Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/ca4b8f5c87138c4b1b7b2bf5c6f6a5c78a33cc65.roa
File:                     ca4b8f5c87138c4b1b7b2bf5c6f6a5c78a33cc65.roa (raw, json)
Hash identifier:          jAe/WpOLivtOdojOh41qoc7yXxv+E7eYxQ5XWrFepf4=
Subject key identifier:   8F:EC:7C:A2:28:B4:98:5F:14:5D:14:73:3E:44:5F:53:E9:23:FB:7D
Certificate issuer:       /CN=577dd936f160916cdd8e8df2829ba092e5c1b8ab
Certificate serial:       0C4213
Authority key identifier: 2B:6B:91:76:8B:ED:6B:B9:9C:C3:C9:DA:58:74:64:38:2E:AC:97:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577dd936f160916cdd8e8df2829ba092e5c1b8ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/ca4b8f5c87138c4b1b7b2bf5c6f6a5c78a33cc65.roa
Signing time:             Wed 24 Mar 2021 14:46:18 +0000
ROA not before:           Wed 24 Mar 2021 14:46:18 +0000
ROA not after:            Tue 24 Mar 2026 14:46:18 +0000
asID:                     269794
IP address blocks:        45.184.156.0/22 maxlen: 24
                          2803:3360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803347 (0xc4213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577dd936f160916cdd8e8df2829ba092e5c1b8ab
        Validity
            Not Before: Mar 24 14:46:18 2021 GMT
            Not After : Mar 24 14:46:18 2026 GMT
        Subject: CN=ca4b8f5c87138c4b1b7b2bf5c6f6a5c78a33cc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:49:9d:d0:49:f2:3f:4b:aa:db:05:cd:16:
                    f6:20:df:b2:a9:b7:81:59:79:bb:48:17:7a:b2:84:
                    9d:18:32:cf:1a:16:1d:25:81:9d:fe:ab:66:6f:d0:
                    87:fc:75:31:84:cb:3c:c5:c9:ec:a6:91:e4:1f:94:
                    9c:ae:e5:a0:60:50:19:ca:7c:82:7b:43:2c:a0:6c:
                    b8:55:7c:c4:e8:35:a8:70:cd:f2:25:f9:00:15:26:
                    68:ad:0f:15:ed:a6:f8:34:44:23:6d:a8:d5:2b:27:
                    83:4f:1f:2e:94:a1:37:93:d5:9e:b0:43:b6:02:43:
                    8c:7b:c5:29:57:47:d7:76:19:88:29:f3:e9:31:77:
                    a1:47:ad:e9:d2:ca:4e:f2:5e:2d:6d:71:95:59:8e:
                    42:72:bc:a4:d9:74:26:d3:f5:60:4c:22:63:cd:3e:
                    e3:44:35:0b:cf:ec:6b:97:90:ba:44:99:69:72:29:
                    54:2e:0c:7a:53:b7:a3:4e:89:9b:63:d5:23:a3:cb:
                    b0:78:07:d1:6a:ae:37:7e:a8:6d:9a:4d:5b:53:9e:
                    03:f5:e7:92:8d:59:fb:93:ef:6f:fe:1e:db:99:51:
                    64:d0:83:ff:25:9f:47:f8:1f:88:90:07:fe:b3:b4:
                    54:1d:5e:a0:31:02:b0:a6:27:1d:af:68:5e:12:f5:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EC:7C:A2:28:B4:98:5F:14:5D:14:73:3E:44:5F:53:E9:23:FB:7D
            X509v3 Authority Key Identifier:
                keyid:2B:6B:91:76:8B:ED:6B:B9:9C:C3:C9:DA:58:74:64:38:2E:AC:97:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577dd936f160916cdd8e8df2829ba092e5c1b8ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/ca4b8f5c87138c4b1b7b2bf5c6f6a5c78a33cc65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/577dd936f160916cdd8e8df2829ba092e5c1b8ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.156.0/22
                IPv6:
                  2803:3360::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:ee:d3:e2:6f:e0:96:36:d0:2d:17:21:9a:6a:84:c9:c6:
         87:16:92:c0:7f:78:99:67:4f:9d:9b:df:22:cf:4f:d7:b8:dd:
         77:6d:7b:db:b4:4d:d9:cc:6d:71:3c:d6:9d:51:66:71:e4:dd:
         71:88:d3:7d:33:4a:57:56:d7:86:d8:88:8e:55:99:03:16:62:
         8b:4b:ff:09:51:76:0d:a7:7f:56:58:e4:89:9c:23:8d:6e:ac:
         a2:eb:f8:c9:81:e7:33:5b:45:90:14:10:f1:8d:48:fb:95:80:
         b1:54:3b:44:d0:46:a7:3f:dc:21:c9:76:93:40:cb:7c:67:7c:
         c4:90:d6:41:92:fb:b3:62:48:52:ce:36:c4:b9:09:16:0a:82:
         8a:e5:31:43:ba:84:4f:6c:7b:ad:ba:58:f7:b0:69:59:06:f4:
         23:46:d0:74:73:3a:69:92:47:81:bf:a6:e9:89:70:31:91:1f:
         e1:8c:48:a6:85:67:4e:22:4a:3f:8e:b2:a6:50:2c:e4:37:af:
         67:dd:71:5c:2c:63:9e:28:0c:10:e8:5b:d3:aa:35:3d:7a:4b:
         64:72:65:51:25:b5:51:40:1c:84:3d:eb:a7:89:65:1e:51:bc:
         23:e7:39:48:62:c3:82:00:3e:30:b2:4f:1d:d4:ec:ab:a0:d5:
         f1:79:00:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDDEITMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU3
N2RkOTM2ZjE2MDkxNmNkZDhlOGRmMjgyOWJhMDkyZTVjMWI4YWIwHhcNMjEwMzI0
MTQ0NjE4WhcNMjYwMzI0MTQ0NjE4WjAzMTEwLwYDVQQDEyhjYTRiOGY1Yzg3MTM4
YzRiMWI3YjJiZjVjNmY2YTVjNzhhMzNjYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqAdJndBJ8j9LqtsFzRb2IN+yqbeBWXm7SBd6soSdGDLPGhYd
JYGd/qtmb9CH/HUxhMs8xcnsppHkH5ScruWgYFAZynyCe0MsoGy4VXzE6DWocM3y
JfkAFSZorQ8V7ab4NEQjbajVKyeDTx8ulKE3k9WesEO2AkOMe8UpV0fXdhmIKfPp
MXehR63p0spO8l4tbXGVWY5Ccryk2XQm0/VgTCJjzT7jRDULz+xrl5C6RJlpcilU
Lgx6U7ejTombY9Ujo8uweAfRaq43fqhtmk1bU54D9eeSjVn7k+9v/h7bmVFk0IP/
JZ9H+B+IkAf+s7RUHV6gMQKwpicdr2heEvXIbwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFI/sfKIotJhfFF0Ucz5EX1PpI/t9MB8GA1UdIwQYMBaAFCtrkXaL7Wu5nMPJ
2lh0ZDgurJfBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTc3ZGQ5
MzZmMTYwOTE2Y2RkOGU4ZGYyODI5YmEwOTJlNWMxYjhhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2E4ZDRiY2YtMTJlZC00MGVmLTk5ZWMtOWViMGNk
ODg3MGZmL2NhNGI4ZjVjODcxMzhjNGIxYjdiMmJmNWM2ZjZhNWM3OGEzM2NjNjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYThkNGJjZi0xMmVkLTQwZWYtOTllYy05ZWIw
Y2Q4ODcwZmYvNTc3ZGQ5MzZmMTYwOTE2Y2RkOGU4ZGYyODI5YmEwOTJlNWMxYjhh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi24nDANBAIAAjAHAwUAKAMzYDANBgkqhkiG9w0BAQsFAAOC
AQEAHnbu0+Jv4JY20C0XIZpqhMnGhxaSwH94mWdPnZvfIs9P17jdd21727RN2cxt
cTzWnVFmceTdcYjTfTNKV1bXhtiIjlWZAxZii0v/CVF2Dad/VljkiZwjjW6souv4
yYHnM1tFkBQQ8Y1I+5WAsVQ7RNBGpz/cIcl2k0DLfGd8xJDWQZL7s2JIUs42xLkJ
FgqCiuUxQ7qET2x7rbpY97BpWQb0I0bQdHM6aZJHgb+m6YlwMZEf4YxIpoVnTiJK
P46yplAs5DevZ91xXCxjnigMEOhb06o1PXpLZHJlUSW1UUAchD3rp4llHlG8I+c5
SGLDggA+MLJPHdTsq6DV8XkATw==
-----END CERTIFICATE-----