Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/0f48be501ee407cbbfcb1e7519351c0e925ad435.roa
File:                     0f48be501ee407cbbfcb1e7519351c0e925ad435.roa (raw, json)
Hash identifier:          e2Jc2BGIaiTm+NqY+PNyRR9J9QVNjyT8lHlBlLn89U0=
Subject key identifier:   35:46:C4:E6:BF:2B:45:B1:9D:DA:E1:07:D1:58:0B:E8:A3:1D:2F:CF
Certificate issuer:       /CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
Certificate serial:       11CD88
Authority key identifier: 12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/0f48be501ee407cbbfcb1e7519351c0e925ad435.roa
Signing time:             Sun 06 Mar 2022 22:25:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263793
IP address blocks:        45.189.216.0/22 maxlen: 24
                          45.189.216.0/24 maxlen: 24
                          45.189.217.0/24 maxlen: 24
                          2803:82e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166728 (0x11cd88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0f48be501ee407cbbfcb1e7519351c0e925ad435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:e7:a1:d5:07:d3:b7:09:52:e7:09:6a:e0:
                    1c:84:0d:74:3f:5b:bf:e6:97:72:94:af:f3:dc:fd:
                    8b:38:03:07:9a:86:56:8d:5e:42:63:d8:cc:cd:12:
                    fb:3d:e5:c5:dd:9b:87:cf:e3:88:ae:bf:74:f7:58:
                    5c:7d:35:5c:8b:ac:43:a3:4a:96:5f:41:f4:9c:67:
                    dd:ca:88:1d:58:98:5d:5b:5d:7d:e7:52:0c:88:bd:
                    bb:c7:04:f9:e1:fc:ab:24:a7:13:1a:1a:49:c3:2a:
                    ed:d5:22:f6:50:b2:c0:4d:04:99:17:a7:ef:81:bb:
                    3b:be:b7:a0:98:7a:2c:3d:55:92:29:36:a1:0a:db:
                    79:ab:e3:fb:dd:58:3f:1e:62:a9:15:81:1c:ee:33:
                    cf:d0:a1:f4:2d:72:c2:85:38:4d:b6:c5:a2:71:8f:
                    c2:7f:f7:43:e4:cd:58:76:42:90:d6:c3:ee:0c:02:
                    bb:b4:b5:55:e5:0e:aa:a5:f5:d6:e1:72:09:d0:05:
                    6f:8f:5a:42:08:72:72:bf:df:f1:83:72:1c:01:5f:
                    ad:b5:a8:d2:8d:61:62:0b:84:f3:eb:53:0f:48:66:
                    3c:1c:4a:24:b7:d3:aa:c0:4f:2d:64:68:ae:e7:65:
                    42:f2:e0:38:e6:ac:43:92:01:c4:28:b5:a5:90:e7:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:46:C4:E6:BF:2B:45:B1:9D:DA:E1:07:D1:58:0B:E8:A3:1D:2F:CF
            X509v3 Authority Key Identifier:
                keyid:12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/0f48be501ee407cbbfcb1e7519351c0e925ad435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.216.0/22
                IPv6:
                  2803:82e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:af:e1:81:22:d8:f1:53:5a:33:01:89:5b:a8:eb:ad:d4:d9:
         18:9d:fe:cb:3f:b9:e7:31:25:23:cc:86:eb:10:f0:aa:63:79:
         58:43:55:a7:36:64:97:4f:84:f2:53:a1:0e:9f:df:12:4f:d9:
         79:d3:56:bf:31:ed:88:88:5e:57:95:85:73:7a:52:c7:59:a8:
         01:66:9a:b0:c5:e5:10:99:0c:c2:47:af:8a:52:16:d0:84:97:
         f9:c0:cb:51:20:25:ae:cd:5c:1a:ec:17:c0:39:47:a7:43:01:
         ff:90:2d:7f:ba:4f:14:e9:9a:73:f2:d5:9e:1e:bd:86:9f:6d:
         4e:ca:2c:d0:a2:68:23:e3:b5:7b:99:75:c3:14:be:49:b4:26:
         f0:2e:21:9b:e4:e8:7c:61:04:4f:78:71:84:99:44:53:aa:22:
         e9:bb:de:38:b7:e2:ba:f5:d5:18:56:31:e8:2f:85:68:d4:e1:
         c4:94:13:d9:d6:24:d7:98:db:1b:14:5d:05:a2:9b:d0:b2:60:
         1c:b6:74:15:f9:bb:ad:72:58:b3:99:44:27:18:e4:4e:21:7f:
         04:4c:a6:02:0e:d8:49:c5:ad:04:da:60:cc:93:97:5d:f7:82:
         d0:ab:b4:5f:78:71:92:9f:d7:50:fa:d4:0c:3f:5b:5a:46:24:
         86:ff:94:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEc2IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
ZGY0ZDk3ZjM1MzkxZGUyODlkYWUzZWVjODJkOTA2NWI0NTIwZjQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygwZjQ4YmU1MDFlZTQw
N2NiYmZjYjFlNzUxOTM1MWMwZTkyNWFkNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkNznodUH07cJUucJauAchA10P1u/5pdylK/z3P2LOAMHmoZW
jV5CY9jMzRL7PeXF3ZuHz+OIrr9091hcfTVci6xDo0qWX0H0nGfdyogdWJhdW119
51IMiL27xwT54fyrJKcTGhpJwyrt1SL2ULLATQSZF6fvgbs7vregmHosPVWSKTah
Ctt5q+P73Vg/HmKpFYEc7jPP0KH0LXLChThNtsWicY/Cf/dD5M1YdkKQ1sPuDAK7
tLVV5Q6qpfXW4XIJ0AVvj1pCCHJyv9/xg3IcAV+ttajSjWFiC4Tz61MPSGY8HEok
t9OqwE8tZGiu52VC8uA45qxDkgHEKLWlkOcSIQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDVGxOa/K0WxndrhB9FYC+ijHS/PMB8GA1UdIwQYMBaAFBKKOdbpipuzA5FL
p9Tp+x8dcLu3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmNkZjRk
OTdmMzUzOTFkZTI4OWRhZTNlZWM4MmQ5MDY1YjQ1MjBmNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmZmZTQ5NTktZTlmOC00NDcyLTgwZjMtMWRmNDM5
MzUyZTUwLzBmNDhiZTUwMWVlNDA3Y2JiZmNiMWU3NTE5MzUxYzBlOTI1YWQ0MzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZmZlNDk1OS1lOWY4LTQ0NzItODBmMy0xZGY0
MzkzNTJlNTAvYmNkZjRkOTdmMzUzOTFkZTI4OWRhZTNlZWM4MmQ5MDY1YjQ1MjBm
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi292DANBAIAAjAHAwUAKAOC4DANBgkqhkiG9w0BAQsFAAOC
AQEAJ6/hgSLY8VNaMwGJW6jrrdTZGJ3+yz+55zElI8yG6xDwqmN5WENVpzZkl0+E
8lOhDp/fEk/ZedNWvzHtiIheV5WFc3pSx1moAWaasMXlEJkMwkevilIW0ISX+cDL
USAlrs1cGuwXwDlHp0MB/5Atf7pPFOmac/LVnh69hp9tTsos0KJoI+O1e5l1wxS+
SbQm8C4hm+TofGEET3hxhJlEU6oi6bveOLfiuvXVGFYx6C+FaNThxJQT2dYk15jb
GxRdBaKb0LJgHLZ0Ffm7rXJYs5lEJxjkTiF/BEymAg7YScWtBNpgzJOXXfeC0Ku0
X3hxkp/XUPrUDD9bWkYkhv+UHw==
-----END CERTIFICATE-----