Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/5113659f5a5ebf1e9f7dd75ec386b5532544ed8f.roa
File:                     5113659f5a5ebf1e9f7dd75ec386b5532544ed8f.roa (raw, json)
Hash identifier:          R1aWcSW/rGtCLgiU4jfbbezR0AEzwmCZ2AdsCu24eIg=
Subject key identifier:   23:FD:B8:94:19:34:21:2B:BA:E4:B2:A0:42:65:3D:BA:EB:B4:00:FC
Certificate issuer:       /CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c
Certificate serial:       03AFD7
Authority key identifier: 10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/5113659f5a5ebf1e9f7dd75ec386b5532544ed8f.roa
Signing time:             Wed 27 Oct 2021 14:40:57 +0000
ROA not before:           Thu 27 May 2021 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     267900
IP address blocks:        45.178.192.0/22 maxlen: 24
                          2803:9660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241623 (0x3afd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c
        Validity
            Not Before: May 27 03:00:00 2021 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=5113659f5a5ebf1e9f7dd75ec386b5532544ed8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:28:f8:90:88:c0:3e:23:30:8d:4e:b9:64:
                    e5:d7:78:5b:3f:e7:62:e8:da:36:bc:eb:dd:df:04:
                    c9:23:df:d0:7e:a9:81:7d:68:8a:0e:65:4e:e2:78:
                    bf:17:02:5f:f9:3e:21:a8:e5:a3:ec:98:80:81:6c:
                    49:5a:66:3b:f8:8e:d5:1d:13:70:07:62:0b:c8:87:
                    72:af:65:e9:5c:be:fe:da:f8:3b:d6:2f:28:08:b9:
                    08:be:33:2e:87:5d:fb:7b:89:ec:2c:01:6e:f6:8a:
                    44:72:7d:2f:ff:69:1d:62:e4:b9:1a:0e:d9:33:08:
                    15:57:86:d1:25:e7:a9:c1:a7:fd:d5:16:88:38:c1:
                    0f:d0:30:ee:0f:b8:25:57:c8:13:bf:3c:1d:7b:38:
                    c4:e7:b3:8d:d8:44:7d:0c:28:6c:80:2f:8e:1f:71:
                    85:c4:43:ca:c4:5a:b1:18:c2:6e:fb:8c:e3:4d:a7:
                    39:3e:37:23:3d:ea:cd:b7:91:4a:b5:c4:ce:3d:2e:
                    ef:c6:9c:61:53:69:1b:6e:fe:bf:cd:5f:c7:1e:ea:
                    f6:d5:55:4b:d6:45:6e:3b:d4:f3:34:f4:63:02:a6:
                    9d:fc:20:e3:a4:13:e5:1a:67:2e:37:80:4c:c7:81:
                    ca:a6:36:e9:3b:f4:38:7e:e5:36:1a:e7:34:3d:19:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:B8:94:19:34:21:2B:BA:E4:B2:A0:42:65:3D:BA:EB:B4:00:FC
            X509v3 Authority Key Identifier:
                keyid:10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/5113659f5a5ebf1e9f7dd75ec386b5532544ed8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.192.0/22
                IPv6:
                  2803:9660::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:38:38:05:7c:0c:dc:ea:f6:87:b8:6c:3a:6e:f7:4d:2a:f8:
         fc:51:f2:ad:17:bc:fc:43:58:f6:4a:48:42:1b:69:1c:60:20:
         f8:f2:d0:a3:f8:a5:13:3d:d5:18:a5:05:69:7d:7e:43:cb:4c:
         79:2c:42:eb:94:87:7c:00:59:6a:d8:b2:67:9f:8a:37:1f:25:
         af:fb:79:95:5d:cd:3a:c1:87:90:da:08:65:61:29:e4:4e:6a:
         ec:b0:00:68:83:2e:c6:e4:ca:15:87:ff:ea:52:41:6c:f4:9e:
         d7:63:9f:49:24:22:b8:5a:5b:9e:d0:8e:b5:6e:07:84:f6:b9:
         1c:22:50:91:e8:bb:83:bd:5a:ec:f5:0b:78:2b:d5:66:0a:5d:
         bf:a4:f0:ea:5c:47:0d:d7:91:99:11:f5:48:51:60:2b:cc:c1:
         2f:e2:44:5b:7b:8a:15:83:64:0f:b5:9e:3b:47:15:2c:0b:7e:
         1a:78:7f:e6:96:da:bd:bb:ee:58:e4:aa:3b:b2:8f:a5:4a:ed:
         a4:b1:d2:c6:e8:de:f7:51:fb:46:c7:57:28:c1:1a:8a:c1:b1:
         d0:b7:84:17:4c:8c:ed:12:fe:ab:96:66:1f:61:26:85:d4:b5:
         8c:ef:50:61:c5:35:5a:23:32:42:38:76:a2:6c:28:c4:96:1b:
         49:12:96:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDA6/XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl
OTM0MzI2NzZhYjY2MWM5ZjZiNjdmYzVlMTk3OTdiOWQ2YWRiMWMwHhcNMjEwNTI3
MDMwMDAwWhcNMjMwNTI3MDMwMDAwWjAzMTEwLwYDVQQDEyg1MTEzNjU5ZjVhNWVi
ZjFlOWY3ZGQ3NWVjMzg2YjU1MzI1NDRlZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkoAo+JCIwD4jMI1OuWTl13hbP+di6No2vOvd3wTJI9/QfqmB
fWiKDmVO4ni/FwJf+T4hqOWj7JiAgWxJWmY7+I7VHRNwB2ILyIdyr2XpXL7+2vg7
1i8oCLkIvjMuh137e4nsLAFu9opEcn0v/2kdYuS5Gg7ZMwgVV4bRJeepwaf91RaI
OMEP0DDuD7glV8gTvzwdezjE57ON2ER9DChsgC+OH3GFxEPKxFqxGMJu+4zjTac5
PjcjPerNt5FKtcTOPS7vxpxhU2kbbv6/zV/HHur21VVL1kVuO9TzNPRjAqad/CDj
pBPlGmcuN4BMx4HKpjbpO/Q4fuU2Guc0PRmpnQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCP9uJQZNCEruuSyoEJlPbrrtAD8MB8GA1UdIwQYMBaAFBBjjCgBt7NJWAeh
MOmxR5wfrGIgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGU5MzQz
MjY3NmFiNjYxYzlmNmI2N2ZjNWUxOTc5N2I5ZDZhZGIxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjk2ZDUyODAtODI5Mi00MzdlLWE0NDQtN2Q1Yjg0
Mzg3N2Q0LzUxMTM2NTlmNWE1ZWJmMWU5ZjdkZDc1ZWMzODZiNTUzMjU0NGVkOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOTZkNTI4MC04MjkyLTQzN2UtYTQ0NC03ZDVi
ODQzODc3ZDQvZGU5MzQzMjY3NmFiNjYxYzlmNmI2N2ZjNWUxOTc5N2I5ZDZhZGIx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2ywDANBAIAAjAHAwUAKAOWYDANBgkqhkiG9w0BAQsFAAOC
AQEA1Tg4BXwM3Or2h7hsOm73TSr4/FHyrRe8/ENY9kpIQhtpHGAg+PLQo/ilEz3V
GKUFaX1+Q8tMeSxC65SHfABZatiyZ5+KNx8lr/t5lV3NOsGHkNoIZWEp5E5q7LAA
aIMuxuTKFYf/6lJBbPSe12OfSSQiuFpbntCOtW4HhPa5HCJQkei7g71a7PULeCvV
Zgpdv6Tw6lxHDdeRmRH1SFFgK8zBL+JEW3uKFYNkD7WeO0cVLAt+Gnh/5pbavbvu
WOSqO7KPpUrtpLHSxuje91H7RsdXKMEaisGx0LeEF0yM7RL+q5ZmH2EmhdS1jO9Q
YcU1WiMyQjh2omwoxJYbSRKWwQ==
-----END CERTIFICATE-----