Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70b74feb-3aff-4132-9711-b2e199138e19/6983a0d26588d984c425d0291ba064f3ddde63c6.roa
File:                     6983a0d26588d984c425d0291ba064f3ddde63c6.roa (raw, json)
Hash identifier:          sNY50G5p2XLfk9xn4yhh+ihtGjUzv3mdqEnC/3HU0D0=
Subject key identifier:   9B:7E:15:4F:F4:CD:F1:C3:C3:A1:4C:8D:D9:DF:6B:96:73:EA:FE:1F
Certificate issuer:       /CN=144dea28acc4b40a4b77ef5652c1e3e0286510f1
Certificate serial:       0D5E01
Authority key identifier: C0:C9:1B:59:D0:D9:6E:59:A9:92:25:0D:27:6D:3A:8A:23:FD:AF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/144dea28acc4b40a4b77ef5652c1e3e0286510f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70b74feb-3aff-4132-9711-b2e199138e19/6983a0d26588d984c425d0291ba064f3ddde63c6.roa
Signing time:             Wed 24 Mar 2021 14:45:01 +0000
ROA not before:           Wed 24 Mar 2021 14:45:01 +0000
ROA not after:            Tue 24 Mar 2026 14:45:01 +0000
asID:                     265681
IP address blocks:        45.5.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876033 (0xd5e01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144dea28acc4b40a4b77ef5652c1e3e0286510f1
        Validity
            Not Before: Mar 24 14:45:01 2021 GMT
            Not After : Mar 24 14:45:01 2026 GMT
        Subject: CN=6983a0d26588d984c425d0291ba064f3ddde63c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:a7:0b:30:f0:03:97:d9:52:d6:f2:af:7c:
                    d2:a6:62:83:68:b2:c7:c5:91:1d:c7:bb:15:06:3f:
                    fc:0b:6f:fb:18:a2:06:1a:d4:07:fe:06:80:a9:1a:
                    9a:cb:bf:a0:bb:9c:5d:9f:7d:57:04:72:17:d6:39:
                    bc:b7:53:21:eb:54:8a:14:1c:31:be:05:ce:0b:ae:
                    cd:21:da:c2:92:c5:57:d0:95:eb:c2:81:0a:b2:58:
                    b7:e0:0f:0f:7a:6d:d6:38:80:48:95:32:b1:59:51:
                    c3:2a:a0:b6:2c:74:04:4c:27:ab:4d:74:39:17:2a:
                    e9:b8:9b:96:a3:3a:9b:15:71:0a:4d:8a:a4:44:b4:
                    df:3f:09:08:cb:af:5b:9f:4b:ae:b6:d8:3f:3a:3a:
                    86:ec:78:56:bd:91:8c:7d:aa:82:e3:27:48:32:0f:
                    2c:8d:01:2c:88:97:45:ad:a0:8b:d1:41:a4:f7:84:
                    1d:a8:80:1b:1f:6b:15:a1:82:22:d8:e7:ed:16:0f:
                    1c:f8:45:bd:97:a0:9f:4a:d9:7f:4b:c5:16:d6:c1:
                    91:68:da:c4:85:56:bc:57:a4:33:b0:a8:4b:0f:67:
                    34:06:a6:6d:9a:77:7d:67:57:f1:5d:ce:c2:0b:84:
                    29:38:e3:a7:cc:1c:89:24:6a:30:35:f1:49:dd:f5:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7E:15:4F:F4:CD:F1:C3:C3:A1:4C:8D:D9:DF:6B:96:73:EA:FE:1F
            X509v3 Authority Key Identifier:
                keyid:C0:C9:1B:59:D0:D9:6E:59:A9:92:25:0D:27:6D:3A:8A:23:FD:AF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/144dea28acc4b40a4b77ef5652c1e3e0286510f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70b74feb-3aff-4132-9711-b2e199138e19/6983a0d26588d984c425d0291ba064f3ddde63c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70b74feb-3aff-4132-9711-b2e199138e19/144dea28acc4b40a4b77ef5652c1e3e0286510f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:4c:66:2f:4b:24:6b:a0:6f:4d:0f:04:80:9b:06:28:ae:
         6e:de:55:64:46:2c:90:2f:ae:6b:5e:3a:f1:1a:17:95:ca:f7:
         58:c9:20:4d:48:2f:a7:22:02:07:6e:e5:66:08:27:2c:62:f6:
         e2:f1:ae:50:23:49:cb:dd:9f:ce:91:91:04:8c:4b:05:32:dc:
         da:98:c3:58:45:b4:c0:f3:33:69:50:b2:f2:c8:fd:b5:c5:bb:
         53:05:11:46:49:c9:f5:59:c6:9d:41:33:93:01:31:36:e5:f6:
         4c:e3:9f:90:49:59:c5:fe:9a:35:81:69:03:4a:71:9e:a6:70:
         26:fc:dd:96:54:db:5d:d6:ef:43:30:50:2c:5f:74:a8:e9:2a:
         e0:79:00:f4:69:42:67:08:f6:32:98:c7:8a:9f:0d:00:ff:8c:
         e8:1e:de:0c:a5:72:69:66:e9:66:a1:f4:e4:cc:48:fd:ff:70:
         5e:a1:82:66:b9:e9:ba:98:1b:5d:61:c8:b5:53:4f:f9:e6:ac:
         a2:a6:5d:22:f1:6a:48:92:cf:44:e9:85:8e:1f:a3:e9:0c:f8:
         d2:27:58:cc:d4:53:46:94:29:55:22:43:45:b6:e0:17:de:15:
         fc:d4:61:32:22:8e:ca:87:27:13:3e:4a:df:c1:45:8f:81:cb:
         6f:e3:77:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----