Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/a9e52d715328dacd2485b75573087d1a07dd7a90.roa
File:                     a9e52d715328dacd2485b75573087d1a07dd7a90.roa (raw, json)
Hash identifier:          n1T0GwdzL3H8/QvxApK2bu7Kq10TKS1Xy4cjEjBOuTs=
Subject key identifier:   D5:9A:C5:EC:6D:70:F1:0A:27:43:DE:77:9F:4B:11:0A:A7:48:FD:7F
Certificate issuer:       /CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
Certificate serial:       0D01FC
Authority key identifier: ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/a9e52d715328dacd2485b75573087d1a07dd7a90.roa
Signing time:             Wed 24 Mar 2021 14:39:18 +0000
ROA not before:           Wed 24 Mar 2021 14:39:17 +0000
ROA not after:            Tue 24 Mar 2026 14:39:17 +0000
asID:                     265734
IP address blocks:        45.65.203.0/24 maxlen: 24
                          2801:1a:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852476 (0xd01fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
        Validity
            Not Before: Mar 24 14:39:17 2021 GMT
            Not After : Mar 24 14:39:17 2026 GMT
        Subject: CN=a9e52d715328dacd2485b75573087d1a07dd7a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:fc:81:c3:3a:8e:ea:99:ab:27:5d:be:3e:
                    a6:03:fd:fb:26:e7:99:a7:71:0f:dc:fc:59:b5:cd:
                    a7:06:b9:3d:b0:40:2b:ec:a9:d8:40:f7:ef:e9:73:
                    30:80:8f:05:34:a7:ab:44:df:f0:ac:49:57:dd:95:
                    a8:07:2b:9a:24:67:6f:a3:9b:30:f0:a6:37:ba:4b:
                    ab:ed:f4:f8:b9:10:4a:a0:fd:f9:ed:67:f8:ac:1c:
                    ef:de:8f:f9:63:06:9b:61:d2:8d:55:18:28:fe:b8:
                    5e:74:ff:13:7e:19:1d:83:35:d7:60:db:7e:21:75:
                    86:b8:cb:5c:f5:88:0c:0f:88:b0:65:3f:2d:fb:c0:
                    56:be:77:73:ea:32:fd:69:f1:d9:f0:24:ab:98:c1:
                    86:47:0b:b1:63:cd:92:e9:8d:f3:ac:85:90:81:28:
                    4e:d3:cd:d8:26:01:46:c0:ff:fb:2b:2d:7c:4f:f4:
                    de:2b:3f:85:f6:9c:b4:7a:fc:c9:3d:71:16:21:f6:
                    20:82:fa:51:93:0e:5c:14:7a:06:12:b8:20:fa:77:
                    99:fb:68:a7:0f:45:67:a9:a9:e9:a5:40:63:82:03:
                    99:0a:eb:b4:74:2f:e4:e4:89:fa:6d:fc:82:54:f7:
                    80:61:56:c0:69:e2:9a:0e:a0:e5:14:70:81:d0:57:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9A:C5:EC:6D:70:F1:0A:27:43:DE:77:9F:4B:11:0A:A7:48:FD:7F
            X509v3 Authority Key Identifier:
                keyid:ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/a9e52d715328dacd2485b75573087d1a07dd7a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:59:e0:e2:94:6c:f8:93:ee:08:40:b5:d7:b1:40:49:8d:
         4b:f2:05:90:26:1c:8d:14:96:1d:76:0a:3b:bc:23:54:37:42:
         a7:e6:c2:e7:81:b1:e8:f8:60:1c:8f:27:52:65:7e:50:57:10:
         26:d6:25:52:91:2e:5c:d8:a1:45:4e:96:84:f5:91:14:8e:28:
         c2:83:c0:3b:0d:5f:5c:55:34:f9:fe:00:06:f2:dc:48:3e:ab:
         56:f6:77:aa:7d:95:7a:53:a4:81:df:18:8c:70:ad:ee:47:42:
         d5:6c:ae:25:74:e5:8f:bd:9e:3b:aa:80:5b:13:b2:cd:47:cf:
         51:62:42:0d:36:89:7b:c1:e8:f4:f7:3a:ef:df:aa:25:b8:60:
         dd:e4:82:8c:a6:c6:e9:e5:d9:21:dd:84:28:62:c7:2e:88:03:
         41:60:af:bc:02:71:9a:ba:77:7f:50:8e:64:8c:8e:87:7e:ad:
         3f:c7:2d:3b:ea:bd:d5:46:29:86:9a:0c:dc:d9:31:2e:65:cc:
         ed:cc:12:0f:c1:8c:bc:ac:46:cc:b0:4e:b2:c4:f2:95:c7:86:
         6f:cf:81:ca:11:ca:c7:1a:bb:6e:3f:aa:f8:b5:82:5e:81:83:
         c9:4d:a6:6e:92:d4:50:1d:c2:fa:c6:28:1d:ab:fc:82:e0:bd:
         8a:4f:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----