Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/5603bc1af63ab7895de2d8a1a4c3cbc078694a38.roa
File:                     5603bc1af63ab7895de2d8a1a4c3cbc078694a38.roa (raw, json)
Hash identifier:          hunRxeKIhZZzx0QrMizFLuJNWCwjyqhw6AmLUZGfS84=
Subject key identifier:   05:5C:3F:5E:2F:86:FC:36:03:E9:EE:CB:92:32:25:59:61:44:8A:BF
Certificate issuer:       /CN=88d8c434cc44cf16f26c76018ba79af93a8da530
Certificate serial:       061BCF
Authority key identifier: 63:96:B9:2E:7B:A4:EB:E5:AC:36:7A:67:68:20:51:E8:CF:18:1A:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d8c434cc44cf16f26c76018ba79af93a8da530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/5603bc1af63ab7895de2d8a1a4c3cbc078694a38.roa
Signing time:             Fri 25 Jun 2021 08:15:32 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263222
IP address blocks:        45.185.20.0/22 maxlen: 24
                          2803:9360::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400335 (0x61bcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d8c434cc44cf16f26c76018ba79af93a8da530
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5603bc1af63ab7895de2d8a1a4c3cbc078694a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:5e:5d:76:5d:3b:28:44:9e:c0:4c:3c:8b:
                    5a:76:49:87:03:41:bc:7f:1a:e1:e9:8d:64:a0:f7:
                    c7:56:47:e7:d2:5a:e1:60:8e:a2:f2:c0:57:b0:48:
                    56:e7:ca:ac:2b:3b:0e:1e:f3:4b:66:ea:7c:03:a1:
                    e6:6f:1c:c8:84:70:ce:67:3c:35:e5:94:92:5e:18:
                    e8:aa:18:97:86:d9:8a:9e:06:ef:d8:d6:c6:02:54:
                    23:fb:4c:29:56:2b:f3:16:c9:e2:64:f3:d9:ed:5b:
                    62:be:bd:74:15:3c:c7:ce:c5:ac:6e:74:d3:b3:13:
                    4e:ec:f6:1f:de:3f:d2:c6:7b:e7:49:7b:61:fd:b0:
                    05:56:27:90:f3:ab:30:58:3c:68:d8:41:2d:25:0d:
                    bd:c5:fc:81:b6:d9:16:74:b7:25:93:86:a3:53:55:
                    4d:32:99:d1:b3:c8:97:f5:c9:ef:d2:35:b4:69:43:
                    82:01:73:cc:45:9b:db:4a:52:88:70:3c:20:2c:25:
                    e0:d8:30:6f:c2:e8:81:fc:6f:65:3c:4c:fb:b4:0e:
                    ab:f4:4d:f1:57:94:8d:0b:fd:06:74:8e:c7:12:34:
                    59:fd:f3:3d:49:cc:5b:89:4e:b0:f7:dc:11:22:3a:
                    63:71:14:f2:a6:88:70:b3:84:7d:99:d3:cf:1a:be:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:3F:5E:2F:86:FC:36:03:E9:EE:CB:92:32:25:59:61:44:8A:BF
            X509v3 Authority Key Identifier:
                keyid:63:96:B9:2E:7B:A4:EB:E5:AC:36:7A:67:68:20:51:E8:CF:18:1A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d8c434cc44cf16f26c76018ba79af93a8da530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/5603bc1af63ab7895de2d8a1a4c3cbc078694a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6407c409-6595-4beb-974a-f5df93d82b78/88d8c434cc44cf16f26c76018ba79af93a8da530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.20.0/22
                IPv6:
                  2803:9360::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:37:26:c7:8b:ca:06:11:3f:5b:b6:90:22:f4:be:6d:6b:c8:
         71:63:da:ca:5d:e2:ff:24:63:85:c3:c6:2f:da:e8:f8:95:95:
         49:94:31:49:22:79:22:88:8e:52:9d:fc:79:38:ed:3a:07:fb:
         5f:64:80:46:3c:8a:8b:79:82:66:4e:bb:6a:f6:a7:4c:aa:db:
         6a:64:54:02:91:1e:3c:29:4e:9e:15:d1:c6:21:45:6e:e6:07:
         e5:63:65:06:0f:30:3e:b2:e2:d1:73:c7:5d:8d:0b:18:a1:16:
         b6:cf:80:8e:f5:91:20:26:50:c3:bf:54:47:4e:0d:3e:1e:52:
         72:cc:a7:89:5c:37:34:fa:3e:31:43:ff:72:2c:ff:96:a8:f7:
         8f:e6:22:ac:a0:61:b9:24:49:72:fa:a3:23:a6:28:4c:b3:35:
         f6:72:6f:36:63:b6:ff:a0:3f:39:d8:0d:29:8a:df:c5:8f:a2:
         4a:0c:e3:1f:7c:21:cb:c8:4a:55:af:33:c0:31:68:d6:01:de:
         9c:25:fc:a3:4d:40:30:b4:05:73:31:c4:f8:f2:bd:34:87:f9:
         b9:a3:7c:61:88:ea:9d:55:c3:99:5d:3f:3c:93:c1:6c:f1:e1:
         d1:b8:df:f0:50:a2:ef:2b:48:7f:fb:11:82:95:4c:71:35:a1:
         96:db:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----