Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/8641a4ae4616fd8a596f0a8d9662e6ae225d7c4e.roa
File:                     8641a4ae4616fd8a596f0a8d9662e6ae225d7c4e.roa (raw, json)
Hash identifier:          tjOKWTkD9LZcifkKOnc0U6qTpuydAhKafr1mKAq88l4=
Subject key identifier:   7B:27:61:6F:0D:E6:67:52:E6:31:9B:63:89:DF:81:8A:FE:9C:A3:8D
Certificate issuer:       /CN=96da91711589e877379a24b4e7e81faaa3d64334
Certificate serial:       0886
Authority key identifier: CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/8641a4ae4616fd8a596f0a8d9662e6ae225d7c4e.roa
Signing time:             Thu 28 Apr 2022 14:26:32 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Thu 28 Apr 2044 03:00:00 +0000
asID:                     269978
IP address blocks:        189.45.176.0/22 maxlen: 24
                          2803:ee0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96da91711589e877379a24b4e7e81faaa3d64334
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2044 GMT
        Subject: CN=8641a4ae4616fd8a596f0a8d9662e6ae225d7c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:58:24:44:c9:f5:f4:2e:46:71:bd:0d:91:f3:
                    f3:bb:95:ac:7d:9b:09:f2:85:74:ee:45:ea:5c:43:
                    ff:e8:37:99:db:ca:6a:9d:31:38:2b:b2:15:3d:74:
                    2a:ab:eb:bb:b3:22:06:91:8d:c4:59:f0:fc:56:19:
                    8f:91:fc:8b:2b:a2:e8:45:ec:e4:de:ef:80:0c:03:
                    af:83:87:ee:09:40:12:d4:e5:40:a3:6f:94:1d:4e:
                    04:a5:26:30:00:c2:3a:2d:50:72:e1:e5:65:06:6e:
                    a6:8d:f4:dc:3b:a6:8b:b4:53:b5:9f:df:67:29:0a:
                    b1:38:91:cb:f9:d7:9e:ad:10:95:f8:7a:98:74:38:
                    81:a3:7e:29:ad:cf:5c:2d:95:96:db:fc:68:60:de:
                    79:ed:79:5e:ec:a9:32:d4:96:f1:9a:af:9c:09:53:
                    9d:95:1a:f7:a3:69:ac:dc:f1:7a:36:06:d5:07:84:
                    f9:55:ce:4f:ea:88:21:9f:3d:fc:f2:1c:61:37:9f:
                    ce:fe:40:9b:19:55:1c:67:5f:fa:e8:31:f8:d5:73:
                    47:ca:7d:6d:90:c7:da:78:13:52:48:75:8e:64:6a:
                    00:be:24:11:ad:84:ed:02:37:c8:55:06:3b:d2:b0:
                    60:9e:bb:82:a1:91:a7:a1:fc:c3:0d:72:2d:22:72:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:27:61:6F:0D:E6:67:52:E6:31:9B:63:89:DF:81:8A:FE:9C:A3:8D
            X509v3 Authority Key Identifier:
                keyid:CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/8641a4ae4616fd8a596f0a8d9662e6ae225d7c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.176.0/22
                IPv6:
                  2803:ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:d0:3b:92:60:85:d8:14:c7:e8:b2:ce:1d:11:ff:30:c0:
         86:ff:da:ff:3c:1e:9b:fc:6c:43:9a:a4:fb:8f:a1:b4:42:57:
         73:6b:75:f2:ec:42:31:77:df:b6:ab:27:7a:04:59:80:cd:d2:
         8d:5c:7c:fc:2f:15:a4:54:b6:f8:9f:ea:f3:cf:0e:6d:cc:ab:
         9f:ae:ff:1a:d6:21:65:0c:15:4f:a2:68:49:08:67:5c:a1:e1:
         e5:c9:ec:0a:75:a5:63:25:2d:a9:d3:65:df:dd:cb:e6:52:9c:
         55:6e:e0:19:0e:34:11:b8:9e:88:95:f6:5b:ff:f5:66:96:19:
         ff:e8:3d:3e:42:58:84:15:b9:0f:30:06:05:5a:d4:7e:af:cb:
         27:33:aa:3d:e4:1a:13:f1:d4:5b:c1:94:81:92:cc:27:c3:2c:
         39:1b:15:a5:d8:5e:69:82:4a:45:07:d9:b5:39:21:a7:27:6e:
         9b:76:10:77:e8:2a:2f:02:cd:c9:cd:a1:e1:82:f5:6e:75:04:
         a1:62:22:b7:78:2f:66:5d:fd:e1:2a:b1:36:5e:5b:a6:65:3f:
         09:84:d1:3a:43:33:e3:ba:b4:a2:ff:e7:4b:ba:5f:56:c1:c8:
         19:52:ab:c0:4d:66:8f:a1:fd:c3:43:77:1c:85:d9:7a:a8:3e:
         40:c3:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----