Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55e30fa4-f544-468c-8cf9-fbcbfeacbe1c/f195348dff4849c05625e18d0880c68edb324d1e.roa
File:                     f195348dff4849c05625e18d0880c68edb324d1e.roa (raw, json)
Hash identifier:          wQy4GCn4ujDUyjKCU5wWu6nZLsY9fTehZe1i8pnBIrg=
Subject key identifier:   BE:1E:57:4C:07:E7:70:FD:60:92:35:63:D0:46:BD:7C:9C:DC:01:42
Certificate issuer:       /CN=80fa869f16624aa1d741e369a8f24310ce1d05f9
Certificate serial:       0B9AE5
Authority key identifier: 1B:29:F7:2E:68:63:5A:1A:08:BD:A6:0C:6C:35:1E:52:DC:26:F0:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80fa869f16624aa1d741e369a8f24310ce1d05f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55e30fa4-f544-468c-8cf9-fbcbfeacbe1c/f195348dff4849c05625e18d0880c68edb324d1e.roa
Signing time:             Wed 24 Mar 2021 14:33:45 +0000
ROA not before:           Wed 24 Mar 2021 14:33:45 +0000
ROA not after:            Tue 24 Mar 2026 14:33:45 +0000
asID:                     269793
IP address blocks:        45.184.84.0/22 maxlen: 24
                          2803:6360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760549 (0xb9ae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80fa869f16624aa1d741e369a8f24310ce1d05f9
        Validity
            Not Before: Mar 24 14:33:45 2021 GMT
            Not After : Mar 24 14:33:45 2026 GMT
        Subject: CN=f195348dff4849c05625e18d0880c68edb324d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:43:94:bf:5c:9e:25:b3:03:d5:95:89:f4:
                    38:d5:c2:76:06:a9:ec:0f:49:83:2b:51:11:d4:ca:
                    e7:09:c9:b2:4b:af:b7:88:61:e2:a1:5f:ba:2f:0c:
                    de:2a:dd:3d:39:87:ee:ad:28:bf:1f:f3:22:45:c3:
                    12:e0:9a:97:a9:b2:38:b9:78:af:34:09:9b:e8:a2:
                    8e:fb:28:5c:e0:9d:15:04:7e:15:3b:de:d0:46:9d:
                    69:b3:ce:a9:93:07:ea:11:97:45:31:20:34:b2:77:
                    cf:6f:f3:10:55:05:f0:d1:bc:78:c7:ab:f8:76:c9:
                    9d:0d:5e:7e:2b:00:39:6e:c5:34:e7:90:c3:a7:24:
                    72:f2:c7:96:16:30:fd:b4:3c:3f:ad:ad:2f:49:f9:
                    19:0b:70:34:2c:82:8b:4d:38:87:a6:ef:70:41:85:
                    16:e8:8c:94:16:ec:20:c5:20:49:ef:e3:f7:68:d5:
                    c8:35:28:66:96:45:6a:7a:2e:b7:f0:3c:86:39:4d:
                    d1:3e:06:0c:65:0c:52:7d:ec:3e:de:64:32:ad:94:
                    e2:a5:d5:f6:c6:22:07:ad:b7:a5:7a:ef:32:73:7d:
                    fb:e1:0b:06:9a:c8:4b:db:59:3f:e8:04:b9:fa:57:
                    2d:77:5d:8c:84:b1:f2:e9:ab:6a:57:99:f1:2b:e7:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:57:4C:07:E7:70:FD:60:92:35:63:D0:46:BD:7C:9C:DC:01:42
            X509v3 Authority Key Identifier:
                keyid:1B:29:F7:2E:68:63:5A:1A:08:BD:A6:0C:6C:35:1E:52:DC:26:F0:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80fa869f16624aa1d741e369a8f24310ce1d05f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55e30fa4-f544-468c-8cf9-fbcbfeacbe1c/f195348dff4849c05625e18d0880c68edb324d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55e30fa4-f544-468c-8cf9-fbcbfeacbe1c/80fa869f16624aa1d741e369a8f24310ce1d05f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.84.0/22
                IPv6:
                  2803:6360::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:2f:60:ad:4a:e1:5c:2f:e1:c5:de:b8:31:6f:34:63:c8:
         d1:8d:29:fe:2c:a3:80:88:ed:5d:1d:bf:66:e6:40:bc:d2:b1:
         f3:bb:37:27:b3:85:d1:2f:29:34:61:ca:5e:7f:08:3f:4b:88:
         bf:44:ee:e9:da:b7:de:17:b6:a8:9d:da:93:b6:f7:9a:4f:48:
         00:ef:17:55:60:c1:b3:9e:2e:b7:a3:c9:76:ba:d4:97:ff:fc:
         ac:4d:ef:a5:13:0d:f2:e4:c6:b4:ec:53:5a:a1:84:94:3e:63:
         f0:0e:bb:38:8a:72:8f:54:a6:2d:a5:29:57:78:20:ce:b7:0a:
         5f:3f:8f:c6:ed:3d:cd:93:bd:8e:ad:79:07:65:21:2a:c5:b6:
         16:1c:b6:10:2b:3e:5b:cb:cc:55:05:33:12:fe:67:5f:11:12:
         3a:f3:a3:5f:44:fd:e0:89:78:32:ce:e1:ea:a8:bf:cf:44:7d:
         14:bd:9e:f2:96:02:0b:75:05:4f:e4:17:73:bb:52:13:b5:29:
         21:31:45:dd:27:a3:ce:1a:17:53:f4:a8:c4:3c:50:f1:66:85:
         0f:f2:84:f1:d5:1c:d4:3c:d3:0e:63:fd:99:8f:bd:81:bc:d2:
         fa:32:aa:23:50:95:34:d7:1c:f2:e3:42:a2:40:54:1f:0b:ae:
         91:b6:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----