Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/9cb580dbb3e1145603d2da70218747ec8f499c91.roa
File:                     9cb580dbb3e1145603d2da70218747ec8f499c91.roa (raw, json)
Hash identifier:          ZU57Z4HU22PdEkM58Pzs/XQa9OKlV0F6K/McBGWSN3A=
Subject key identifier:   84:E3:BC:36:4A:37:D3:A9:C7:AB:79:85:21:BC:F3:A8:55:EE:95:78
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       12B117
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/9cb580dbb3e1145603d2da70218747ec8f499c91.roa
Signing time:             Fri 15 Oct 2021 01:49:24 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24
                          2803:a0a0:901::/48 maxlen: 48
                          2803:a0a0:903::/48 maxlen: 48
                          2803:a0a0:904::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224983 (0x12b117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=9cb580dbb3e1145603d2da70218747ec8f499c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:7a:54:9e:09:c2:d1:06:e3:71:85:f0:aa:
                    1a:c9:68:59:a1:84:5c:cc:71:6c:9e:5f:46:ae:62:
                    b4:4c:5d:e1:aa:0d:d8:4c:08:6d:7c:1f:19:d4:5e:
                    48:f8:ce:cf:e5:10:1b:bf:2a:93:eb:bb:e6:79:40:
                    b2:56:de:ea:31:2b:3c:80:e5:b7:44:d1:fc:c0:84:
                    a9:dc:a4:be:70:1e:f9:9f:bf:17:60:85:5f:65:fe:
                    f7:45:07:b6:83:a0:18:c1:89:af:43:00:e2:a1:45:
                    11:fc:9d:45:3e:05:67:be:02:5e:0f:1c:38:97:a8:
                    63:d4:91:99:f6:4c:90:9c:2f:b1:2b:3b:12:20:3e:
                    3f:7c:5a:e8:07:8c:e0:3b:4a:98:05:eb:fd:97:d7:
                    c1:b4:62:62:a8:e5:2f:4b:03:d3:60:33:4f:23:14:
                    b0:16:9b:4c:ae:ac:89:b7:77:40:1f:2b:f7:58:5f:
                    9e:a0:da:86:e3:1d:13:a1:63:0a:30:7e:a1:55:13:
                    5f:6e:5e:97:4a:72:a2:4d:bf:50:a2:3f:f6:bb:7d:
                    22:00:b7:07:aa:d8:da:82:11:b8:5a:bc:f8:40:50:
                    a9:03:5d:3c:7e:95:68:a2:b4:7f:f6:82:16:1b:2b:
                    5c:20:d7:98:57:34:05:86:cd:fe:96:53:fa:5d:14:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:BC:36:4A:37:D3:A9:C7:AB:79:85:21:BC:F3:A8:55:EE:95:78
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/9cb580dbb3e1145603d2da70218747ec8f499c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24
                IPv6:
                  2803:a0a0:901::/48
                  2803:a0a0:903::-2803:a0a0:904:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:de:f4:1c:88:59:bb:7b:7d:14:f8:eb:b9:13:87:46:52:
         e1:a8:ea:fb:c9:da:30:4e:e7:57:82:20:9f:d0:12:da:e7:16:
         ea:aa:7a:d0:4f:bd:85:b5:18:1c:aa:7a:91:cb:9a:10:50:60:
         f8:b2:97:d9:d1:43:50:38:c4:83:4f:ab:30:ff:66:61:1d:44:
         9a:9a:b1:9e:3c:98:cc:1c:93:50:c4:55:ee:06:d5:a9:d0:53:
         e5:b8:b5:23:97:1a:ce:7a:55:68:05:e2:f8:ea:51:58:a1:c1:
         cf:6f:3c:42:27:8d:9d:6b:62:2e:5d:e5:11:16:0a:5f:f1:f0:
         70:75:87:d1:bc:f0:eb:0b:ab:a9:b4:9e:58:e0:3a:c4:3e:bb:
         9b:f9:28:f3:23:3b:33:91:9a:d5:9f:3e:55:be:d3:6b:8e:4a:
         ac:8c:3b:b1:27:23:55:ab:95:35:55:59:f9:2e:bc:e7:2e:ce:
         f2:22:2a:b8:78:e0:2e:89:71:74:9a:34:dc:51:04:96:a2:94:
         34:8b:92:13:af:80:43:a6:bb:4f:4a:0b:4e:06:70:bd:0f:c8:
         e0:ff:93:29:a7:46:60:b4:43:c6:3b:60:0d:a2:d2:91:5b:f7:
         ad:59:ee:ce:f0:2a:e9:c9:69:50:d4:74:75:29:f4:a1:c5:0d:
         7a:c5:36:23
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIDErEXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY2
MzY4NTE0NDNiMmY3Mzk2ZWQ4NTE1NmY1YzcwY2JjZmE0ZGViZDUwHhcNMjExMDE0
MDMwMDAwWhcNMjMxMDE0MDMwMDAwWjAzMTEwLwYDVQQDEyg5Y2I1ODBkYmIzZTEx
NDU2MDNkMmRhNzAyMTg3NDdlYzhmNDk5YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx8V6VJ4JwtEG43GF8KoayWhZoYRczHFsnl9GrmK0TF3hqg3Y
TAhtfB8Z1F5I+M7P5RAbvyqT67vmeUCyVt7qMSs8gOW3RNH8wISp3KS+cB75n78X
YIVfZf73RQe2g6AYwYmvQwDioUUR/J1FPgVnvgJeDxw4l6hj1JGZ9kyQnC+xKzsS
ID4/fFroB4zgO0qYBev9l9fBtGJiqOUvSwPTYDNPIxSwFptMrqyJt3dAHyv3WF+e
oNqG4x0ToWMKMH6hVRNfbl6XSnKiTb9Qoj/2u30iALcHqtjaghG4Wrz4QFCpA108
fpVoorR/9oIWGytcINeYVzQFhs3+llP6XRQQcwIDAQABo4ICgDCCAnwwHQYDVR0O
BBYEFITjvDZKN9Opx6t5hSG886hV7pV4MB8GA1UdIwQYMBaAFFK8e4zI05HiJAUc
u8vE4XpghjjkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjYzNjg1
MTQ0M2IyZjczOTZlZDg1MTU2ZjVjNzBjYmNmYTRkZWJkNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDYzMjcyZjMtNmRiNi00MzMzLWI5NTAtMTVjMTdi
ZjMzODJhLzljYjU4MGRiYjNlMTE0NTYwM2QyZGE3MDIxODc0N2VjOGY0OTljOTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNjMyNzJmMy02ZGI2LTQzMzMtYjk1MC0xNWMx
N2JmMzM4MmEvZjYzNjg1MTQ0M2IyZjczOTZlZDg1MTU2ZjVjNzBjYmNmYTRkZWJk
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBEBggrBgEFBQcBBwEB/wQ1
MDMwDAQCAAEwBgMEAC3pZzAjBAIAAjAdAwcAKAOgoAkBMBIDBwAoA6CgCQMDBwAo
A6CgCQQwDQYJKoZIhvcNAQELBQADggEBAFfG3vQciFm7e30U+Ou5E4dGUuGo6vvJ
2jBO51eCIJ/QEtrnFuqqetBPvYW1GByqepHLmhBQYPiyl9nRQ1A4xINPqzD/ZmEd
RJqasZ48mMwck1DEVe4G1anQU+W4tSOXGs56VWgF4vjqUVihwc9vPEInjZ1rYi5d
5REWCl/x8HB1h9G88OsLq6m0nljgOsQ+u5v5KPMjOzORmtWfPlW+02uOSqyMO7En
I1WrlTVVWfkuvOcuzvIiKrh44C6JcXSaNNxRBJailDSLkhOvgEOmu09KC04GcL0P
yOD/kymnRmC0Q8Y7YA2i0pFb961Z7s7wKunJaVDUdHUp9KHFDXrFNiM=
-----END CERTIFICATE-----