Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f1448ea9-0fb9-4a0f-b452-b0da6f9db6a5/d7521e2f43f47c24cc7f084551eb76563abd10d6.roa
File:                     d7521e2f43f47c24cc7f084551eb76563abd10d6.roa (raw, json)
Hash identifier:          tJCdrG69SaYjAfpk1dA9XWgd/+M+aqruhg9iK6i6e/w=
Subject key identifier:   C5:ED:9A:D6:FB:40:6A:1B:D0:74:D3:9F:8A:51:55:D1:F1:57:85:FE
Certificate issuer:       /CN=34c1f291ec9ca977125ed319d9bd267e0a6dbaa6
Certificate serial:       06DD86
Authority key identifier: AE:9E:03:B7:A3:70:EA:00:D8:6C:FA:E2:C1:98:D3:BD:60:C0:45:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34c1f291ec9ca977125ed319d9bd267e0a6dbaa6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f1448ea9-0fb9-4a0f-b452-b0da6f9db6a5/d7521e2f43f47c24cc7f084551eb76563abd10d6.roa
Signing time:             Wed 24 Mar 2021 14:32:47 +0000
ROA not before:           Wed 24 Mar 2021 14:32:47 +0000
ROA not after:            Tue 24 Mar 2026 14:32:47 +0000
asID:                     61451
IP address blocks:        45.173.0.0/22 maxlen: 24
                          2803:c060::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449926 (0x6dd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34c1f291ec9ca977125ed319d9bd267e0a6dbaa6
        Validity
            Not Before: Mar 24 14:32:47 2021 GMT
            Not After : Mar 24 14:32:47 2026 GMT
        Subject: CN=d7521e2f43f47c24cc7f084551eb76563abd10d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:87:7e:60:a6:0c:0d:94:3c:a6:71:a9:0a:
                    d4:ae:e0:4b:07:75:f8:fb:72:79:6e:1b:09:87:58:
                    0e:fd:c7:1e:40:39:e3:ff:cb:f3:eb:2c:89:8e:56:
                    39:93:5f:f0:9a:87:d6:3f:ac:39:9a:48:15:ca:6f:
                    02:f3:92:42:a4:46:20:a4:72:ea:29:07:a9:be:18:
                    4b:c7:3c:d3:41:f5:8f:de:ca:37:79:b6:74:31:2c:
                    75:73:b5:ff:04:53:a7:b5:e5:95:53:6c:26:bd:54:
                    3a:4a:47:0a:8d:bc:cf:8c:6e:44:aa:a2:6a:b0:a5:
                    fa:a1:f9:07:6d:f2:e2:8e:94:64:14:d4:8f:57:6b:
                    5e:44:c9:7b:1a:3d:6b:4f:5b:64:3d:83:4e:36:fe:
                    a6:69:80:28:cc:98:bc:b5:34:2e:0a:54:5d:26:c7:
                    cd:2f:27:c9:72:f3:a3:ee:51:41:45:55:57:93:a9:
                    39:41:8c:57:b8:03:26:67:6d:a2:fd:73:46:0c:c7:
                    9a:17:39:6a:77:57:6b:31:8e:3f:b2:7b:8b:2e:a0:
                    50:90:bd:33:68:67:be:3f:82:fb:a4:bc:5b:64:10:
                    3f:ba:30:68:c9:dc:03:8e:9a:55:77:4f:4d:1e:22:
                    0a:28:df:02:07:11:dd:47:02:c6:98:68:11:11:4f:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:ED:9A:D6:FB:40:6A:1B:D0:74:D3:9F:8A:51:55:D1:F1:57:85:FE
            X509v3 Authority Key Identifier:
                keyid:AE:9E:03:B7:A3:70:EA:00:D8:6C:FA:E2:C1:98:D3:BD:60:C0:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34c1f291ec9ca977125ed319d9bd267e0a6dbaa6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f1448ea9-0fb9-4a0f-b452-b0da6f9db6a5/d7521e2f43f47c24cc7f084551eb76563abd10d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f1448ea9-0fb9-4a0f-b452-b0da6f9db6a5/34c1f291ec9ca977125ed319d9bd267e0a6dbaa6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.0.0/22
                IPv6:
                  2803:c060::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:8f:77:f5:5f:3d:dc:bf:32:1b:bb:d4:28:7a:7b:bf:fe:
         8a:92:45:97:cb:a3:2c:10:08:ac:aa:b1:a6:59:da:ee:45:84:
         34:a9:94:0c:15:23:02:87:70:33:2e:26:b9:b2:85:4e:1d:09:
         db:2b:f4:e5:b0:ad:28:b6:dd:21:04:3b:8e:78:d0:64:9a:17:
         60:f5:4e:5d:8b:c5:42:88:54:c2:0b:58:67:63:ac:d2:2f:87:
         61:3a:cf:c3:53:60:23:ee:ff:49:62:31:56:7b:19:5a:44:09:
         de:b4:41:63:68:2d:b2:21:e6:41:e8:a5:7c:18:86:d5:f9:fd:
         34:93:0e:c6:ad:6c:f6:85:19:de:77:78:8c:72:24:ff:cb:6f:
         fd:4a:e3:b8:2c:8d:69:f6:7e:9b:22:ed:77:e9:4e:13:8f:b8:
         ee:c6:9b:39:2b:01:20:b6:4d:4b:2d:49:06:b6:c6:c3:6a:9c:
         e8:30:9f:90:dc:53:dd:db:b8:9e:cc:0d:39:45:7d:f1:c3:53:
         5e:72:5b:66:cb:46:9f:06:9f:6d:66:91:7d:3a:7e:04:9f:b0:
         64:ae:ef:20:a3:14:77:3d:54:f4:5e:47:0d:38:22:2a:90:dc:
         ec:7b:fe:04:75:72:1d:eb:ff:ef:91:04:d2:17:b3:e5:7a:f4:
         aa:d6:e1:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDBt2GMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM0
YzFmMjkxZWM5Y2E5NzcxMjVlZDMxOWQ5YmQyNjdlMGE2ZGJhYTYwHhcNMjEwMzI0
MTQzMjQ3WhcNMjYwMzI0MTQzMjQ3WjAzMTEwLwYDVQQDEyhkNzUyMWUyZjQzZjQ3
YzI0Y2M3ZjA4NDU1MWViNzY1NjNhYmQxMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvBCHfmCmDA2UPKZxqQrUruBLB3X4+3J5bhsJh1gO/cceQDnj
/8vz6yyJjlY5k1/wmofWP6w5mkgVym8C85JCpEYgpHLqKQepvhhLxzzTQfWP3so3
ebZ0MSx1c7X/BFOnteWVU2wmvVQ6SkcKjbzPjG5EqqJqsKX6ofkHbfLijpRkFNSP
V2teRMl7Gj1rT1tkPYNONv6maYAozJi8tTQuClRdJsfNLyfJcvOj7lFBRVVXk6k5
QYxXuAMmZ22i/XNGDMeaFzlqd1drMY4/snuLLqBQkL0zaGe+P4L7pLxbZBA/ujBo
ydwDjppVd09NHiIKKN8CBxHdRwLGmGgREU9aFQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFMXtmtb7QGob0HTTn4pRVdHxV4X+MB8GA1UdIwQYMBaAFK6eA7ejcOoA2Gz6
4sGY071gwEVrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzRjMWYy
OTFlYzljYTk3NzEyNWVkMzE5ZDliZDI2N2UwYTZkYmFhNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjE0NDhlYTktMGZiOS00YTBmLWI0NTItYjBkYTZm
OWRiNmE1L2Q3NTIxZTJmNDNmNDdjMjRjYzdmMDg0NTUxZWI3NjU2M2FiZDEwZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMTQ0OGVhOS0wZmI5LTRhMGYtYjQ1Mi1iMGRh
NmY5ZGI2YTUvMzRjMWYyOTFlYzljYTk3NzEyNWVkMzE5ZDliZDI2N2UwYTZkYmFh
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2tADANBAIAAjAHAwUAKAPAYDANBgkqhkiG9w0BAQsFAAOC
AQEAQ1+Pd/VfPdy/Mhu71Ch6e7/+ipJFl8ujLBAIrKqxplna7kWENKmUDBUjAodw
My4mubKFTh0J2yv05bCtKLbdIQQ7jnjQZJoXYPVOXYvFQohUwgtYZ2Os0i+HYTrP
w1NgI+7/SWIxVnsZWkQJ3rRBY2gtsiHmQeilfBiG1fn9NJMOxq1s9oUZ3nd4jHIk
/8tv/UrjuCyNafZ+myLtd+lOE4+47sabOSsBILZNSy1JBrbGw2qc6DCfkNxT3du4
nswNOUV98cNTXnJbZstGnwafbWaRfTp+BJ+wZK7vIKMUdz1U9F5HDTgiKpDc7Hv+
BHVyHev/75EE0hez5Xr0qtbhdg==
-----END CERTIFICATE-----