Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/5d2cb18f23da1267d3b46aeb5bf2b15115b47c67.roa
File:                     5d2cb18f23da1267d3b46aeb5bf2b15115b47c67.roa (raw, json)
Hash identifier:          cYzeGpcolCHKJywQASXet5je7t9AEj6lLrl28DsgHHw=
Subject key identifier:   29:C0:07:32:0C:DD:9A:A1:91:75:A6:29:06:EC:A2:A9:34:23:ED:6F
Certificate issuer:       /CN=2fd13bb6c152df2de42e94dc89624f31b656962e
Certificate serial:       0A73FE
Authority key identifier: 9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fd13bb6c152df2de42e94dc89624f31b656962e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/5d2cb18f23da1267d3b46aeb5bf2b15115b47c67.roa
Signing time:             Wed 24 Mar 2021 14:48:08 +0000
ROA not before:           Wed 24 Mar 2021 14:48:08 +0000
ROA not after:            Tue 24 Mar 2026 14:48:08 +0000
asID:                     269876
IP address blocks:        45.168.174.0/23 maxlen: 23
                          2803:77a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685054 (0xa73fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd13bb6c152df2de42e94dc89624f31b656962e
        Validity
            Not Before: Mar 24 14:48:08 2021 GMT
            Not After : Mar 24 14:48:08 2026 GMT
        Subject: CN=5d2cb18f23da1267d3b46aeb5bf2b15115b47c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:f5:1f:a7:54:3b:9c:97:27:6c:7d:f6:df:
                    19:89:d6:59:10:cb:9d:0d:d0:5e:01:46:9a:be:35:
                    da:0b:3f:e1:2b:a9:2a:8f:d2:a0:ef:21:6b:a5:fe:
                    9b:42:ac:29:2f:0b:c4:1f:a7:0b:50:55:69:aa:05:
                    be:9d:8b:c4:1c:21:74:05:0d:c8:e6:2e:17:a6:a0:
                    ee:25:5d:18:45:16:11:cf:08:df:87:e9:41:dc:6c:
                    e1:c5:56:0c:85:ca:dc:1c:99:b0:03:c6:46:86:58:
                    a5:9e:b3:c6:92:f5:c1:9d:f6:1f:ce:57:fa:b2:58:
                    5e:39:20:17:ef:a2:01:78:82:24:b4:77:c3:c9:eb:
                    58:57:a9:4b:48:4b:c9:ba:df:20:26:68:f0:80:0f:
                    bf:b3:82:fb:89:d3:da:42:6a:73:16:81:1d:13:b9:
                    06:9c:8c:01:cf:ca:42:7d:f2:62:e5:22:32:86:f2:
                    bb:7b:5a:27:4a:2d:5a:93:fe:14:2d:9b:8b:43:b2:
                    1f:47:0b:f1:31:82:1b:f8:bf:b6:9f:8a:61:12:91:
                    b0:41:6c:a2:27:88:fd:93:30:f8:f4:6b:07:d1:3a:
                    0e:91:8e:b1:f2:c6:66:0e:18:48:0f:9c:be:ca:4e:
                    7b:1d:ec:01:a1:0b:66:6e:e0:49:e9:7b:c8:7d:3e:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C0:07:32:0C:DD:9A:A1:91:75:A6:29:06:EC:A2:A9:34:23:ED:6F
            X509v3 Authority Key Identifier:
                keyid:9F:08:1A:56:63:F5:2E:18:0E:8A:40:DF:C8:B4:87:82:0A:6C:C5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fd13bb6c152df2de42e94dc89624f31b656962e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/5d2cb18f23da1267d3b46aeb5bf2b15115b47c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d59b158-2a91-4feb-ae75-8ff7dca8eff2/2fd13bb6c152df2de42e94dc89624f31b656962e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.174.0/23
                IPv6:
                  2803:77a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:4e:ea:f9:5e:47:6a:54:a3:d8:ca:38:39:98:5e:cc:9c:
         de:e5:be:de:59:17:5c:ee:23:e9:ad:70:c3:94:3d:44:12:35:
         a5:2e:9a:ac:0c:00:29:69:24:45:14:6e:74:76:c9:5b:c9:5f:
         97:4a:3e:71:97:72:d4:61:e6:e8:f1:8d:f0:6b:4f:24:b5:f5:
         53:ea:f1:11:3e:e7:7a:af:b4:67:24:b8:c0:d7:7b:93:8a:36:
         42:78:39:57:b3:4a:41:25:86:24:dd:fc:50:db:fc:f8:69:db:
         0f:08:01:e0:ab:80:85:cf:8a:ad:94:56:b1:99:f1:08:55:f0:
         7e:f2:30:a4:7d:ce:44:b7:2e:c4:03:81:9c:2f:b1:cf:46:b0:
         c7:4e:0f:86:c2:b7:7a:9e:88:6a:90:47:18:55:c6:29:ab:ab:
         d3:89:25:59:5d:7a:86:ff:5e:72:51:2d:9e:d8:d7:ab:7d:11:
         0d:69:02:c0:5b:d8:fa:9c:80:64:21:65:98:f5:aa:e2:52:6d:
         67:c3:b4:f4:02:ac:d1:68:7c:71:73:08:46:95:42:74:a6:b8:
         3f:f6:fd:f6:fe:4f:42:86:05:98:02:36:7e:c1:3d:97:37:17:
         6e:58:01:82:d0:bd:6e:ab:de:76:71:b9:3d:25:e4:70:c2:d4:
         f3:7c:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----