Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/2bc2c5544c0b05e2c41e011ce94e2fa06aad6de0.roa
File:                     2bc2c5544c0b05e2c41e011ce94e2fa06aad6de0.roa (raw, json)
Hash identifier:          SkfnSkijX2YsZQuGjU6z1SZw9B09xTe/4cnNeeIeTpI=
Subject key identifier:   19:70:57:18:61:B2:3A:43:6E:6E:4B:B8:1C:B4:0D:5A:37:49:5A:8F
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       0DC8D0
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/2bc2c5544c0b05e2c41e011ce94e2fa06aad6de0.roa
Signing time:             Sun 13 Jun 2021 19:55:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269782
IP address blocks:        45.184.248.0/22 maxlen: 22
                          2803:2360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903376 (0xdc8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=2bc2c5544c0b05e2c41e011ce94e2fa06aad6de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:32:5e:3a:87:6b:aa:f2:05:71:af:ca:8a:
                    c7:4d:14:c3:af:e3:d5:da:d1:0d:da:c6:9f:41:49:
                    e6:fb:5c:38:1d:27:00:f2:0a:f1:0c:e2:a2:e7:8a:
                    4a:d1:91:57:05:81:48:e5:a6:1b:5a:f4:6c:33:55:
                    65:a6:6d:a2:d5:74:c0:70:43:a7:99:d9:5c:0a:86:
                    e3:a3:55:ac:ca:8a:78:76:13:42:87:2e:66:44:2d:
                    91:02:5a:4f:ee:98:85:c0:89:35:e5:56:f5:b1:cf:
                    4f:ec:b0:a5:39:c8:10:46:12:e5:db:5f:eb:e2:3f:
                    b9:4d:04:71:c5:9d:6e:39:2f:d3:43:0a:f4:83:78:
                    75:ba:9d:8d:eb:93:f6:48:ff:77:11:df:57:3e:50:
                    b3:6d:c2:bc:37:74:17:71:f0:9b:6e:2c:be:ee:fa:
                    6f:d8:ec:df:06:ec:54:87:a6:54:06:fb:07:98:17:
                    2b:9f:30:8a:0a:fa:6a:6d:4c:7a:43:64:df:95:2e:
                    06:4e:b6:0c:f9:61:9f:ac:35:3a:0f:d7:80:d8:26:
                    4f:5e:43:3b:e4:46:72:32:26:f9:53:b5:5a:f4:49:
                    70:8a:39:d1:52:c3:3c:85:82:f3:0c:ce:79:dc:15:
                    8b:47:3d:37:f1:d9:c1:46:f6:ed:e7:25:a1:78:2d:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:70:57:18:61:B2:3A:43:6E:6E:4B:B8:1C:B4:0D:5A:37:49:5A:8F
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/2bc2c5544c0b05e2c41e011ce94e2fa06aad6de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/22
                IPv6:
                  2803:2360::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:78:8f:d1:7f:1a:f6:86:2d:1a:85:03:92:ed:21:20:5d:98:
         8a:b1:75:84:ea:c6:0a:f7:bc:3d:93:94:19:44:ad:e1:17:fd:
         2f:77:7e:6f:03:4d:cb:c6:30:b1:06:54:40:68:2c:f3:da:6d:
         d6:b5:fc:fa:d4:8b:ff:d8:73:1e:99:dc:8e:19:09:b3:99:81:
         f5:77:13:21:0a:03:25:ec:81:aa:dd:ac:6b:b6:47:59:62:85:
         3c:fa:ae:d0:7b:1c:1d:4e:a7:17:c2:dc:b4:56:48:76:55:3c:
         2a:a0:37:79:b6:14:65:3b:16:b3:3a:08:1a:aa:2a:4e:bd:05:
         83:17:6e:18:cc:cf:36:d3:20:53:e2:f0:ea:7d:e5:01:75:83:
         e5:83:86:9b:78:6f:69:fc:13:2c:bb:1f:7e:fa:ea:10:a2:fa:
         a4:43:42:3a:91:86:77:35:88:af:10:aa:43:69:d2:3e:b0:b1:
         9b:1f:c4:c9:b1:24:5c:e1:bc:1c:36:47:6b:1e:29:4b:b4:f4:
         03:0e:73:b4:db:e0:96:63:69:4a:83:e3:5a:33:92:8f:e2:77:
         f8:2c:4e:a3:98:1a:3f:80:22:e1:af:7e:82:4b:c7:d2:10:d9:
         eb:0a:b4:db:72:94:73:95:8c:41:68:e4:b0:50:20:a0:1a:18:
         ab:a9:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----