Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/3bf935470ed9739269c92f8f7c746582ff7ec4f8.roa
File:                     3bf935470ed9739269c92f8f7c746582ff7ec4f8.roa (raw, json)
Hash identifier:          fwuVxbm92Fihc9/IESF7F3RE0C8Ecx4iz0rBVeqokNA=
Subject key identifier:   47:B9:BC:3B:77:F1:14:8B:61:1D:17:1A:F1:08:43:97:C4:52:54:5F
Certificate issuer:       /CN=a8ee6d0b2ab93217120c81912e01b4d31ea04032
Certificate serial:       0363B6
Authority key identifier: B6:02:41:02:D0:F9:2C:C6:04:18:B7:09:71:2B:B0:8D:C4:78:6E:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8ee6d0b2ab93217120c81912e01b4d31ea04032.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/3bf935470ed9739269c92f8f7c746582ff7ec4f8.roa
Signing time:             Wed 24 Mar 2021 14:42:09 +0000
ROA not before:           Wed 24 Mar 2021 14:42:08 +0000
ROA not after:            Tue 24 Mar 2026 14:42:08 +0000
asID:                     22869
IP address blocks:        45.171.64.0/22 maxlen: 24
                          2803:a7a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222134 (0x363b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8ee6d0b2ab93217120c81912e01b4d31ea04032
        Validity
            Not Before: Mar 24 14:42:08 2021 GMT
            Not After : Mar 24 14:42:08 2026 GMT
        Subject: CN=3bf935470ed9739269c92f8f7c746582ff7ec4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:78:d9:77:19:4e:cc:42:04:25:3a:7e:c9:
                    cf:69:1e:ef:26:92:7e:c9:14:ae:46:75:1c:fa:0a:
                    e2:9a:12:a3:ef:57:cd:62:56:bb:06:cc:c9:c7:ae:
                    44:de:68:ec:22:4d:95:2e:01:0b:79:c7:d7:de:ee:
                    fd:82:62:cf:7a:30:dd:68:b8:59:91:4d:84:45:c7:
                    6b:b6:5b:20:b2:2a:ee:6b:a5:31:37:d6:d7:15:de:
                    32:9a:7f:35:3c:85:6e:a4:ed:6f:c6:07:41:d0:84:
                    31:2d:34:31:39:97:53:6c:36:fc:09:b3:26:33:41:
                    74:82:b3:a4:72:d3:7a:f2:32:8e:05:91:53:10:b9:
                    64:56:ac:df:a9:80:5b:c8:c9:8b:c9:10:29:06:fe:
                    5b:36:04:e3:7a:19:8f:11:2e:94:6c:a5:70:19:6c:
                    b9:43:c1:61:68:5d:df:6f:72:bb:02:98:80:9f:1b:
                    ae:51:9c:e2:b3:59:9d:cb:d3:1c:04:dd:31:e7:fd:
                    f3:10:37:eb:bf:5a:0c:c1:d3:47:18:34:67:c0:fe:
                    98:c9:5a:bc:e1:cc:73:de:38:ce:2d:25:ba:81:b6:
                    f6:3c:0a:ff:35:75:a2:ec:ba:92:91:0f:e9:14:e6:
                    ea:29:dd:bc:55:ce:66:c7:86:79:44:dd:dc:1d:4a:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:BC:3B:77:F1:14:8B:61:1D:17:1A:F1:08:43:97:C4:52:54:5F
            X509v3 Authority Key Identifier:
                keyid:B6:02:41:02:D0:F9:2C:C6:04:18:B7:09:71:2B:B0:8D:C4:78:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8ee6d0b2ab93217120c81912e01b4d31ea04032.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/3bf935470ed9739269c92f8f7c746582ff7ec4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c80d6e8-dbd8-459d-9c3e-45767578d0c1/a8ee6d0b2ab93217120c81912e01b4d31ea04032.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.64.0/22
                IPv6:
                  2803:a7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:0d:de:5c:73:7b:42:11:73:2b:19:42:1b:6c:f2:7f:18:e5:
         51:e1:59:88:58:83:3b:6d:14:76:d5:b4:b4:6d:6a:8e:c6:b4:
         7f:71:d9:f3:82:65:0a:13:a0:26:ed:43:e4:05:ee:05:60:20:
         ba:ce:83:eb:b1:f9:fa:a2:8f:62:fd:11:9c:d2:b3:c2:9e:e1:
         82:fa:8a:f8:c5:a3:c3:81:91:a4:07:9f:71:81:85:47:50:10:
         bb:e0:2d:be:ef:f3:c2:81:6a:50:ad:8e:86:e7:c6:5b:3e:cd:
         cc:55:d4:f3:36:f0:b4:3f:96:f9:53:29:d4:eb:31:20:21:16:
         ca:70:89:04:8f:b4:8d:6a:0b:2b:54:f2:2a:de:56:08:dd:52:
         6e:c9:6f:43:80:75:f6:0b:d3:06:0c:5d:90:60:69:dd:fa:e8:
         b0:6f:3f:27:01:aa:cd:2d:18:b5:6e:4c:59:21:ad:5c:41:e6:
         2d:ba:31:26:b0:34:00:52:eb:b1:cb:17:45:9d:4c:98:e4:9e:
         17:b9:37:f2:b0:96:78:dc:0f:bb:b1:a8:b0:6f:80:cc:ea:47:
         9a:f2:d9:19:a1:13:1b:cc:ef:f3:e5:c5:ea:b2:43:83:58:40:
         d1:15:83:a7:8a:c9:fb:79:e8:07:13:df:24:49:ac:7c:1b:f5:
         9c:77:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----