Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/543bf7d4b9caf673777cdac2d0ba6989daebc469.roa
File:                     543bf7d4b9caf673777cdac2d0ba6989daebc469.roa (raw, json)
Hash identifier:          hRc9TKKlJvK1BkHdl/iXRYQnzJJoaJjNiK2c6f6EDTk=
Subject key identifier:   7E:16:BB:19:62:5B:86:5A:AE:63:CA:76:00:8E:3D:02:C1:D7:57:E2
Certificate issuer:       /CN=8de2b1bc144048a5118f84232c51e79737eafa07
Certificate serial:       0D30F9
Authority key identifier: 28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/543bf7d4b9caf673777cdac2d0ba6989daebc469.roa
Signing time:             Wed 24 Mar 2021 14:45:58 +0000
ROA not before:           Wed 24 Mar 2021 14:45:57 +0000
ROA not after:            Tue 24 Mar 2026 14:45:57 +0000
asID:                     265869
IP address blocks:        45.227.16.0/24 maxlen: 24
                          2803:f620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864505 (0xd30f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2b1bc144048a5118f84232c51e79737eafa07
        Validity
            Not Before: Mar 24 14:45:57 2021 GMT
            Not After : Mar 24 14:45:57 2026 GMT
        Subject: CN=543bf7d4b9caf673777cdac2d0ba6989daebc469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:ae:fe:3d:6e:bf:ac:81:49:64:9b:f6:1a:
                    2e:df:42:9d:0d:86:ea:f4:e9:0d:90:bb:60:64:29:
                    88:a9:03:d5:6f:c4:79:87:5d:c5:7d:e7:d4:d0:8a:
                    e4:98:09:2c:27:0c:8d:52:5b:01:8f:31:1b:ae:8d:
                    4e:c6:81:c7:a6:45:14:13:9a:d3:f2:5b:c3:be:d0:
                    23:e0:92:d1:9c:56:70:7b:75:35:d3:56:f6:a4:84:
                    44:db:b2:25:54:98:70:35:5e:78:d0:88:3b:48:97:
                    a7:fd:ed:73:73:68:14:cd:3e:e8:73:15:82:ad:50:
                    51:e1:44:47:53:c5:93:84:d5:c0:d7:cf:26:d0:66:
                    bd:85:7b:a8:03:c8:ec:27:2e:6f:7a:36:09:ca:17:
                    57:92:19:82:8d:b4:0f:58:7f:85:9e:78:29:03:bb:
                    36:24:c6:cc:77:9e:98:a7:91:48:2b:c9:44:59:c0:
                    36:30:5a:1f:c5:bd:81:64:39:16:49:48:fb:df:d9:
                    d2:80:4f:92:33:84:97:7b:67:2a:85:41:ba:99:20:
                    95:71:ea:16:6d:86:05:86:fb:99:9f:8b:b9:09:e8:
                    b6:d0:50:7d:25:5b:1b:5c:36:d2:fa:31:16:a6:11:
                    1a:1f:e8:c2:10:9f:12:01:9a:cd:7f:56:9a:f1:1f:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:BB:19:62:5B:86:5A:AE:63:CA:76:00:8E:3D:02:C1:D7:57:E2
            X509v3 Authority Key Identifier:
                keyid:28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/543bf7d4b9caf673777cdac2d0ba6989daebc469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/8de2b1bc144048a5118f84232c51e79737eafa07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.16.0/24
                IPv6:
                  2803:f620::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:be:ad:4e:fe:a5:24:9d:c0:81:bf:90:f4:44:9e:6d:37:
         bf:be:ae:3c:89:3e:e9:fa:8b:1c:8c:da:56:9a:b0:a7:4a:09:
         7b:81:b2:93:03:38:02:b8:14:06:18:0f:eb:2f:b9:22:d7:8d:
         b0:9d:cc:f2:bc:29:09:26:66:6c:9b:ec:4e:17:a1:11:4c:ec:
         5f:04:63:f8:3d:20:02:04:32:27:75:bc:16:7f:02:a2:a2:16:
         36:ab:9f:23:b0:07:9a:4d:2d:74:00:05:44:a7:09:ef:ef:0e:
         e4:4a:ac:ef:04:2a:4a:04:89:45:bd:36:56:a1:9c:a9:28:69:
         06:c4:75:54:30:b9:99:ac:82:93:2b:21:5f:5a:b6:31:40:a4:
         f2:aa:32:c0:95:0d:89:71:34:de:fd:1f:e9:aa:9a:5c:40:46:
         3e:e3:27:29:80:74:6b:bf:c8:40:20:b8:6d:41:34:b1:9f:05:
         34:2d:cd:c4:8d:cf:82:1f:ba:ab:f4:9f:4d:f0:a0:85:3d:2d:
         01:2a:ff:a6:c6:3a:51:dc:cf:f0:25:0d:88:32:1b:82:4c:6e:
         c2:de:dc:73:0c:d1:cb:46:6a:73:29:fa:42:06:f3:a8:6e:41:
         8f:bd:33:11:ce:95:1c:51:33:38:ef:54:a2:ec:85:4e:97:0e:
         e6:0f:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----