Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/a6db345237c94165df50eb299fbfd439a4f43154.roa
File:                     a6db345237c94165df50eb299fbfd439a4f43154.roa (raw, json)
Hash identifier:          t6+s3n+uL/D96dPSZaDrzgqL/C/Ms+xrDBE/3uauAHM=
Subject key identifier:   B0:C3:60:5E:27:D8:BD:FF:92:99:29:DF:91:E1:7C:2D:8B:CF:45:E2
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       1952B1
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/a6db345237c94165df50eb299fbfd439a4f43154.roa
Signing time:             Wed 28 Sep 2022 17:59:16 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269827
IP address blocks:        45.186.208.0/22 maxlen: 24
                          190.97.227.0/24 maxlen: 24
                          190.97.229.0/24 maxlen: 24
                          190.97.238.0/24 maxlen: 24
                          190.97.237.0/24 maxlen: 24
                          190.97.239.0/24 maxlen: 24
                          190.97.243.0/24 maxlen: 24
                          2803:d760::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659569 (0x1952b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a6db345237c94165df50eb299fbfd439a4f43154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:0c:aa:eb:65:80:63:f7:24:f6:73:1d:33:
                    7c:45:1a:ef:51:74:28:a6:f5:c2:4a:b9:a7:ff:d1:
                    d0:a3:85:8f:b2:28:12:cd:42:c4:75:1e:ea:61:80:
                    1c:dd:d8:c8:a0:34:86:27:33:5d:68:d0:0b:b8:f5:
                    76:57:46:e1:c5:1f:96:ea:32:17:2c:2a:4c:82:9b:
                    81:d9:24:5e:6f:b1:42:b0:9d:f4:58:51:6b:bf:cd:
                    d5:e5:49:38:bb:58:a6:ff:85:c9:93:43:a6:59:70:
                    8a:04:d7:d4:41:21:1d:15:a9:50:a0:eb:9f:1d:dd:
                    80:ac:fd:0e:bb:7a:82:b3:f0:80:77:ed:41:7b:ec:
                    d6:9e:f1:18:b4:37:72:2f:90:ab:f6:06:d0:1a:c6:
                    17:8e:8a:11:fe:ce:1c:95:b1:06:26:03:d5:82:f0:
                    c2:f9:9f:04:72:aa:bf:40:2a:4a:ef:07:fa:3c:18:
                    95:58:97:04:be:2d:0d:47:42:64:74:99:5a:7b:7c:
                    74:fc:eb:f8:99:24:e8:5c:27:47:d6:91:45:fb:f5:
                    ed:de:e3:dc:89:06:cb:d9:ce:d8:e6:4b:e9:28:14:
                    cf:1f:81:05:20:58:5e:12:79:7d:51:6a:c7:cd:a5:
                    90:01:28:f8:37:23:45:e6:87:47:82:90:e2:f1:01:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:60:5E:27:D8:BD:FF:92:99:29:DF:91:E1:7C:2D:8B:CF:45:E2
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/a6db345237c94165df50eb299fbfd439a4f43154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.208.0/22
                  190.97.227.0/24
                  190.97.229.0/24
                  190.97.237.0-190.97.239.255
                  190.97.243.0/24
                IPv6:
                  2803:d760::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:46:99:93:41:cb:cc:9d:6e:14:22:b6:2b:22:58:18:5f:ad:
         cb:34:e0:25:b0:7d:e4:c6:ae:79:6e:12:f4:91:ee:df:e5:2a:
         99:01:ca:7d:8e:6c:da:66:11:fb:da:21:9c:e8:51:c2:47:88:
         17:27:7c:c8:ca:7e:be:f5:02:5a:26:20:e1:dd:ad:81:5f:73:
         62:35:c0:be:47:1e:95:d1:b6:e4:57:c0:c8:f8:66:e8:65:de:
         90:16:b8:9a:7b:3d:23:6b:3e:f9:27:d6:1d:d8:dc:2d:6e:aa:
         d6:88:9a:5c:1a:ab:b9:aa:2c:e3:c5:58:a9:bb:00:9b:dc:ec:
         d5:ce:84:ed:50:ea:bc:9e:7d:cf:02:0d:2e:10:d8:13:d2:73:
         dd:30:85:e5:2e:3c:23:78:3c:d3:ff:cc:a0:63:7b:e2:d3:b9:
         eb:14:15:6b:70:66:9c:d6:ef:7c:00:d2:83:83:79:ba:ba:7a:
         ce:eb:9a:9e:f0:13:85:af:0a:53:4d:5d:93:76:02:1d:38:e4:
         fc:2b:91:7b:1b:eb:3a:e1:4f:02:8e:5b:cb:61:99:84:9a:7d:
         90:8f:00:4b:36:5c:02:1b:d0:c7:ee:99:5d:d0:07:40:3c:18:
         92:ba:c5:a7:5f:43:d9:34:74:9a:c6:7c:8c:59:de:68:6e:86:
         93:d0:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----