Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8128be-febf-497b-95c4-67918d0caf72/e81acd41897eed7696b634df251705053c817f34.roa
File:                     e81acd41897eed7696b634df251705053c817f34.roa (raw, json)
Hash identifier:          NlKnO/azzwC6pNnDtjkCQn1/dTQ/GjOPx2E8owoSd6M=
Subject key identifier:   36:F4:35:C9:7F:49:7A:EA:C3:70:AA:5A:B1:4A:E3:04:07:51:E1:D0
Certificate issuer:       /CN=9f59aadfcd50ed1176ee3ad2a91a25ee8231b5dd
Certificate serial:       117071
Authority key identifier: D7:80:C0:B1:B2:2E:9B:A8:0E:8C:5C:65:30:DA:66:DB:FD:B0:7E:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f59aadfcd50ed1176ee3ad2a91a25ee8231b5dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8128be-febf-497b-95c4-67918d0caf72/e81acd41897eed7696b634df251705053c817f34.roa
Signing time:             Tue 19 Oct 2021 04:18:50 +0000
ROA not before:           Mon 24 May 2021 03:00:00 +0000
ROA not after:            Tue 31 Dec 2024 03:00:00 +0000
asID:                     264780
IP address blocks:        45.4.168.0/22 maxlen: 24
                          2803:41c0::/32 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142897 (0x117071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f59aadfcd50ed1176ee3ad2a91a25ee8231b5dd
        Validity
            Not Before: May 24 03:00:00 2021 GMT
            Not After : Dec 31 03:00:00 2024 GMT
        Subject: CN=e81acd41897eed7696b634df251705053c817f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:a8:30:11:ae:22:ba:18:11:36:8f:e3:b3:
                    6c:21:33:8b:20:39:35:86:af:db:e3:3c:cf:d2:79:
                    23:ae:cd:d5:b9:ec:c1:83:15:fc:25:cf:64:dd:7f:
                    2c:6e:c9:ec:e6:e9:23:d5:98:58:e4:c6:43:ec:4e:
                    93:4e:ff:74:4d:a9:a9:aa:5f:fa:1c:1e:ef:94:b6:
                    8c:3b:17:4e:e7:af:df:c1:5d:d7:9d:98:a2:e3:b1:
                    13:9b:96:38:d8:74:5b:d4:28:4a:29:ee:a3:92:16:
                    16:67:35:49:f8:13:5a:d2:fa:91:de:dd:bf:48:ce:
                    6e:0d:4f:2e:6d:39:59:5b:a1:cd:20:ef:e7:fb:79:
                    8f:a5:2b:72:3a:93:40:37:32:8c:58:d1:73:38:17:
                    83:f3:14:aa:f9:6b:46:22:af:86:4f:fd:e5:d0:96:
                    a5:61:94:18:0f:43:e9:68:41:2a:cb:6e:90:e5:24:
                    a8:a1:31:6f:30:0c:43:6d:1e:3f:eb:01:f2:8a:bc:
                    df:82:9a:54:cc:d4:46:8b:ed:dd:34:6a:32:8e:b1:
                    c4:9f:f9:65:2b:ec:b4:83:1b:6d:50:ed:cf:76:30:
                    2d:88:d1:7c:21:00:45:fd:df:1f:13:08:d9:eb:83:
                    78:48:07:6c:8e:4e:17:05:2a:e5:d0:ed:a3:d0:fa:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:35:C9:7F:49:7A:EA:C3:70:AA:5A:B1:4A:E3:04:07:51:E1:D0
            X509v3 Authority Key Identifier:
                keyid:D7:80:C0:B1:B2:2E:9B:A8:0E:8C:5C:65:30:DA:66:DB:FD:B0:7E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f59aadfcd50ed1176ee3ad2a91a25ee8231b5dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8128be-febf-497b-95c4-67918d0caf72/e81acd41897eed7696b634df251705053c817f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8128be-febf-497b-95c4-67918d0caf72/9f59aadfcd50ed1176ee3ad2a91a25ee8231b5dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.168.0/22
                IPv6:
                  2803:41c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:66:1c:3b:a3:ad:61:67:ec:16:69:9b:cd:78:ab:b4:e0:
         73:fb:29:d1:87:28:67:6c:6d:19:0b:13:9b:f9:34:b4:92:2f:
         67:d3:0f:88:15:84:f6:fb:84:d4:e7:1d:e4:c7:8b:89:5f:6a:
         5c:eb:c6:ee:e7:70:3b:0c:2a:d0:78:6b:aa:d5:c4:fe:30:b3:
         e1:9b:87:45:b4:94:a7:1a:67:b7:f6:d0:3e:5a:ef:5a:f8:1e:
         ec:df:a3:e0:22:b0:2f:f4:ff:25:94:fb:09:3b:73:0d:c5:50:
         22:65:92:4a:ed:25:0c:64:f7:ee:cc:b8:f2:04:13:8b:99:1d:
         82:e2:ea:65:29:ae:87:67:f0:7f:e3:d6:30:3a:65:b0:d4:eb:
         63:3a:5c:79:8d:cc:52:02:6c:1e:d8:99:fc:61:fe:41:5c:58:
         29:90:72:fc:49:cb:d6:03:81:26:67:f0:97:37:42:84:2e:43:
         f1:73:5f:8e:e2:5e:2f:85:58:94:78:cf:5d:49:d0:34:ca:1f:
         eb:82:ad:c1:62:c7:b1:1f:9f:2f:3d:3a:a6:8e:b3:c9:59:66:
         24:5b:54:ed:8b:6b:ed:d1:d0:2a:a5:e7:49:24:56:55:54:db:
         bb:c4:8b:95:fc:ac:53:1d:e2:ba:55:74:81:62:96:1a:ca:27:
         fe:ff:0f:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEXBxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
NTlhYWRmY2Q1MGVkMTE3NmVlM2FkMmE5MWEyNWVlODIzMWI1ZGQwHhcNMjEwNTI0
MDMwMDAwWhcNMjQxMjMxMDMwMDAwWjAzMTEwLwYDVQQDEyhlODFhY2Q0MTg5N2Vl
ZDc2OTZiNjM0ZGYyNTE3MDUwNTNjODE3ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgvuoMBGuIroYETaP47NsITOLIDk1hq/b4zzP0nkjrs3VuezB
gxX8Jc9k3X8sbsns5ukj1ZhY5MZD7E6TTv90Tampql/6HB7vlLaMOxdO56/fwV3X
nZii47ETm5Y42HRb1ChKKe6jkhYWZzVJ+BNa0vqR3t2/SM5uDU8ubTlZW6HNIO/n
+3mPpStyOpNANzKMWNFzOBeD8xSq+WtGIq+GT/3l0JalYZQYD0PpaEEqy26Q5SSo
oTFvMAxDbR4/6wHyirzfgppUzNRGi+3dNGoyjrHEn/llK+y0gxttUO3PdjAtiNF8
IQBF/d8fEwjZ64N4SAdsjk4XBSrl0O2j0PprCQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDb0Ncl/SXrqw3CqWrFK4wQHUeHQMB8GA1UdIwQYMBaAFNeAwLGyLpuoDoxc
ZTDaZtv9sH7yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWY1OWFh
ZGZjZDUwZWQxMTc2ZWUzYWQyYTkxYTI1ZWU4MjMxYjVkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI4MTI4YmUtZmViZi00OTdiLTk1YzQtNjc5MThk
MGNhZjcyL2U4MWFjZDQxODk3ZWVkNzY5NmI2MzRkZjI1MTcwNTA1M2M4MTdmMzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjgxMjhiZS1mZWJmLTQ5N2ItOTVjNC02Nzkx
OGQwY2FmNzIvOWY1OWFhZGZjZDUwZWQxMTc2ZWUzYWQyYTkxYTI1ZWU4MjMxYjVk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0EqDANBAIAAjAHAwUAKANBwDANBgkqhkiG9w0BAQsFAAOC
AQEARqtmHDujrWFn7BZpm814q7Tgc/sp0YcoZ2xtGQsTm/k0tJIvZ9MPiBWE9vuE
1Ocd5MeLiV9qXOvG7udwOwwq0HhrqtXE/jCz4ZuHRbSUpxpnt/bQPlrvWvge7N+j
4CKwL/T/JZT7CTtzDcVQImWSSu0lDGT37sy48gQTi5kdguLqZSmuh2fwf+PWMDpl
sNTrYzpceY3MUgJsHtiZ/GH+QVxYKZBy/EnL1gOBJmfwlzdChC5D8XNfjuJeL4VY
lHjPXUnQNMof64KtwWLHsR+fLz06po6zyVlmJFtU7Ytr7dHQKqXnSSRWVVTbu8SL
lfysUx3iulV0gWKWGson/v8PUw==
-----END CERTIFICATE-----