Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/51275da26e7d849c3b9b69d6b3a90958ee7e46f2.roa
File:                     51275da26e7d849c3b9b69d6b3a90958ee7e46f2.roa (raw, json)
Hash identifier:          O1byXKupLlyVr/6l1R0jvIgaOvO/wcaClXRy6w9BD6Y=
Subject key identifier:   13:74:21:92:75:6B:0F:5E:55:A4:64:5F:A2:6E:1F:83:F3:29:06:6A
Certificate issuer:       /CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
Certificate serial:       0BC1B0
Authority key identifier: 9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/51275da26e7d849c3b9b69d6b3a90958ee7e46f2.roa
Signing time:             Wed 24 Mar 2021 14:47:01 +0000
ROA not before:           Wed 24 Mar 2021 14:47:01 +0000
ROA not after:            Tue 24 Mar 2026 14:47:01 +0000
asID:                     269815
IP address blocks:        45.186.108.0/22 maxlen: 22
                          2803:fb60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770480 (0xbc1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
        Validity
            Not Before: Mar 24 14:47:01 2021 GMT
            Not After : Mar 24 14:47:01 2026 GMT
        Subject: CN=51275da26e7d849c3b9b69d6b3a90958ee7e46f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:25:64:22:8f:0c:ff:a8:e5:6c:86:38:82:
                    a3:b9:39:cd:9c:d9:14:08:38:10:b2:27:cd:ca:94:
                    4f:3e:28:5a:9d:9d:79:7a:69:fa:58:e7:be:8b:65:
                    e3:e0:92:4f:74:c9:e5:d8:01:99:49:a3:2d:9a:b5:
                    b6:71:61:32:27:d0:94:ce:ad:28:31:a5:2a:94:3a:
                    70:22:5d:c7:ec:cd:23:12:0f:b7:c8:2b:24:c0:5b:
                    0c:32:2f:22:db:1f:1e:0d:ab:28:fd:e9:03:48:30:
                    f4:c0:31:23:ae:37:47:e9:47:ce:f8:14:04:0a:4a:
                    5e:f1:bc:57:a9:dc:29:c6:1a:0e:36:d0:5a:df:d6:
                    5a:fe:bf:78:1c:92:b6:33:44:15:b6:22:a2:c7:ea:
                    e8:52:e3:51:ac:0f:d7:b1:8a:c6:49:1b:98:b7:11:
                    bb:e9:1c:34:3a:05:30:8a:08:22:6d:d1:68:2f:63:
                    ed:d2:86:58:3f:27:ed:b3:af:58:b5:57:f3:b6:f2:
                    22:d8:c4:6e:eb:04:e2:f6:97:8f:3e:42:0f:db:39:
                    f7:ef:25:5d:f4:6e:16:75:77:e2:8d:b5:e3:78:6c:
                    d3:b2:bb:4a:c1:31:29:27:ff:9a:55:a2:29:af:a2:
                    a7:6e:5f:ec:9a:56:49:3b:0d:57:15:56:fe:72:e2:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:74:21:92:75:6B:0F:5E:55:A4:64:5F:A2:6E:1F:83:F3:29:06:6A
            X509v3 Authority Key Identifier:
                keyid:9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/51275da26e7d849c3b9b69d6b3a90958ee7e46f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22
                IPv6:
                  2803:fb60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:41:68:ed:17:78:5a:ca:82:16:bd:d2:6f:b9:f9:de:03:
         6e:9b:22:a3:c9:9c:2c:91:c0:9f:3f:a0:5f:fc:b4:6c:18:25:
         51:72:b8:10:b3:10:fe:91:84:88:41:83:55:de:c6:7f:4e:71:
         5c:22:e7:ca:14:66:95:cd:c6:be:17:68:dc:35:c2:85:d0:5b:
         bd:7e:76:64:6f:42:fd:3f:37:36:5d:a5:35:b3:57:78:d2:c6:
         d8:d7:c1:4f:43:85:95:fe:6c:86:54:70:c4:f7:ba:6c:0d:8b:
         ca:db:95:b3:8a:44:98:db:81:f9:3f:6f:7c:e8:d3:71:19:c7:
         ff:f7:52:ba:b3:76:23:d6:d0:a4:42:9d:08:79:5c:a0:5c:30:
         1e:9d:f1:37:31:8f:66:4e:19:d1:10:ee:1b:8d:7b:57:c5:57:
         6c:6f:70:18:ac:6d:14:e6:5c:48:56:69:49:32:b1:d6:ee:65:
         21:ff:ad:45:d6:db:59:76:74:d5:40:ad:02:5a:15:ef:e4:74:
         78:65:02:73:74:96:6c:38:76:a1:b3:fd:dc:73:bf:90:5f:ee:
         e0:ac:95:0f:ca:ed:9c:4f:3d:1d:74:ab:74:a5:16:20:9e:35:
         4f:e1:2f:9f:5e:ac:40:7d:bb:80:4e:5c:53:8b:12:43:49:5f:
         4f:8c:a2:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC8GwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
ZTNmZDJjOGFjODA5ZmFlY2NkMTQxOGZmOGJkNTYyNjA4YjMyYmEwHhcNMjEwMzI0
MTQ0NzAxWhcNMjYwMzI0MTQ0NzAxWjAzMTEwLwYDVQQDEyg1MTI3NWRhMjZlN2Q4
NDljM2I5YjY5ZDZiM2E5MDk1OGVlN2U0NmYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhsElZCKPDP+o5WyGOIKjuTnNnNkUCDgQsifNypRPPihanZ15
emn6WOe+i2Xj4JJPdMnl2AGZSaMtmrW2cWEyJ9CUzq0oMaUqlDpwIl3H7M0jEg+3
yCskwFsMMi8i2x8eDaso/ekDSDD0wDEjrjdH6UfO+BQECkpe8bxXqdwpxhoONtBa
39Za/r94HJK2M0QVtiKix+roUuNRrA/XsYrGSRuYtxG76Rw0OgUwiggibdFoL2Pt
0oZYPyfts69YtVfztvIi2MRu6wTi9pePPkIP2zn37yVd9G4WdXfijbXjeGzTsrtK
wTEpJ/+aVaIpr6Knbl/smlZJOw1XFVb+cuKn2QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBN0IZJ1aw9eVaRkX6JuH4PzKQZqMB8GA1UdIwQYMBaAFJ70jBzyFjrBHI0g
a2R1mMW4xgz1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmZlM2Zk
MmM4YWM4MDlmYWVjY2QxNDE4ZmY4YmQ1NjI2MDhiMzJiYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWUyZGY2NjAtZjFmMC00ZjhkLTljZjctNGMyYzUz
ODBkNjZiLzUxMjc1ZGEyNmU3ZDg0OWMzYjliNjlkNmIzYTkwOTU4ZWU3ZTQ2ZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZTJkZjY2MC1mMWYwLTRmOGQtOWNmNy00YzJj
NTM4MGQ2NmIvZmZlM2ZkMmM4YWM4MDlmYWVjY2QxNDE4ZmY4YmQ1NjI2MDhiMzJi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26bDANBAIAAjAHAwUAKAP7YDANBgkqhkiG9w0BAQsFAAOC
AQEAPuxBaO0XeFrKgha90m+5+d4Dbpsio8mcLJHAnz+gX/y0bBglUXK4ELMQ/pGE
iEGDVd7Gf05xXCLnyhRmlc3Gvhdo3DXChdBbvX52ZG9C/T83Nl2lNbNXeNLG2NfB
T0OFlf5shlRwxPe6bA2LytuVs4pEmNuB+T9vfOjTcRnH//dSurN2I9bQpEKdCHlc
oFwwHp3xNzGPZk4Z0RDuG417V8VXbG9wGKxtFOZcSFZpSTKx1u5lIf+tRdbbWXZ0
1UCtAloV7+R0eGUCc3SWbDh2obP93HO/kF/u4KyVD8rtnE89HXSrdKUWIJ41T+Ev
n16sQH27gE5cU4sSQ0lfT4yi4w==
-----END CERTIFICATE-----