Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/7be76093965c09310bafd7d788fd165e47e35198.roa
File:                     7be76093965c09310bafd7d788fd165e47e35198.roa (raw, json)
Hash identifier:          0nxW+tMV8Gq9Ddp+bPya40gH+RIMR7VhSbqOyiE2tYw=
Subject key identifier:   51:D9:DC:F8:F1:08:76:F9:72:BF:BF:36:6D:72:6C:5C:F3:47:31:55
Certificate issuer:       /CN=52bb17f783587359acf790b39c64a0b6fa0f0ceb
Certificate serial:       BAD3
Authority key identifier: 99:28:9F:D9:16:19:57:EB:1A:AA:BE:2E:24:36:42:AB:19:AC:06:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52bb17f783587359acf790b39c64a0b6fa0f0ceb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/7be76093965c09310bafd7d788fd165e47e35198.roa
Signing time:             Wed 24 Mar 2021 14:31:53 +0000
ROA not before:           Wed 24 Mar 2021 14:31:53 +0000
ROA not after:            Tue 24 Mar 2026 14:31:53 +0000
asID:                     267741
IP address blocks:        45.168.80.0/24 maxlen: 24
                          45.169.52.0/23 maxlen: 24
                          2803:9da0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47827 (0xbad3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bb17f783587359acf790b39c64a0b6fa0f0ceb
        Validity
            Not Before: Mar 24 14:31:53 2021 GMT
            Not After : Mar 24 14:31:53 2026 GMT
        Subject: CN=7be76093965c09310bafd7d788fd165e47e35198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:f8:e8:2d:65:ac:11:b7:9e:c3:f0:e4:ce:
                    b1:3b:c7:1a:4f:4d:c3:86:dc:37:c7:3f:90:32:ef:
                    73:32:8b:37:a9:e6:38:4d:cc:47:0f:aa:3e:02:09:
                    58:9f:30:81:26:c9:2f:39:24:ad:d3:a2:ef:d7:43:
                    65:a6:58:15:bf:c3:4d:94:3a:a6:6c:90:61:9f:db:
                    89:e1:8d:12:4b:03:77:e1:35:b9:33:9e:59:16:5e:
                    7b:55:d1:64:cf:85:93:00:56:af:f2:26:5c:e0:e1:
                    26:be:56:63:71:6d:cf:40:fd:a3:4c:19:1d:da:e5:
                    c4:c4:14:cc:f9:24:b4:31:d5:95:11:88:96:55:14:
                    a3:2e:d9:66:db:33:18:7e:8f:de:e3:cd:b2:a1:f3:
                    89:54:73:80:a0:0d:9a:f0:22:fd:4a:82:41:7f:99:
                    c4:c1:e8:b9:60:ce:5e:12:be:b1:54:1a:3a:f5:c3:
                    26:71:04:3a:9e:03:08:e4:e9:26:fa:b2:df:28:41:
                    f5:11:33:8b:e5:da:96:5e:b6:95:eb:1e:a4:53:9f:
                    76:89:74:3d:67:f4:ff:ee:3a:ec:2e:0c:6b:c8:bb:
                    12:59:f5:9e:df:e9:6c:70:07:f4:7f:c5:e1:32:27:
                    73:de:9a:f5:d4:fd:b8:1e:40:50:55:1e:e7:2d:46:
                    0c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:DC:F8:F1:08:76:F9:72:BF:BF:36:6D:72:6C:5C:F3:47:31:55
            X509v3 Authority Key Identifier:
                keyid:99:28:9F:D9:16:19:57:EB:1A:AA:BE:2E:24:36:42:AB:19:AC:06:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52bb17f783587359acf790b39c64a0b6fa0f0ceb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/7be76093965c09310bafd7d788fd165e47e35198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25c0eac5-c4f0-4853-9d17-754a30f5d13d/52bb17f783587359acf790b39c64a0b6fa0f0ceb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.80.0/24
                  45.169.52.0/23
                IPv6:
                  2803:9da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:55:83:40:bd:da:24:f2:f3:8b:21:34:30:68:d3:30:3e:97:
         b8:aa:67:08:e3:f8:f8:e6:a7:b5:10:6f:cb:0b:a7:d1:42:66:
         88:2b:da:04:04:62:ca:da:9e:b3:0f:2d:1d:4c:d7:2e:6e:83:
         51:76:fa:af:b8:16:9a:cb:49:7e:11:4c:14:b6:1d:8e:eb:26:
         a3:dd:7e:80:a3:bc:1d:6f:14:be:64:b7:1b:f1:be:8b:71:13:
         b3:76:f3:93:41:4d:a5:9c:e5:bc:7b:1b:57:ac:4d:06:35:13:
         be:16:92:71:1a:19:20:17:d6:38:27:e6:2a:1c:e5:2f:75:10:
         b7:59:6d:24:e3:a6:3f:82:22:08:7a:eb:40:33:ed:5c:ee:b0:
         bd:61:67:a5:3f:53:c0:28:29:36:87:fa:d0:58:2b:0b:df:67:
         86:dc:b0:9d:3a:b0:ce:fd:e5:e4:34:d0:22:f4:91:59:ab:df:
         50:4e:0f:61:5b:54:7b:dc:dd:74:2a:6a:ec:9a:f7:19:e1:57:
         94:34:b9:46:a6:96:3d:f4:90:df:89:e5:8b:b3:04:23:a7:bb:
         34:16:dc:7c:0f:b5:bb:3d:24:88:0a:78:a8:9c:0d:13:70:ba:
         12:7f:10:4b:80:9b:f1:25:40:fa:d1:79:0c:0e:2f:11:4d:1c:
         53:3b:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----