Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/b822a75573414b8bb360103f22739110fa221d41.roa
File:                     b822a75573414b8bb360103f22739110fa221d41.roa (raw, json)
Hash identifier:          DiuIh3ew/rlymZQNhiqGKlmfVGwNWa+uXvJrbA8/BQ0=
Subject key identifier:   87:DE:EF:6D:3C:17:12:36:65:87:20:86:F9:50:E3:1D:E6:56:DC:8F
Certificate issuer:       /CN=fbfb66278713434fe3164de2e5226004347545cb
Certificate serial:       15D97E
Authority key identifier: 16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/b822a75573414b8bb360103f22739110fa221d41.roa
Signing time:             Thu 09 Jun 2022 15:37:54 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Sun 09 Jun 2024 03:00:00 +0000
asID:                     27947
IP address blocks:        45.182.117.0/24 maxlen: 24
                          2801:1f:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431934 (0x15d97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfb66278713434fe3164de2e5226004347545cb
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Jun  9 03:00:00 2024 GMT
        Subject: CN=b822a75573414b8bb360103f22739110fa221d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:20:f0:33:50:49:95:b8:56:06:e2:d1:45:
                    21:ac:94:95:75:79:18:d2:b9:7c:dc:74:a0:c7:e1:
                    08:37:5b:87:93:32:d7:4f:d5:51:77:51:35:ea:9f:
                    99:b9:ad:59:b6:b3:e9:eb:9e:5f:48:60:91:59:e8:
                    d2:b5:c6:ef:4a:63:1b:e6:a6:39:40:e5:96:49:47:
                    66:f7:7a:d2:7a:5f:4b:75:b4:c3:62:bd:8f:0b:9f:
                    9a:05:67:dd:b9:6e:11:02:28:5b:92:d5:12:ba:95:
                    58:6d:40:03:32:ac:c4:85:89:20:91:15:00:7e:60:
                    c0:6a:e9:12:40:97:ca:4d:5e:e8:17:f8:3a:d5:ae:
                    fc:bb:f0:f5:bc:e8:d2:06:91:e7:cc:23:62:fb:d9:
                    f1:45:fd:d9:c0:7e:33:bc:8e:61:a7:4c:d3:7b:b5:
                    83:6c:f4:14:c7:8f:8c:0e:3d:b3:9e:06:76:73:da:
                    02:b3:d7:06:78:66:90:4e:f1:83:72:c9:e5:ee:4f:
                    14:e9:a8:6f:98:12:7c:5b:c6:95:a0:ce:60:0d:94:
                    d6:9f:e6:6d:2d:b6:03:e5:c8:73:ee:fd:6f:c1:be:
                    1c:5c:a0:98:c0:71:fa:95:56:4a:c3:74:ea:46:19:
                    82:42:08:4b:d4:0a:13:ee:a0:6f:c7:93:df:5e:c3:
                    8c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DE:EF:6D:3C:17:12:36:65:87:20:86:F9:50:E3:1D:E6:56:DC:8F
            X509v3 Authority Key Identifier:
                keyid:16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/b822a75573414b8bb360103f22739110fa221d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/fbfb66278713434fe3164de2e5226004347545cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:2e:53:b9:ff:a5:ee:a1:82:e4:b9:ac:0b:90:2b:10:14:
         48:9a:01:02:5c:7f:a9:00:cf:ea:78:ef:40:9f:ad:58:47:fa:
         94:65:28:e7:10:95:5a:13:1e:6c:3a:82:8c:32:f2:8c:18:12:
         d3:66:0b:a0:4b:6f:a8:a6:ea:e9:df:40:b1:af:5c:90:3e:45:
         8e:70:c5:bb:0d:38:64:0d:5f:9a:d1:b2:ba:c0:b5:da:2a:ef:
         79:58:fc:d9:fe:44:c6:52:98:c3:ad:7c:16:85:21:f1:af:45:
         a7:35:fe:35:00:73:6f:b6:b2:a9:56:5e:aa:41:95:5a:90:28:
         01:bf:b2:21:3f:3e:33:12:04:85:22:41:22:9f:df:4d:86:b7:
         26:e4:02:05:45:29:10:76:d2:5c:18:c5:2d:e1:f4:61:47:3a:
         cf:ec:f4:6b:ac:6e:87:f2:2a:bc:d1:07:c7:02:12:f8:10:95:
         14:48:7d:d4:64:1d:09:37:a4:37:df:8b:c2:96:4c:e8:82:38:
         02:41:67:fb:97:79:97:1b:f7:3c:b6:5a:12:4b:ad:3e:fb:56:
         83:03:c2:50:cd:6e:9c:cd:56:82:fe:2c:f0:25:c8:f8:bd:51:
         f1:91:8c:cf:7f:a0:75:6b:19:ec:1c:7f:6f:9c:e9:4e:76:1f:
         51:03:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----