Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/9c8e02c9f5bb27eb0bf5f8b76b1c686ebf82862c.roa
File:                     9c8e02c9f5bb27eb0bf5f8b76b1c686ebf82862c.roa (raw, json)
Hash identifier:          pdqow1Bj9wOfXl2odie/3YjOozezBGaF0a53ZkMxCMk=
Subject key identifier:   0E:7C:1F:CA:9E:E4:91:5A:6E:CF:0B:DE:43:E0:98:DB:37:06:13:94
Certificate issuer:       /CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Certificate serial:       0C58C3
Authority key identifier: B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/9c8e02c9f5bb27eb0bf5f8b76b1c686ebf82862c.roa
Signing time:             Wed 24 Mar 2021 14:41:21 +0000
ROA not before:           Wed 24 Mar 2021 14:41:21 +0000
ROA not after:            Tue 24 Mar 2026 14:41:21 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 24
                          2801:13:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809155 (0xc58c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
        Validity
            Not Before: Mar 24 14:41:21 2021 GMT
            Not After : Mar 24 14:41:21 2026 GMT
        Subject: CN=9c8e02c9f5bb27eb0bf5f8b76b1c686ebf82862c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:94:e5:e9:51:db:cf:c8:f1:98:dc:60:34:
                    8e:73:85:d9:08:e3:e5:b3:af:1d:3b:6f:53:07:b8:
                    d8:1a:dc:ee:23:99:cb:de:90:83:77:dc:dc:c7:ab:
                    cc:fe:c9:9e:54:ee:06:62:6d:f7:d3:7f:c0:cd:ed:
                    1e:e8:4c:e0:64:d3:2b:4d:21:71:e4:83:ec:bf:9c:
                    ba:2a:3c:1a:f4:0a:20:fd:67:a2:84:f1:eb:2e:b6:
                    9e:6b:92:cd:9c:eb:2c:7b:29:0f:55:fb:92:98:f7:
                    07:f6:69:44:f7:3e:ef:c5:a6:90:01:9e:05:51:d8:
                    df:40:ba:22:e4:a4:b9:4e:07:7c:fb:d0:72:8c:d3:
                    21:54:14:0f:18:74:b0:63:36:a9:1c:61:ec:df:0b:
                    b8:9e:3b:0f:fc:6d:a4:66:b6:0a:89:2a:c2:71:86:
                    72:a5:ac:f6:86:8b:fe:f3:76:0e:80:5a:a7:3a:4f:
                    3a:4b:91:19:f4:be:40:63:18:3e:49:12:21:1c:2a:
                    7a:9f:8f:70:10:7a:8d:83:f7:2d:fd:3f:b6:e5:85:
                    66:fd:37:c2:2e:de:9d:94:72:10:b0:c5:94:4a:1f:
                    02:ba:4d:82:f2:c8:d4:e8:33:47:ad:51:54:22:1e:
                    c2:b0:8e:47:d3:88:0a:25:b7:bf:e2:77:ef:a7:54:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7C:1F:CA:9E:E4:91:5A:6E:CF:0B:DE:43:E0:98:DB:37:06:13:94
            X509v3 Authority Key Identifier:
                keyid:B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/9c8e02c9f5bb27eb0bf5f8b76b1c686ebf82862c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:b3:95:74:ec:61:4f:3b:95:4e:24:74:b9:cb:31:42:52:df:
         fe:6c:7c:3c:61:a1:f7:73:aa:9c:5b:81:f3:85:ca:0a:8b:62:
         3e:99:1b:8a:ac:e9:f8:99:e7:6d:54:df:52:18:a0:bd:0a:ab:
         47:3c:6c:c2:c3:52:4c:b2:bd:c2:56:e8:79:ed:c1:bb:f4:6a:
         41:f9:39:76:21:a7:d4:54:f2:c9:4f:75:be:4f:31:48:e7:a1:
         2c:c2:22:bd:ba:d9:29:2c:c6:91:ec:d4:01:d8:d4:0c:41:9e:
         6a:36:88:49:90:e4:ac:02:a7:98:7b:ee:51:2c:b9:fc:6d:41:
         da:55:b0:70:be:98:b7:89:c4:8e:16:7e:a3:63:09:86:1f:19:
         c5:99:21:45:e5:35:a8:73:2f:15:d0:d5:ca:1a:98:ef:69:6d:
         fb:9b:2c:8c:38:4c:b0:d9:ea:00:c4:11:b6:2e:9b:ac:61:2d:
         ca:e7:08:36:ec:1c:cd:11:eb:a4:6c:72:77:b1:d2:d7:a4:98:
         a1:cd:2c:45:b5:96:8e:9e:ff:a8:47:f7:58:51:3d:81:c3:b3:
         74:1b:ed:64:1a:ba:92:b1:da:cb:02:92:5e:f1:1b:7b:3e:10:
         f5:15:d1:08:41:37:44:d8:16:79:62:b7:09:58:d4:7c:0f:8e:
         a0:ee:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----