Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/4e63cb913dd3b9b5e6d94872cb8318b4b0f8698a.roa
File:                     4e63cb913dd3b9b5e6d94872cb8318b4b0f8698a.roa (raw, json)
Hash identifier:          ciChF+ejU4za8vjv65LHaBwG+uJuOrD/aUAcrUD/WsM=
Subject key identifier:   09:86:7C:13:CE:32:D1:68:F9:53:85:D0:48:1E:E8:A4:E4:C3:93:90
Certificate issuer:       /CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
Certificate serial:       08CEDD
Authority key identifier: 5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/4e63cb913dd3b9b5e6d94872cb8318b4b0f8698a.roa
Signing time:             Wed 24 Mar 2021 14:43:31 +0000
ROA not before:           Wed 24 Mar 2021 14:43:31 +0000
ROA not after:            Tue 24 Mar 2026 14:43:31 +0000
asID:                     265620
IP address blocks:        45.189.60.0/22 maxlen: 24
                          2806:3a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577245 (0x8cedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b
        Validity
            Not Before: Mar 24 14:43:31 2021 GMT
            Not After : Mar 24 14:43:31 2026 GMT
        Subject: CN=4e63cb913dd3b9b5e6d94872cb8318b4b0f8698a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:b7:b6:5f:48:59:07:82:1a:c1:43:0f:07:
                    32:2d:4c:48:61:7a:c8:f4:15:bd:67:56:e4:a9:02:
                    2c:9d:cf:23:c9:34:6e:cc:ef:a4:bb:5a:fa:e2:dc:
                    89:cd:c7:d0:c9:eb:b0:3e:37:f5:d6:70:f9:23:0b:
                    59:1c:75:e3:72:cb:e1:93:a6:48:07:b8:ea:cd:1b:
                    f6:e2:7c:a2:ff:c8:19:75:f7:b8:72:4f:a2:32:4f:
                    74:7c:4d:74:44:50:f9:a1:63:5a:ae:a9:32:23:98:
                    86:8b:3b:7d:10:bc:12:da:d9:37:13:f1:c2:c8:14:
                    1f:db:29:be:ae:3d:87:01:9e:78:ae:11:c4:70:55:
                    8b:53:a0:de:26:ad:a3:f2:8d:11:65:c9:e4:db:51:
                    f7:46:8e:5f:b8:a4:04:2d:11:22:11:40:ec:d5:5f:
                    61:91:76:d6:33:c1:55:61:4e:f3:84:71:a3:58:b9:
                    18:58:a8:29:d3:b7:67:23:77:e3:d1:7f:ad:03:16:
                    ac:26:aa:c4:ed:f0:75:5d:c0:ca:15:f1:4a:89:3c:
                    42:93:9a:4d:73:52:ad:c3:16:08:41:c2:53:1f:cf:
                    2f:12:d6:b9:a8:59:0a:41:0e:5a:65:4a:26:c2:53:
                    00:e5:b3:c7:6f:a6:23:38:84:fd:c5:26:8f:aa:b0:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:7C:13:CE:32:D1:68:F9:53:85:D0:48:1E:E8:A4:E4:C3:93:90
            X509v3 Authority Key Identifier:
                keyid:5F:A6:B5:EC:8B:A9:9E:D6:8B:BF:92:B5:8D:CE:D6:EB:E7:E8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/4e63cb913dd3b9b5e6d94872cb8318b4b0f8698a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73b543a8-cf52-4a31-8028-3ba2a81bc6df/add30187c2c8f8e1e50a44d6e6b35f3a1ca12a4b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.60.0/22
                IPv6:
                  2806:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:75:f8:d7:8a:56:6b:31:0e:e5:af:23:8c:b0:ca:ec:ad:bc:
         d2:7b:c4:88:fd:7c:14:d7:e5:43:a4:70:d6:f9:0c:9a:9a:65:
         89:cb:7b:a8:85:c7:c4:b0:d0:af:79:9d:94:8c:94:ce:b0:2e:
         75:19:94:b1:03:54:22:b5:ad:5d:b0:53:5a:1c:9a:76:f4:bd:
         58:06:a0:0a:33:b3:38:23:f2:e8:2b:9a:c0:de:45:bf:7a:56:
         45:58:91:cc:6c:9e:45:4a:b3:2f:33:53:4c:bc:5e:d2:6d:53:
         0a:12:e4:d0:dc:d1:c9:b3:a5:bf:f2:9b:41:af:92:a5:5c:52:
         e5:ef:1b:ce:51:03:cd:3a:ae:78:13:43:6c:7a:6b:45:55:58:
         4b:be:85:ea:3a:74:36:15:c4:aa:71:a0:b4:a3:ee:ea:51:5d:
         94:46:81:1a:34:fa:eb:e1:87:bd:1f:95:5c:3e:2f:10:f6:99:
         89:0d:07:b5:88:90:ec:c5:ac:c4:a7:5c:98:86:8e:17:ae:9f:
         97:7c:cb:5f:b6:0e:9a:1d:56:b8:eb:3a:b8:18:02:be:47:f1:
         fc:05:37:e1:16:c8:37:a1:8e:ad:4d:22:91:de:0a:30:63:66:
         33:7d:94:ae:08:93:5d:25:b1:8d:cd:88:7b:08:f8:fa:08:31:
         0c:e8:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----