Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/0b77ae1d89e646117477cd937f27c1401004ec90.roa
File:                     0b77ae1d89e646117477cd937f27c1401004ec90.roa (raw, json)
Hash identifier:          jpRjYtPRpPs8A3hzUPyHP2xwyqKwzBuUfKpD5RFHXU0=
Subject key identifier:   15:26:9D:BB:A5:12:2B:3D:6E:5B:0E:63:43:3B:58:62:C8:F9:A2:AA
Certificate issuer:       /CN=6f5cefcbc57f263d526a772463f9ccfb9ba83615
Certificate serial:       10B5E7
Authority key identifier: F7:AD:7A:29:AD:05:42:75:F9:C8:C6:44:2B:A6:91:D6:BD:67:2D:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f5cefcbc57f263d526a772463f9ccfb9ba83615.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/0b77ae1d89e646117477cd937f27c1401004ec90.roa
Signing time:             Thu 30 Sep 2021 05:19:38 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267740
IP address blocks:        45.168.196.0/22 maxlen: 24
                          2801:18:800::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095143 (0x10b5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5cefcbc57f263d526a772463f9ccfb9ba83615
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0b77ae1d89e646117477cd937f27c1401004ec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:85:7e:d2:e2:c3:03:9c:3b:e4:65:0a:63:
                    ec:5b:9a:05:7c:fa:a6:08:34:5f:a2:d3:1a:48:06:
                    ea:e9:66:c0:b6:d8:d0:0b:8e:3f:69:cf:37:52:7b:
                    69:52:0d:7e:16:cf:76:d4:e0:fc:3c:9b:d1:16:2a:
                    db:6a:b8:05:09:aa:30:60:db:ac:10:d0:a2:81:c7:
                    0e:fb:00:f3:78:fb:3b:af:e0:ea:b9:65:e7:ce:65:
                    a1:72:a9:57:3b:29:64:50:43:b7:cc:9e:33:d7:eb:
                    69:12:2f:b8:40:0c:1b:d0:20:1d:83:c4:95:99:26:
                    49:40:ae:d6:51:8c:2e:90:7f:ad:90:4d:05:60:a1:
                    46:a6:b9:d4:8e:db:01:8c:96:f5:b7:48:a8:5c:a2:
                    7d:6e:1c:6f:89:24:03:63:0f:cb:8f:c8:ef:6b:13:
                    25:5c:b3:41:1c:36:ca:3f:b4:85:34:14:52:61:7c:
                    ae:b7:68:39:05:c2:70:28:61:81:02:a6:42:0d:18:
                    f6:23:8d:4d:0d:4d:f2:c2:5a:f9:19:ad:27:e3:6e:
                    c4:7f:f5:5e:c1:71:6b:35:2d:e2:0f:b9:b4:df:fd:
                    d9:b9:77:c0:a6:84:1d:c3:01:ae:a8:86:73:87:ed:
                    7e:2b:f6:65:48:a9:55:22:eb:97:b8:d0:e9:a1:50:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:9D:BB:A5:12:2B:3D:6E:5B:0E:63:43:3B:58:62:C8:F9:A2:AA
            X509v3 Authority Key Identifier:
                keyid:F7:AD:7A:29:AD:05:42:75:F9:C8:C6:44:2B:A6:91:D6:BD:67:2D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f5cefcbc57f263d526a772463f9ccfb9ba83615.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/0b77ae1d89e646117477cd937f27c1401004ec90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c6da1e9-7866-48d8-8b6c-3a85ad626580/6f5cefcbc57f263d526a772463f9ccfb9ba83615.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.196.0/22
                IPv6:
                  2801:18:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:dc:82:97:5d:f1:9d:18:d9:7e:01:32:34:bf:fd:e7:25:ab:
         06:42:87:c2:bd:05:3f:5a:20:0b:d7:e6:54:fd:e5:bf:5c:3f:
         68:f1:9d:34:8c:e4:1a:57:0f:cc:ab:b8:60:54:b5:96:bf:39:
         2c:16:99:69:79:79:29:07:b1:a1:07:9c:39:8d:9a:a5:61:7c:
         fb:3f:3d:99:d5:7b:9b:63:ae:09:ad:74:29:c5:8c:11:ff:f8:
         d1:37:9d:a2:44:02:26:4c:ab:5c:c3:ce:85:7b:42:6c:bb:f1:
         66:52:68:e7:fe:28:95:fa:84:5f:0c:8a:53:74:c5:3d:6e:ad:
         70:e2:64:36:1e:9d:8d:f1:5f:69:c2:4a:7b:20:cc:db:2c:85:
         0b:c2:37:57:22:e9:d8:5d:3d:e2:d4:02:b8:b0:17:48:b5:12:
         d8:8a:3e:a5:9c:2c:90:71:25:7a:4c:98:3a:a9:81:24:35:ae:
         d8:36:73:34:94:f7:d8:4f:85:1f:47:19:6f:bd:ac:89:ec:85:
         54:50:b2:54:c0:fe:9f:01:af:33:0a:bf:19:48:72:aa:9b:83:
         d5:a1:64:ce:c6:0b:99:c3:e7:5f:36:5f:8e:fe:39:54:52:73:
         bf:73:b7:ba:bf:f4:c6:69:a4:dc:ff:72:08:87:07:64:cc:e9:
         cb:13:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----