Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/7667e495ab177c101a6deb3cae5fa7356ed90838.roa
File:                     7667e495ab177c101a6deb3cae5fa7356ed90838.roa (raw, json)
Hash identifier:          iaukjbITSwDaXEkLjn4jxLDJmqoLV2n+pg5VexkEjvM=
Subject key identifier:   2C:8E:EC:EE:55:37:1C:AB:68:4F:3D:5D:97:99:C9:58:BB:43:CA:08
Certificate issuer:       /CN=2e8a8aa03080d7ec87cb59361208e42641e3d6d1
Certificate serial:       049F6C
Authority key identifier: 1F:22:C9:86:A5:BC:7D:26:51:E5:ED:C9:B2:F4:4A:65:9E:FF:89:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e8a8aa03080d7ec87cb59361208e42641e3d6d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/7667e495ab177c101a6deb3cae5fa7356ed90838.roa
Signing time:             Wed 24 Mar 2021 14:40:13 +0000
ROA not before:           Wed 24 Mar 2021 14:40:13 +0000
ROA not after:            Tue 24 Mar 2026 14:40:13 +0000
asID:                     270093
IP address blocks:        45.228.203.0/24 maxlen: 24
                          2803:7be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302956 (0x49f6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a8aa03080d7ec87cb59361208e42641e3d6d1
        Validity
            Not Before: Mar 24 14:40:13 2021 GMT
            Not After : Mar 24 14:40:13 2026 GMT
        Subject: CN=7667e495ab177c101a6deb3cae5fa7356ed90838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:ed:d7:5c:1f:42:98:8f:24:b0:ff:ea:6a:
                    4e:b7:b5:6e:b9:86:2f:62:f6:42:77:42:6a:4b:b2:
                    be:dc:4e:d2:d7:0e:1f:f1:63:ed:24:30:5b:43:ba:
                    c5:90:2b:04:02:35:44:1c:c7:45:cb:8f:a0:0e:54:
                    b3:39:40:53:a5:20:37:f6:b7:05:34:b3:d7:65:52:
                    a7:6f:de:50:17:68:ca:8c:42:65:77:f1:46:93:f3:
                    39:21:b7:fe:4c:66:77:10:2c:49:b1:51:27:54:ee:
                    f0:0b:4b:36:10:4b:fd:6e:4e:2e:64:40:1e:c7:36:
                    06:f1:de:69:3e:93:fd:fa:27:67:85:81:e2:a2:d7:
                    26:69:2e:44:98:4d:a6:df:ed:e2:f0:27:a7:27:2d:
                    b3:f3:74:87:3e:16:45:9c:30:f6:e1:61:0b:f2:23:
                    de:80:26:03:13:7b:55:22:9c:e7:c7:b6:b8:3f:32:
                    81:27:d1:1c:20:9a:cc:c6:d2:43:67:e1:cc:0e:de:
                    33:08:7f:d2:55:0f:58:29:31:49:db:93:60:23:05:
                    9a:87:fb:10:ae:f1:f2:1e:68:19:20:d6:26:4a:32:
                    4f:30:1c:c1:8a:63:3a:e0:6e:c1:07:9e:ea:fd:e6:
                    31:49:75:e0:a2:94:93:a7:e9:11:5c:1a:9b:33:ec:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:EC:EE:55:37:1C:AB:68:4F:3D:5D:97:99:C9:58:BB:43:CA:08
            X509v3 Authority Key Identifier:
                keyid:1F:22:C9:86:A5:BC:7D:26:51:E5:ED:C9:B2:F4:4A:65:9E:FF:89:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e8a8aa03080d7ec87cb59361208e42641e3d6d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/7667e495ab177c101a6deb3cae5fa7356ed90838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7759c8aa-fcce-4052-a159-528592f140ec/2e8a8aa03080d7ec87cb59361208e42641e3d6d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.203.0/24
                IPv6:
                  2803:7be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:a5:e6:79:5c:5f:6d:6a:ce:aa:0e:ed:67:b0:1b:57:d3:
         6c:86:0f:02:f5:ec:a0:c6:14:fd:79:ed:39:f8:4a:28:5c:d7:
         bd:a1:73:4e:ac:7f:71:18:4b:18:bd:b5:5a:b2:79:e0:15:c6:
         dc:99:45:b4:de:f7:1a:b4:11:f5:3a:23:04:8b:da:c4:4d:0a:
         39:69:c1:17:f0:04:d0:b0:33:eb:d9:32:91:b1:60:eb:62:25:
         ab:b7:34:4e:17:d8:87:e3:10:f0:1b:a1:5e:9e:1d:6a:35:1e:
         78:3d:df:5b:42:e6:d5:66:84:32:b6:ca:b3:95:1e:2f:af:12:
         57:75:8f:ee:b3:8a:29:10:54:c1:d0:b1:2d:d9:6c:56:14:29:
         06:a0:38:0c:61:b6:bc:cf:b3:e0:3b:a0:88:48:9b:32:a0:7d:
         a6:9c:c4:a7:86:9f:d6:06:1b:b9:9f:49:2c:1d:4f:da:a8:0b:
         92:e1:ec:fa:ea:29:03:72:02:18:34:4c:e1:9c:42:c0:c2:af:
         41:49:ed:e8:d3:64:92:4d:8e:43:82:f7:0e:ba:80:04:49:75:
         be:16:54:24:5c:14:6e:43:ec:66:56:e7:c5:37:67:1b:8b:f8:
         8d:46:ba:2b:8a:c1:01:47:49:7d:79:f6:ff:59:10:e2:14:ec:
         c6:8c:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----