Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/84647f4870d1b5da56f72f30105a1b21c680175e.roa
File:                     84647f4870d1b5da56f72f30105a1b21c680175e.roa (raw, json)
Hash identifier:          3fRhSrWCjmBqtiMFjiucjgonktgIPoVK9zf/3OizQlI=
Subject key identifier:   B0:74:43:7C:35:08:BB:20:07:05:EB:B9:50:EB:51:BA:2E:4C:F2:09
Certificate issuer:       /CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
Certificate serial:       0D2E89
Authority key identifier: EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/84647f4870d1b5da56f72f30105a1b21c680175e.roa
Signing time:             Wed 24 Mar 2021 14:34:22 +0000
ROA not before:           Wed 24 Mar 2021 14:34:22 +0000
ROA not after:            Tue 24 Mar 2026 14:34:22 +0000
asID:                     266655
IP address blocks:        45.225.43.0/24 maxlen: 24
                          45.225.132.0/23 maxlen: 23
                          2803:c120::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863881 (0xd2e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c039812edab95b305292dc8f1a3339fcf9cd5dc
        Validity
            Not Before: Mar 24 14:34:22 2021 GMT
            Not After : Mar 24 14:34:22 2026 GMT
        Subject: CN=84647f4870d1b5da56f72f30105a1b21c680175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:c4:d1:1d:33:45:87:89:ad:9c:08:74:77:
                    ce:85:28:5d:b9:3c:d0:5f:84:72:f7:38:7f:46:0d:
                    9a:26:46:4f:87:b2:b9:db:25:5c:a5:21:26:c3:fa:
                    b7:2e:c7:d5:13:48:75:fd:7e:39:7d:f5:25:21:49:
                    bf:06:3b:fc:4c:c8:82:10:0f:5a:5b:37:7c:42:f8:
                    a3:2f:0e:b8:92:36:50:10:de:1f:75:01:66:62:f0:
                    22:ca:49:29:69:6e:dc:89:27:01:24:1f:4d:97:c9:
                    8c:a0:e0:18:91:33:55:2b:24:f4:24:ca:71:d7:82:
                    6d:d4:dc:ff:69:3f:e9:93:d0:59:01:d6:63:2a:1f:
                    e1:a8:df:6e:8a:48:56:f6:2b:71:0b:30:e8:ee:87:
                    de:31:4b:27:30:a7:f5:a6:ba:00:8b:98:e8:d3:56:
                    02:cb:07:6b:92:2b:5f:0f:49:a6:ba:2e:64:bc:a8:
                    f2:a6:d2:66:aa:0f:14:b7:e0:41:59:3b:d1:56:72:
                    1f:99:03:1e:80:50:89:47:23:8d:79:64:b3:71:c1:
                    6d:c6:1c:ff:fe:49:71:96:53:ea:c0:9b:4e:7a:f5:
                    e6:a8:96:8f:b8:11:1a:f5:26:c7:1d:5d:c3:66:69:
                    8d:30:68:34:80:74:91:5a:45:65:db:d8:af:5d:c2:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:74:43:7C:35:08:BB:20:07:05:EB:B9:50:EB:51:BA:2E:4C:F2:09
            X509v3 Authority Key Identifier:
                keyid:EB:8E:77:AD:91:33:AA:32:0B:37:CF:99:93:4C:D6:85:E0:B3:51:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c039812edab95b305292dc8f1a3339fcf9cd5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/84647f4870d1b5da56f72f30105a1b21c680175e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0203196b-d643-442f-8d05-53356818427e/9c039812edab95b305292dc8f1a3339fcf9cd5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.43.0/24
                  45.225.132.0/23
                IPv6:
                  2803:c120::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:38:dc:2c:12:15:d3:92:f1:fb:30:a8:18:ab:2c:d4:a5:
         f1:cf:78:ac:12:50:fc:0a:df:36:38:28:ba:2c:b5:b5:26:1c:
         04:6b:e1:97:8a:77:c2:18:c7:43:28:9a:4f:49:31:ba:5d:dc:
         4f:8a:88:55:43:d4:b6:a1:56:23:ab:35:08:9d:a2:4f:e1:ed:
         31:c4:56:db:3e:8a:ec:ce:10:14:52:0d:ae:8a:da:23:b1:3c:
         40:a7:33:6a:da:56:90:9d:7c:96:c9:34:7d:0d:14:0b:1a:4e:
         6d:82:66:ef:3a:33:94:9f:a3:54:7a:6a:01:35:89:15:18:90:
         78:47:e4:ed:08:f1:f8:68:9d:6f:23:bc:4c:97:14:a7:fd:90:
         c4:b7:bd:d4:84:6e:f8:bd:f2:1a:d5:84:a5:fc:34:57:86:d5:
         af:f4:6c:44:6f:cd:ee:46:00:c3:30:b7:48:e7:25:a5:50:e1:
         da:0c:0e:3f:4c:b5:9e:76:6b:f9:b1:62:6c:6b:95:0d:36:cf:
         3c:5b:00:03:3d:f5:53:5c:04:f5:2c:99:47:33:07:98:d2:e3:
         28:b1:68:c8:fd:d3:19:a9:5b:ba:e8:f8:b7:f4:f7:7a:99:32:
         90:4b:1a:82:39:84:c0:0e:ac:18:0a:f9:42:40:bb:52:df:0b:
         ae:e0:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----