Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37e8f8df-95d3-44d3-a623-71dc1ce071e6/de825d3f1652c615606aea929df4d1189aee4425.roa
File:                     de825d3f1652c615606aea929df4d1189aee4425.roa (raw, json)
Hash identifier:          PlfyoELX2IDgU/ujY+vnuA4xKJFRutrw5QuyG4/QnfY=
Subject key identifier:   70:2D:66:00:F4:55:E3:A3:52:A5:3E:B3:1C:A1:FA:B4:AC:27:B4:2E
Certificate issuer:       /CN=79c26c3a6c536f169d0bbc3a957e5b29ad1ef5ed
Certificate serial:       0BDD68
Authority key identifier: 4E:C2:1C:53:1E:43:3F:29:AD:44:2B:61:61:CE:92:18:CB:06:74:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79c26c3a6c536f169d0bbc3a957e5b29ad1ef5ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37e8f8df-95d3-44d3-a623-71dc1ce071e6/de825d3f1652c615606aea929df4d1189aee4425.roa
Signing time:             Wed 24 Mar 2021 14:47:02 +0000
ROA not before:           Wed 24 Mar 2021 14:47:02 +0000
ROA not after:            Tue 24 Mar 2026 14:47:02 +0000
asID:                     269769
IP address blocks:        45.181.6.0/24 maxlen: 24
                          45.184.100.0/23 maxlen: 23
                          2803:6d60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777576 (0xbdd68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c26c3a6c536f169d0bbc3a957e5b29ad1ef5ed
        Validity
            Not Before: Mar 24 14:47:02 2021 GMT
            Not After : Mar 24 14:47:02 2026 GMT
        Subject: CN=de825d3f1652c615606aea929df4d1189aee4425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:24:f7:bc:cf:d3:9d:72:dd:e6:74:66:1d:
                    86:70:4f:e9:d0:e6:0e:07:88:7b:2c:f1:bc:b1:c3:
                    17:ef:a6:b6:69:e5:f9:35:8a:35:96:83:a7:2c:93:
                    66:2f:a6:87:59:f5:5c:31:c0:31:ab:c1:f7:2f:7c:
                    51:a3:6e:02:10:30:4a:1b:9e:85:a5:9e:df:40:0a:
                    39:2b:37:c6:ea:83:c9:71:5b:57:f2:6e:f9:59:90:
                    1e:49:c6:db:d0:ac:4a:ef:82:15:74:a8:60:e0:f5:
                    fa:0e:75:38:bd:27:e8:7b:66:9e:08:b8:0e:3c:06:
                    d2:c3:54:64:41:e6:23:d7:b2:81:08:e9:51:39:98:
                    e6:73:f6:56:5e:15:2a:e5:e5:f7:3c:f8:19:42:d2:
                    e9:bc:bc:49:da:d9:2d:2b:68:40:82:fa:51:ad:f6:
                    ca:af:0c:95:d2:b6:43:51:1a:03:d5:35:9f:54:4b:
                    79:84:30:e9:21:3d:40:ff:63:82:00:42:c1:87:f9:
                    28:21:ba:f6:ab:bf:1b:e7:66:fb:ee:f9:a3:31:75:
                    61:b0:69:58:e8:32:2f:39:d9:cb:cc:b0:3f:01:b0:
                    6a:b6:d1:45:fd:fb:34:ad:8c:a9:00:77:a6:67:08:
                    2e:13:f8:fb:e4:c0:02:67:93:af:bf:87:29:3e:d1:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2D:66:00:F4:55:E3:A3:52:A5:3E:B3:1C:A1:FA:B4:AC:27:B4:2E
            X509v3 Authority Key Identifier:
                keyid:4E:C2:1C:53:1E:43:3F:29:AD:44:2B:61:61:CE:92:18:CB:06:74:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79c26c3a6c536f169d0bbc3a957e5b29ad1ef5ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37e8f8df-95d3-44d3-a623-71dc1ce071e6/de825d3f1652c615606aea929df4d1189aee4425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37e8f8df-95d3-44d3-a623-71dc1ce071e6/79c26c3a6c536f169d0bbc3a957e5b29ad1ef5ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.6.0/24
                  45.184.100.0/23
                IPv6:
                  2803:6d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:83:08:ac:e7:2b:03:27:e9:04:09:9a:a2:78:3c:85:d3:
         7c:c0:f4:28:47:1e:5d:f2:43:cd:bc:fb:6e:8a:6d:83:f4:12:
         b5:7c:9e:a5:bb:23:da:86:32:76:79:04:d8:1f:09:58:f1:cc:
         28:22:e6:7c:6e:ac:06:91:bb:ac:c8:6e:55:70:02:8e:b3:b8:
         6b:1d:69:25:9c:59:d0:9e:97:51:0e:53:74:6d:ad:48:7b:6a:
         c0:33:56:0a:1e:b3:ed:b9:b9:9e:15:09:15:28:d4:7b:ae:91:
         2c:48:eb:30:64:a4:ce:f2:0f:69:6c:06:97:dc:d1:38:cf:60:
         49:69:b9:37:84:15:44:c0:09:29:46:7c:fb:13:3b:c1:bb:46:
         c9:83:54:c2:ef:2a:bc:d1:73:b0:5a:f9:02:71:07:1a:44:7e:
         a6:6a:8d:51:d5:13:15:1f:b9:a0:7e:31:81:74:b5:a3:4b:b5:
         44:79:3d:92:71:4c:ee:99:db:c8:35:88:32:f4:04:f9:0a:8c:
         60:ab:52:90:b1:40:d5:b9:b5:bc:7e:e2:0a:fe:10:55:d5:f4:
         7b:0c:53:2f:76:11:aa:11:8d:e6:ea:d9:43:45:23:59:5f:43:
         b2:d1:59:02:ec:a9:90:52:96:68:2b:72:27:e8:be:8c:2b:1e:
         80:d1:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----