99:
                    e5:21:4a:78:fa:05:3f:95:44:7c:e6:0d:7a:f7:1c:
                    70:4a:da:e8:f1:d5:62:25:ba:8c:13:39:a4:28:46:
                    ee:3b:7e:73:cc:4d:8e:b9:62:a1:06:44:af:40:63:
                    43:2e:f4:a2:9a:b0:84:f5:fe:14:f7:db:34:2e:05:
                    0d:91:21:c1:91:44:6d:4f:1d:8f:d1:66:3d:4d:da:
                    d3:4e:be:fd:2a:66:89:55:39:1b:a1:4f:de:67:93:
                    8b:a5:e6:84:7d:c2:48:d6:1f:36:49:03:b2:65:49:
                    6c:12:64:0f:69:3e:9c:95:d0:3b:23:1d:2b:0a:3f:
                    a7:55:de:58:cc:e3:35:d8:67:77:5d:32:24:04:63:
                    21:6c:d2:5f:ea:1f:a0:ee:42:8d:c1:ec:a4:b6:30:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:53:A5:18:3D:61:0B:DF:5B:8E:69:2C:F1:CB:3A:D8:2B:19:5E
            X509v3 Authority Key Identifier:
                keyid:67:2C:3A:EF:9E:72:BB:BB:1D:4A:E0:EE:84:FF:6C:93:21:F6:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbf5a75b9855e2e7edfe88ab6c155838a48f153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a82a1180-c726-4291-92d4-e2ee4a975ec2/5306148072f8066c45cfc8684d1d8a934f224e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a82a1180-c726-4291-92d4-e2ee4a975ec2/8dbf5a75b9855e2e7edfe88ab6c155838a48f153.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.248.0/22
                IPv6:
                  2803:f0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:ca:70:5b:6f:a8:0a:47:17:ac:6c:8a:0f:00:ee:a8:5b:
         53:c8:dc:38:f9:49:de:82:62:14:19:72:9e:28:9f:18:42:17:
         1a:56:c1:16:38:42:f2:fa:01:a3:6e:41:2f:08:ae:e1:5b:bd:
         fb:e2:29:7d:2e:ea:4e:b6:27:2b:63:a3:93:83:63:1d:b2:3b:
         5a:58:a4:c5:6a:95:60:90:3e:05:32:58:f2:d9:31:8f:16:df:
         fc:16:10:3e:7c:bd:a6:f5:21:67:69:c3:19:77:cb:5c:1e:56:
         7e:7c:a4:92:6a:8f:c3:46:05:b5:32:66:96:f2:e9:32:d1:35:
         df:0c:fc:f7:31:a3:31:09:6c:82:e9:1f:2c:41:8e:58:49:51:
         49:ce:48:a9:f3:61:fb:58:0b:a7:54:bf:94:94:15:3a:3c:7e:
         8d:98:53:42:cb:15:06:46:b7:a4:ae:e9:55:7f:ed:7a:a4:c7:
         c3:c7:4b:20:11:e8:a3:2e:a0:e2:df:67:84:ab:ea:94:c9:91:
         fb:f9:74:39:3b:30:54:f4:46:ae:4f:2d:b0:3f:82:6f:a7:ef:
         0e:46:9f:ff:05:d4:1f:ce:5e:fc:99:5d:fa:81:a7:0b:8c:53:
         36:e1:f2:a7:0e:65:c7:43:8b:c8:a4:f0:3a:c7:25:4c:a3:0e:
         96:3d:58:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDA3ELMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
YmY1YTc1Yjk4NTVlMmU3ZWRmZTg4YWI2YzE1NTgzOGE0OGYxNTMwHhcNMjEwMzI0
MTQ0NTE0WhcNMjYwMzI0MTQ0NTE0WjAzMTEwLwYDVQQDEyg1MzA2MTQ4MDcyZjgw
NjZjNDVjZmM4Njg0ZDFkOGE5MzRmMjI0ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhmVKOkqMb7zxNn9HZ+9ROQOgIX2cyLej5Pb4sE1WU6LJV22S
ofbAzFg4Vc2nZLPzQSOMlXShj8CC5DpTFQbJNmwr8kOvrzRG9rZDRYiGajxQyh24
yQGImXmJKFlm7AHNGz16HMZThJnlIUp4+gU/lUR85g169xxwStro8dViJbqMEzmk
KEbuO35zzE2OuWKhBkSvQGNDLvSimrCE9f4U99s0LgUNkSHBkURtTx2P0WY9TdrT
Tr79KmaJVTkboU/eZ5OLpeaEfcJI1h82SQOyZUlsEmQPaT6cldA7Ix0rCj+nVd5Y
zOM12Gd3XTIkBGMhbNJf6h+g7kKNweyktjC3oQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFFIKU6UYPWEL31uOaSzxyzrYKxleMB8GA1UdIwQYMBaAFGcsOu+ecru7HUrg
7oT/bJMh9iTzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGRiZjVh
NzViOTg1NWUyZTdlZGZlODhhYjZjMTU1ODM4YTQ4ZjE1My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTgyYTExODAtYzcyNi00MjkxLTkyZDQtZTJlZTRh
OTc1ZWMyLzUzMDYxNDgwNzJmODA2NmM0NWNmYzg2ODRkMWQ4YTkzNGYyMjRlN2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hODJhMTE4MC1jNzI2LTQyOTEtOTJkNC1lMmVl
NGE5NzVlYzIvOGRiZjVhNzViOTg1NWUyZTdlZGZlODhhYjZjMTU1ODM4YTQ4ZjE1
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi28+DANBAIAAjAHAwUAKAPw4DANBgkqhkiG9w0BAQsFAAOC
AQEAD5LKcFtvqApHF6xsig8A7qhbU8jcOPlJ3oJiFBlyniifGEIXGlbBFjhC8voB
o25BLwiu4Vu9++IpfS7qTrYnK2Ojk4NjHbI7WlikxWqVYJA+BTJY8tkxjxbf/BYQ
Pny9pvUhZ2nDGXfLXB5WfnykkmqPw0YFtTJmlvLpMtE13wz89zGjMQlsgukfLEGO
WElRSc5IqfNh+1gLp1S/lJQVOjx+jZhTQssVBka3pK7pVX/teqTHw8dLIBHooy6g
4t9nhKvqlMmR+/l0OTswVPRGrk8tsD+Cb6fvDkaf/wXUH85e/Jld+oGnC4xTNuHy
pw5lx0OLyKTwOsclTKMOlj1Ytw==
-----END CERTIFICATE-----