Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2a168cb1db78f4265cae2c7f4f1c1b849f3b8093.roa
File:                     2a168cb1db78f4265cae2c7f4f1c1b849f3b8093.roa (raw, json)
Hash identifier:          L6rqyNzGZMkggJ8IVkwsHI/SeqREKjT/xkIp/bpIcU0=
Subject key identifier:   0B:FC:6C:B6:CE:24:D8:25:8E:36:41:E0:BA:1C:A6:19:88:79:78:3D
Certificate issuer:       /CN=2733e5fc045a22897f64385008a5c519f68c3738
Certificate serial:       0709
Authority key identifier: 34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2a168cb1db78f4265cae2c7f4f1c1b849f3b8093.roa
Signing time:             Fri 10 Jun 2022 20:37:05 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 30 Nov 2026 03:00:00 +0000
asID:                     272057
IP address blocks:        187.63.156.0/22 maxlen: 24
                          2803:7d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2733e5fc045a22897f64385008a5c519f68c3738
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Nov 30 03:00:00 2026 GMT
        Subject: CN=2a168cb1db78f4265cae2c7f4f1c1b849f3b8093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:bc:ef:ed:20:d9:ab:d2:f7:d2:42:8c:c5:
                    6e:14:27:8c:ab:58:1b:70:56:cc:0b:a6:55:f9:70:
                    d0:f0:3f:e2:52:11:6c:ab:ac:ee:79:e1:49:bf:6d:
                    4f:87:b5:14:e3:fa:b9:ab:3f:52:12:bd:31:fc:a1:
                    29:b7:c8:b8:4e:3c:3c:35:2c:21:23:0c:18:17:0d:
                    29:42:e7:3b:1a:5a:91:38:dc:fa:da:08:db:de:73:
                    4a:6a:67:56:4f:78:ce:09:e4:33:b7:01:1d:48:16:
                    34:4f:25:0e:0b:c3:6a:e4:40:1f:c9:03:9d:ab:84:
                    f3:73:42:e3:58:aa:cd:e4:05:84:89:28:c9:e0:90:
                    6d:3c:35:6b:02:4b:17:7c:a5:1c:f4:80:bf:f9:e8:
                    e2:66:37:37:ea:9c:42:dc:6e:87:3a:10:57:34:c6:
                    32:55:e4:ab:fb:aa:0b:3d:0f:ce:fb:95:0b:ef:7f:
                    d6:4f:e9:78:f1:3b:bd:a0:f1:8b:57:88:9a:a5:34:
                    b0:8b:af:36:c4:86:f9:54:9b:29:33:30:5a:dd:25:
                    5a:0b:9b:6c:d0:64:e9:18:0a:c5:6a:38:bf:21:7e:
                    62:13:22:31:4e:c9:8f:b6:cc:58:87:8b:f9:65:59:
                    4a:11:50:ed:ee:fb:66:86:55:93:08:0a:3c:96:15:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:6C:B6:CE:24:D8:25:8E:36:41:E0:BA:1C:A6:19:88:79:78:3D
            X509v3 Authority Key Identifier:
                keyid:34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2a168cb1db78f4265cae2c7f4f1c1b849f3b8093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2733e5fc045a22897f64385008a5c519f68c3738.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.156.0/22
                IPv6:
                  2803:7d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:57:3b:69:6d:6f:ea:17:95:8f:c8:60:ce:98:81:2a:90:
         9d:5c:bc:84:ab:43:66:b5:73:8f:2a:dc:58:5d:8c:02:56:1d:
         df:e1:8f:3c:d2:cb:c5:8e:0e:41:10:99:bb:a2:29:55:ce:cb:
         78:a7:75:06:48:61:12:e8:f7:d3:9d:5e:7e:06:6c:58:09:89:
         9b:1b:90:8c:c1:cc:52:e9:a2:3d:21:54:b1:3a:5e:46:30:74:
         10:3b:1b:1a:45:c8:3f:3c:c5:69:84:a7:dd:fb:09:33:a0:e3:
         a1:a4:53:6a:01:77:68:61:e2:a5:9f:cf:5f:75:f4:f0:bd:5e:
         ea:f8:ac:1a:29:0b:6d:58:ff:0b:c3:33:a3:66:d8:85:ec:f5:
         3f:a5:40:76:75:03:bc:82:8a:1a:89:7a:28:9a:43:e8:e9:40:
         a5:7e:b4:3b:8e:d5:bb:1e:da:20:2c:b2:c5:bc:84:03:49:ca:
         61:a5:05:22:e7:3c:c5:a0:47:b7:56:98:50:62:a2:ce:20:de:
         10:9a:00:37:b3:d3:a5:42:10:c9:d7:17:cb:a3:07:b9:7e:6f:
         6c:73:4b:bc:f1:48:01:62:b3:63:46:12:b5:51:0c:10:e2:dd:
         28:bc:4c:20:e3:4d:12:db:6a:78:bc:6d:e8:42:37:ee:4c:28:
         22:a9:54:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjcz
M2U1ZmMwNDVhMjI4OTdmNjQzODUwMDhhNWM1MTlmNjhjMzczODAeFw0yMjA2MTAw
MzAwMDBaFw0yNjExMzAwMzAwMDBaMDMxMTAvBgNVBAMTKDJhMTY4Y2IxZGI3OGY0
MjY1Y2FlMmM3ZjRmMWMxYjg0OWYzYjgwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCskLzv7SDZq9L30kKMxW4UJ4yrWBtwVswLplX5cNDwP+JSEWyr
rO554Um/bU+HtRTj+rmrP1ISvTH8oSm3yLhOPDw1LCEjDBgXDSlC5zsaWpE43Pra
CNvec0pqZ1ZPeM4J5DO3AR1IFjRPJQ4Lw2rkQB/JA52rhPNzQuNYqs3kBYSJKMng
kG08NWsCSxd8pRz0gL/56OJmNzfqnELcboc6EFc0xjJV5Kv7qgs9D877lQvvf9ZP
6XjxO72g8YtXiJqlNLCLrzbEhvlUmykzMFrdJVoLm2zQZOkYCsVqOL8hfmITIjFO
yY+2zFiHi/llWUoRUO3u+2aGVZMICjyWFTe3AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUC/xsts4k2CWONkHguhymGYh5eD0wHwYDVR0jBBgwFoAUNPQBKuNeo+1Hifuy
BED/Vqf03kgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yNzMzZTVm
YzA0NWEyMjg5N2Y2NDM4NTAwOGE1YzUxOWY2OGMzNzM4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hYWFkOWE0OC1iMDNmLTQ3ZjItYWU5NC04Njc5N2Iz
YzlhMDcvMmExNjhjYjFkYjc4ZjQyNjVjYWUyYzdmNGYxYzFiODQ5ZjNiODA5My5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2FhYWQ5YTQ4LWIwM2YtNDdmMi1hZTk0LTg2Nzk3
YjNjOWEwNy8yNzMzZTVmYzA0NWEyMjg5N2Y2NDM4NTAwOGE1YzUxOWY2OGMzNzM4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCuz+cMA0EAgACMAcDBQAoA30QMA0GCSqGSIb3DQEBCwUAA4IB
AQBytVc7aW1v6heVj8hgzpiBKpCdXLyEq0NmtXOPKtxYXYwCVh3f4Y880svFjg5B
EJm7oilVzst4p3UGSGES6PfTnV5+BmxYCYmbG5CMwcxS6aI9IVSxOl5GMHQQOxsa
Rcg/PMVphKfd+wkzoOOhpFNqAXdoYeKln89fdfTwvV7q+KwaKQttWP8LwzOjZtiF
7PU/pUB2dQO8gooaiXoomkPo6UClfrQ7jtW7HtogLLLFvIQDScphpQUi5zzFoEe3
VphQYqLOIN4QmgA3s9OlQhDJ1xfLowe5fm9sc0u88UgBYrNjRhK1UQwQ4t0ovEwg
400S22p4vG3oQjfuTCgiqVTf
-----END CERTIFICATE-----