Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/74c93ddac7b5ab86c8bb55f5fa87483eaf404b72.roa
File:                     74c93ddac7b5ab86c8bb55f5fa87483eaf404b72.roa (raw, json)
Hash identifier:          pS4zi9DHo9Nize4ES5p/HkYBws4wM4oA9pWhSjNWsy8=
Subject key identifier:   3F:61:77:D0:F4:8C:7A:1A:86:F2:27:A6:27:4C:BA:52:B1:AA:29:35
Certificate issuer:       /CN=7e3bfa55647c1f71803278f9d912326ef9efb144
Certificate serial:       058000
Authority key identifier: 2F:A1:CD:32:C2:97:48:E8:A0:D2:EE:4E:7C:8E:F5:B5:89:18:5A:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e3bfa55647c1f71803278f9d912326ef9efb144.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/74c93ddac7b5ab86c8bb55f5fa87483eaf404b72.roa
Signing time:             Wed 24 Mar 2021 14:36:25 +0000
ROA not before:           Wed 24 Mar 2021 14:36:25 +0000
ROA not after:            Tue 24 Mar 2026 14:36:25 +0000
asID:                     265696
IP address blocks:        45.5.188.0/22 maxlen: 23
                          2801:1b:d000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360448 (0x58000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3bfa55647c1f71803278f9d912326ef9efb144
        Validity
            Not Before: Mar 24 14:36:25 2021 GMT
            Not After : Mar 24 14:36:25 2026 GMT
        Subject: CN=74c93ddac7b5ab86c8bb55f5fa87483eaf404b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:b5:aa:98:dc:01:70:64:7b:ad:79:85:e7:
                    45:e0:aa:59:f3:31:f3:4f:2c:b5:12:23:0b:79:86:
                    c7:e5:2f:d6:e6:16:f6:20:6b:50:99:48:f0:b0:4a:
                    66:a5:90:25:49:f1:61:f9:e2:f3:2d:e7:2f:98:da:
                    d0:67:93:84:64:b9:f2:6c:44:7a:21:2b:06:bc:c1:
                    ee:5e:82:08:0e:cf:6a:d6:8b:5d:cb:32:9e:af:9a:
                    6a:63:8c:8e:6a:8f:96:47:0b:a5:f3:97:9c:1b:ca:
                    3d:3e:05:cb:67:39:ab:34:43:b8:c8:7f:a9:ca:2d:
                    13:ba:21:70:45:31:be:be:45:a3:f3:e7:8d:8a:d5:
                    26:55:70:c9:45:ec:f1:c9:7e:0a:77:10:cd:50:19:
                    91:64:e4:53:df:5f:ad:a4:0d:ec:1f:8f:f2:13:63:
                    20:ec:74:7a:79:17:3c:a8:91:72:97:9e:8c:3b:db:
                    a1:ff:7d:f8:b0:0e:d2:ba:a9:03:05:8c:94:ff:f2:
                    e7:6c:fc:8f:08:bc:b7:f1:98:aa:e1:b3:95:61:0b:
                    cd:f3:ce:f9:e2:e2:74:83:80:ef:3c:ca:22:02:dd:
                    fd:4c:bc:5f:30:c0:cb:e2:93:da:43:25:a2:f5:1d:
                    f0:81:87:e8:ab:cd:8b:3f:66:1c:55:6b:68:d5:63:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:77:D0:F4:8C:7A:1A:86:F2:27:A6:27:4C:BA:52:B1:AA:29:35
            X509v3 Authority Key Identifier:
                keyid:2F:A1:CD:32:C2:97:48:E8:A0:D2:EE:4E:7C:8E:F5:B5:89:18:5A:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e3bfa55647c1f71803278f9d912326ef9efb144.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/74c93ddac7b5ab86c8bb55f5fa87483eaf404b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/7e3bfa55647c1f71803278f9d912326ef9efb144.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.188.0/22
                IPv6:
                  2801:1b:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:a6:e2:2e:aa:cb:8f:cd:dc:df:06:46:c0:a0:11:b4:3b:
         ae:75:52:35:1d:ad:cd:3c:f4:a3:76:a0:c0:7a:17:04:0f:49:
         23:c6:ef:5c:4d:96:cf:3f:d5:ff:96:34:7b:5d:60:d1:fa:61:
         3e:81:39:18:9b:35:ec:c9:31:ed:14:1e:f8:5f:c8:0b:1b:da:
         f0:a5:d0:e6:22:fd:e3:05:88:e2:c8:cd:26:66:ea:e5:6f:f0:
         e6:06:ba:9a:27:e5:22:a1:55:ee:e1:19:3e:ce:20:fb:65:ae:
         a8:e9:a0:ce:1f:d1:64:a7:4e:6f:0a:b7:c1:a9:76:53:43:a7:
         06:db:39:70:0f:82:ce:97:12:0b:0c:b7:de:23:35:18:93:0b:
         8a:cc:81:38:f6:6d:5a:09:04:62:08:99:50:65:7b:d2:68:a8:
         7d:18:4d:49:ef:ab:95:f5:43:6f:77:93:b1:e1:e8:34:21:2f:
         c8:b8:f3:42:35:16:b4:78:af:4d:1b:d6:3e:68:89:ff:4f:5c:
         70:4f:27:29:f7:be:51:e7:b4:88:c8:22:8d:08:ff:a2:5f:f8:
         b8:85:e3:2f:41:d9:05:4b:f2:d5:bb:40:24:0f:fb:9a:b4:1a:
         69:cc:78:d5:c2:57:9d:d9:ca:70:1d:e3:50:50:90:b1:f1:bd:
         06:86:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----