Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/13f3fe5ee23fadcbf17ccb5c01b04dda5dbb74ab.roa
File:                     13f3fe5ee23fadcbf17ccb5c01b04dda5dbb74ab.roa (raw, json)
Hash identifier:          F6Rj+JB5BJifsSb7ZlMH9nWGvKuIqrxzu+9Yn7znoqE=
Subject key identifier:   39:84:2D:08:DF:12:C4:E4:75:27:74:B8:4F:59:D0:BE:D5:BC:E0:DD
Certificate issuer:       /CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
Certificate serial:       15B188
Authority key identifier: 5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/13f3fe5ee23fadcbf17ccb5c01b04dda5dbb74ab.roa
Signing time:             Mon 14 Feb 2022 20:17:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266679
IP address blocks:        45.228.52.0/22 maxlen: 24
                          2803:f920::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421704 (0x15b188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb30a4806bd1d5d30f7ac6f452dde37962b6694
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=13f3fe5ee23fadcbf17ccb5c01b04dda5dbb74ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:50:b0:46:94:8e:c6:b4:76:ad:0b:a5:82:
                    f6:6e:64:31:c9:64:8e:95:44:1d:07:6e:96:7d:50:
                    8f:d5:69:c1:e9:89:d0:27:e8:80:31:05:b5:f4:76:
                    82:12:0e:10:b9:58:3e:f5:ce:43:ed:d7:08:63:56:
                    c0:bb:01:28:7f:d3:dc:35:ed:54:b3:67:b1:7d:01:
                    19:10:e6:5a:02:55:12:21:03:d6:c4:b3:c3:0c:1c:
                    3c:d0:41:69:b6:15:fa:91:9b:e0:6e:ac:31:6e:56:
                    99:07:2f:2f:a8:c2:55:18:20:4a:f6:90:a1:67:95:
                    90:da:6e:af:ce:41:2d:a6:55:12:4f:1c:66:60:20:
                    4e:94:23:cc:dd:3e:d4:e2:2a:d6:31:72:8a:cb:4a:
                    1c:9e:92:6b:7d:66:a9:e3:34:b5:fb:73:16:16:49:
                    b3:2d:e9:8f:49:1f:75:c8:b0:7e:7a:6f:65:fd:7e:
                    2a:16:94:9a:30:11:25:04:02:78:c8:59:b9:26:9c:
                    ab:a5:07:f3:70:0f:9b:f3:31:aa:b5:f4:73:ab:15:
                    bc:9e:88:ef:42:9d:99:89:4f:ba:68:b6:ec:f3:81:
                    26:ea:42:f3:45:85:a3:1d:de:18:e5:eb:ef:92:e3:
                    f4:95:b8:b8:0c:d2:9d:56:99:d0:4d:50:eb:12:c5:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:84:2D:08:DF:12:C4:E4:75:27:74:B8:4F:59:D0:BE:D5:BC:E0:DD
            X509v3 Authority Key Identifier:
                keyid:5F:78:2A:6B:70:1D:85:9E:95:55:C7:19:DB:61:E7:13:8B:D9:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/13f3fe5ee23fadcbf17ccb5c01b04dda5dbb74ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d06a8f8a-d3cd-4126-b182-2ca6e1f48218/3fb30a4806bd1d5d30f7ac6f452dde37962b6694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.52.0/22
                IPv6:
                  2803:f920::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:d5:03:4e:59:c4:a2:5a:4c:ad:64:6c:70:1f:91:10:b6:
         bd:2e:61:b3:d9:79:38:77:41:1f:11:12:2a:06:b5:30:4e:e8:
         7c:00:52:95:61:36:29:cb:c1:9a:e6:17:2c:5b:43:56:8e:96:
         2c:1d:24:e4:45:15:cc:76:3d:e3:c7:de:b3:47:1e:9c:97:f5:
         cf:57:af:85:08:c8:45:cb:b0:a9:21:5c:93:29:0f:36:9b:71:
         8f:f1:db:74:20:7e:3b:a8:80:27:56:4a:9a:c6:ff:79:93:6f:
         94:1c:62:b4:76:99:ce:76:98:6a:86:c5:15:a8:77:2f:b2:68:
         69:0c:e3:a4:f9:5c:70:ce:df:2e:3d:3f:ae:02:0a:bb:31:63:
         39:d3:2c:93:d3:12:55:e5:06:8c:4b:93:e8:ef:72:47:24:90:
         17:1d:87:6e:de:78:d3:23:4a:3f:d2:82:03:05:38:ec:b9:cd:
         f5:18:b1:4e:2e:f6:b1:93:72:3f:12:db:ea:df:13:11:3b:7b:
         b5:eb:0e:20:10:aa:0d:b3:a2:96:81:e5:68:ae:03:52:64:35:
         91:a0:62:ca:c1:af:9d:d1:b3:b7:de:47:dd:07:70:e1:90:f9:
         df:82:65:69:8a:e0:a6:86:a4:b9:f3:75:af:f6:65:fc:a8:dd:
         9c:22:be:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFbGIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
YjMwYTQ4MDZiZDFkNWQzMGY3YWM2ZjQ1MmRkZTM3OTYyYjY2OTQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxM2YzZmU1ZWUyM2Zh
ZGNiZjE3Y2NiNWMwMWIwNGRkYTVkYmI3NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsOFQsEaUjsa0dq0LpYL2bmQxyWSOlUQdB26WfVCP1WnB6YnQ
J+iAMQW19HaCEg4QuVg+9c5D7dcIY1bAuwEof9PcNe1Us2exfQEZEOZaAlUSIQPW
xLPDDBw80EFpthX6kZvgbqwxblaZBy8vqMJVGCBK9pChZ5WQ2m6vzkEtplUSTxxm
YCBOlCPM3T7U4irWMXKKy0ocnpJrfWap4zS1+3MWFkmzLemPSR91yLB+em9l/X4q
FpSaMBElBAJ4yFm5JpyrpQfzcA+b8zGqtfRzqxW8nojvQp2ZiU+6aLbs84Em6kLz
RYWjHd4Y5evvkuP0lbi4DNKdVpnQTVDrEsUBAQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDmELQjfEsTkdSd0uE9Z0L7VvODdMB8GA1UdIwQYMBaAFF94KmtwHYWelVXH
Gdth5xOL2Vg6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2ZiMzBh
NDgwNmJkMWQ1ZDMwZjdhYzZmNDUyZGRlMzc5NjJiNjY5NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDA2YThmOGEtZDNjZC00MTI2LWIxODItMmNhNmUx
ZjQ4MjE4LzEzZjNmZTVlZTIzZmFkY2JmMTdjY2I1YzAxYjA0ZGRhNWRiYjc0YWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMDZhOGY4YS1kM2NkLTQxMjYtYjE4Mi0yY2E2
ZTFmNDgyMTgvM2ZiMzBhNDgwNmJkMWQ1ZDMwZjdhYzZmNDUyZGRlMzc5NjJiNjY5
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3kNDANBAIAAjAHAwUAKAP5IDANBgkqhkiG9w0BAQsFAAOC
AQEAK/jVA05ZxKJaTK1kbHAfkRC2vS5hs9l5OHdBHxESKga1ME7ofABSlWE2KcvB
muYXLFtDVo6WLB0k5EUVzHY948fes0cenJf1z1evhQjIRcuwqSFckykPNptxj/Hb
dCB+O6iAJ1ZKmsb/eZNvlBxitHaZznaYaobFFah3L7JoaQzjpPlccM7fLj0/rgIK
uzFjOdMsk9MSVeUGjEuT6O9yRySQFx2Hbt540yNKP9KCAwU47LnN9RixTi72sZNy
PxLb6t8TETt7tesOIBCqDbOiloHlaK4DUmQ1kaBiysGvndGzt95H3Qdw4ZD534Jl
aYrgpoakufN1r/Zl/KjdnCK+CA==
-----END CERTIFICATE-----