Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa
File:                     c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa (raw, json)
Hash identifier:          CDoDiKCT8CwZlj5GfX/csFbqYEs7WVSP8sRS1oD/K0s=
Subject key identifier:   6D:63:9F:79:B6:96:BC:77:54:10:25:5D:24:C3:7E:3A:43:D5:93:6D
Certificate issuer:       /CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
Certificate serial:       0CF212
Authority key identifier: AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa
Signing time:             Wed 24 Mar 2021 14:33:07 +0000
ROA not before:           Wed 24 Mar 2021 14:33:07 +0000
ROA not after:            Tue 24 Mar 2026 14:33:07 +0000
asID:                     266808
IP address blocks:        45.236.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848402 (0xcf212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8
        Validity
            Not Before: Mar 24 14:33:07 2021 GMT
            Not After : Mar 24 14:33:07 2026 GMT
        Subject: CN=c3d55cd5ebfa85b1a53203602fb31f028ed9edfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:e7:76:27:e5:ce:32:31:5c:cc:2c:d3:9e:
                    19:b7:bc:a3:3a:38:a4:9e:2e:01:07:d3:7f:5a:6a:
                    fb:fb:d3:3d:6a:a3:66:49:f0:57:d3:df:a6:d0:5e:
                    21:35:fa:24:a2:ee:b9:2a:72:26:17:78:0a:88:1b:
                    0a:07:06:c6:b4:5c:30:6a:df:7e:36:58:f8:35:ec:
                    5f:3d:be:37:e5:18:df:bf:d5:1f:eb:c2:dd:e6:61:
                    d0:b0:d3:d3:b6:76:83:66:0b:aa:86:25:51:75:37:
                    65:20:cd:61:c0:93:d9:56:2e:48:04:87:92:9d:35:
                    19:44:af:c7:3d:b0:cb:0b:57:c4:4f:c9:59:86:d8:
                    70:f3:c9:aa:99:cb:0b:49:0d:e8:90:ce:8a:71:9d:
                    45:0b:94:d8:9c:55:b0:e5:74:6d:19:10:41:1c:71:
                    2e:5e:0d:92:e8:66:51:af:ab:fd:3d:fb:c1:27:07:
                    9b:42:ea:65:a3:0a:0b:d6:08:5b:8a:5e:f8:31:ce:
                    d4:cd:46:76:3a:04:f3:e4:61:28:80:50:0f:ed:97:
                    02:91:43:00:f4:ce:1e:15:91:a1:eb:3a:9b:d8:96:
                    f1:c1:ce:09:34:6f:46:53:44:22:66:ee:93:52:fe:
                    1c:03:15:f9:bd:f5:3d:4f:76:29:61:3e:06:86:26:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:9F:79:B6:96:BC:77:54:10:25:5D:24:C3:7E:3A:43:D5:93:6D
            X509v3 Authority Key Identifier:
                keyid:AB:D7:91:BC:C1:12:3D:BA:99:FB:7A:90:CB:54:71:4E:D7:1F:16:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/c3d55cd5ebfa85b1a53203602fb31f028ed9edfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/285ff343-f7df-4a30-8f61-eaa8f8e2e923/bb1b3bab33faa8adc8fbf6b1c7be7b61a8c5e4c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:ed:f4:fe:f0:e6:ad:1f:ea:0f:2e:d1:a6:dd:5c:50:66:
         bf:8b:f0:b6:38:85:58:e6:fa:df:87:9b:7d:ee:8c:e2:99:30:
         6c:92:eb:e7:3e:ef:35:51:b0:45:0b:bd:9b:4c:83:63:70:93:
         b9:51:2f:28:0b:5f:21:f0:c7:21:9b:90:f1:e5:ae:8a:46:9a:
         88:61:86:da:ad:48:ea:cf:8d:06:d6:be:95:51:e0:0b:ea:e2:
         d6:f5:57:af:78:62:e8:59:50:28:05:09:67:2d:75:ef:9c:bc:
         89:8e:ef:4a:df:6d:96:21:55:02:de:37:2b:81:d7:26:ce:19:
         70:8c:1f:2d:d6:d3:f4:ce:31:59:d7:a9:a2:17:fd:65:b0:fd:
         ee:bd:06:21:86:a1:17:2d:46:a7:ac:d9:23:ed:79:dc:c7:15:
         d1:19:8f:c5:d8:95:bc:9d:e1:f5:a4:2c:a8:49:f3:44:be:5e:
         01:27:89:8e:62:f7:b9:d3:96:9a:c7:65:83:35:f4:74:91:e0:
         28:4c:92:ad:58:18:53:12:dd:77:65:77:f6:44:b2:27:c8:22:
         51:63:58:1a:fb:46:97:3e:d3:88:c0:57:41:8c:55:01:09:d7:
         7f:fb:b7:6b:37:c9:98:2d:07:f4:ba:83:17:bc:66:bf:1d:99:
         46:5b:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----