Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/481ec6850ecd888554a2e7956cca6850c45004bc.roa
File:                     481ec6850ecd888554a2e7956cca6850c45004bc.roa (raw, json)
Hash identifier:          ZrX81bldELzQK7gmi4+Djv0cJ5htiW2RfWuOEqmj78U=
Subject key identifier:   70:30:E5:F8:0E:73:BD:4C:AC:82:91:10:E7:A1:03:30:BC:26:AA:C2
Certificate issuer:       /CN=5251a1e52e174bb6479231492945887b96c2d4ee
Certificate serial:       0B317C
Authority key identifier: B8:9C:6E:2D:C9:FE:97:27:74:65:70:69:58:7D:D8:CD:34:21:2C:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5251a1e52e174bb6479231492945887b96c2d4ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/481ec6850ecd888554a2e7956cca6850c45004bc.roa
Signing time:             Wed 24 Mar 2021 14:38:22 +0000
ROA not before:           Wed 24 Mar 2021 14:38:22 +0000
ROA not after:            Tue 24 Mar 2026 14:38:22 +0000
asID:                     269816
IP address blocks:        45.186.12.0/22 maxlen: 24
                          2803:760::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733564 (0xb317c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5251a1e52e174bb6479231492945887b96c2d4ee
        Validity
            Not Before: Mar 24 14:38:22 2021 GMT
            Not After : Mar 24 14:38:22 2026 GMT
        Subject: CN=481ec6850ecd888554a2e7956cca6850c45004bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:60:88:8a:e6:aa:70:c4:94:18:30:de:55:
                    10:dc:66:7d:9a:6b:bd:3a:04:97:45:41:a7:18:cf:
                    1c:fb:75:4a:3c:a8:56:46:cf:1d:95:f5:65:a9:a3:
                    78:2b:2d:97:6c:2d:cd:32:4f:40:1c:b6:2f:f6:54:
                    40:b7:89:91:27:a3:de:08:87:6a:8d:9e:83:38:10:
                    bc:40:65:a8:74:ee:56:48:52:91:3f:e4:4b:20:1f:
                    bb:cf:79:23:67:91:b2:c6:b1:54:1e:37:ac:cc:52:
                    91:42:4f:2a:c1:2d:83:65:ba:d2:af:80:50:a6:22:
                    89:de:69:0e:83:3e:68:ae:ab:ac:f0:f9:8f:c7:bf:
                    77:ca:62:6d:5b:87:ef:10:f0:57:45:46:04:ee:ec:
                    72:03:bb:f6:d8:95:18:68:9d:86:b7:1c:0a:d5:78:
                    20:ff:fa:cb:a6:7f:ef:c5:b0:5e:96:70:16:8f:cf:
                    22:20:03:89:7f:97:f3:73:04:3e:b1:bc:93:b6:0b:
                    27:08:55:17:76:e3:4a:ce:46:70:a0:ff:9e:80:0c:
                    9e:c7:d4:81:8a:d6:75:99:93:fb:98:73:26:8d:84:
                    13:a6:ed:ce:70:d5:43:f5:89:0e:f9:4c:20:61:e7:
                    73:14:8d:92:d4:a3:b1:40:43:11:d2:77:74:2d:61:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:E5:F8:0E:73:BD:4C:AC:82:91:10:E7:A1:03:30:BC:26:AA:C2
            X509v3 Authority Key Identifier:
                keyid:B8:9C:6E:2D:C9:FE:97:27:74:65:70:69:58:7D:D8:CD:34:21:2C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5251a1e52e174bb6479231492945887b96c2d4ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/481ec6850ecd888554a2e7956cca6850c45004bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5945203-22f0-45b9-9865-775383d745be/5251a1e52e174bb6479231492945887b96c2d4ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.12.0/22
                IPv6:
                  2803:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:a2:89:fc:9e:ef:6b:bf:9b:df:ae:c3:df:06:8b:fc:71:
         c2:62:28:5f:bc:7f:38:8d:6f:48:1c:7e:a7:63:93:e2:1c:e7:
         cf:9e:1e:48:f7:ad:3d:e7:7b:76:58:80:46:91:7b:fa:99:86:
         90:9d:fd:a4:b9:84:dd:88:eb:75:28:bd:47:b2:61:f2:e8:70:
         19:40:16:9d:27:03:57:eb:e5:9b:e7:c0:e8:2b:a0:43:18:ab:
         c6:92:f5:37:6e:c7:4a:17:82:a6:49:9f:a8:40:2a:75:2e:ed:
         c0:df:f0:13:81:bc:90:14:86:42:c5:9e:cb:23:4d:eb:d1:5c:
         3b:72:15:3a:44:6d:f6:4e:c6:d5:4d:c2:69:f6:a8:be:ce:55:
         05:fc:fc:17:5e:a2:f5:c0:1d:84:58:6d:a7:b0:aa:de:9c:87:
         8c:f5:bc:4a:c5:5d:3b:57:68:89:f3:e1:3c:dd:bc:a9:b8:56:
         bb:17:68:1f:2d:34:c3:4a:02:4d:24:48:77:c4:c0:90:97:0e:
         72:33:51:24:0a:82:68:28:14:2b:3b:6f:54:7f:ba:6c:5a:fe:
         ba:1d:80:2e:35:2a:9c:64:59:5b:b2:3d:21:69:f9:a1:7d:36:
         5e:8c:98:22:1a:1b:4b:ea:09:41:a4:01:06:53:d9:5a:46:75:
         c4:dc:e3:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCzF8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
NTFhMWU1MmUxNzRiYjY0NzkyMzE0OTI5NDU4ODdiOTZjMmQ0ZWUwHhcNMjEwMzI0
MTQzODIyWhcNMjYwMzI0MTQzODIyWjAzMTEwLwYDVQQDEyg0ODFlYzY4NTBlY2Q4
ODg1NTRhMmU3OTU2Y2NhNjg1MGM0NTAwNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiGtgiIrmqnDElBgw3lUQ3GZ9mmu9OgSXRUGnGM8c+3VKPKhW
Rs8dlfVlqaN4Ky2XbC3NMk9AHLYv9lRAt4mRJ6PeCIdqjZ6DOBC8QGWodO5WSFKR
P+RLIB+7z3kjZ5GyxrFUHjeszFKRQk8qwS2DZbrSr4BQpiKJ3mkOgz5orqus8PmP
x793ymJtW4fvEPBXRUYE7uxyA7v22JUYaJ2GtxwK1Xgg//rLpn/vxbBelnAWj88i
IAOJf5fzcwQ+sbyTtgsnCFUXduNKzkZwoP+egAyex9SBitZ1mZP7mHMmjYQTpu3O
cNVD9YkO+UwgYedzFI2S1KOxQEMR0nd0LWF3qQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHAw5fgOc71MrIKREOehAzC8JqrCMB8GA1UdIwQYMBaAFLicbi3J/pcndGVw
aVh92M00ISxWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTI1MWEx
ZTUyZTE3NGJiNjQ3OTIzMTQ5Mjk0NTg4N2I5NmMyZDRlZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU5NDUyMDMtMjJmMC00NWI5LTk4NjUtNzc1Mzgz
ZDc0NWJlLzQ4MWVjNjg1MGVjZDg4ODU1NGEyZTc5NTZjY2E2ODUwYzQ1MDA0YmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTk0NTIwMy0yMmYwLTQ1YjktOTg2NS03NzUz
ODNkNzQ1YmUvNTI1MWExZTUyZTE3NGJiNjQ3OTIzMTQ5Mjk0NTg4N2I5NmMyZDRl
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26DDANBAIAAjAHAwUAKAMHYDANBgkqhkiG9w0BAQsFAAOC
AQEAVraiifye72u/m9+uw98Gi/xxwmIoX7x/OI1vSBx+p2OT4hznz54eSPetPed7
dliARpF7+pmGkJ39pLmE3YjrdSi9R7Jh8uhwGUAWnScDV+vlm+fA6CugQxirxpL1
N27HSheCpkmfqEAqdS7twN/wE4G8kBSGQsWeyyNN69FcO3IVOkRt9k7G1U3Cafao
vs5VBfz8F16i9cAdhFhtp7Cq3pyHjPW8SsVdO1doifPhPN28qbhWuxdoHy00w0oC
TSRId8TAkJcOcjNRJAqCaCgUKztvVH+6bFr+uh2ALjUqnGRZW7I9IWn5oX02XoyY
IhobS+oJQaQBBlPZWkZ1xNzj7Q==
-----END CERTIFICATE-----