Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/02cfb71150a4b6bd465966ff37c6b1025b2f574c.roa
File:                     02cfb71150a4b6bd465966ff37c6b1025b2f574c.roa (raw, json)
Hash identifier:          xW828afNVHonr9AISQaibMTTyukhunLYEjJPlml0As0=
Subject key identifier:   79:39:F2:5C:DF:BF:32:5F:48:55:3F:DB:BB:A5:7F:35:15:84:AC:92
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       1033AC
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/02cfb71150a4b6bd465966ff37c6b1025b2f574c.roa
Signing time:             Mon 30 Aug 2021 13:16:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     138414
IP address blocks:        45.225.75.0/24 maxlen: 24
                          45.225.75.241/32 maxlen: 32
                          2803:1920::/32 maxlen: 32
                          2803:1920::b4b2:5f61:d37f:0/112 maxlen: 112

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061804 (0x1033ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=02cfb71150a4b6bd465966ff37c6b1025b2f574c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:f8:8c:99:cd:05:cf:7c:3b:b1:6f:c6:cb:
                    b2:2f:88:5e:b2:c4:ce:ba:e1:2e:0a:62:10:4c:15:
                    ea:02:83:76:89:dd:bb:10:cd:ca:dc:ba:94:43:76:
                    a5:1c:66:d3:78:bc:67:fa:41:6f:5a:12:eb:73:8d:
                    de:7b:92:5b:35:c5:d0:5c:e0:e6:d9:02:a4:52:18:
                    7a:99:3c:79:3d:ba:ac:e9:e7:7b:af:b0:c7:c2:c3:
                    21:5f:27:10:42:07:08:94:46:85:af:dc:54:65:fc:
                    8f:88:f1:e4:8f:81:01:0c:41:0c:51:0d:34:6b:bd:
                    22:cd:4d:39:42:d6:61:42:c1:5e:67:52:98:ed:95:
                    df:88:71:f5:de:11:23:0f:90:d5:e9:be:a8:d8:42:
                    f9:91:0b:50:ce:82:65:4d:ec:fd:7b:8a:44:63:40:
                    c6:ac:0d:5c:9b:a2:4f:3f:58:07:d3:ee:34:e6:d5:
                    1b:1b:94:86:5d:c3:4a:d8:8f:77:c6:98:3b:39:ef:
                    9b:64:98:d2:d1:2b:35:b1:4c:e5:bc:be:bd:ae:78:
                    fd:ac:14:54:98:c0:b4:ff:6f:da:fe:3f:91:92:7b:
                    29:a7:9e:8c:2b:fa:a5:c7:19:3f:ea:49:fa:20:eb:
                    8c:81:ba:06:d7:cb:39:ad:05:73:dd:b3:17:dd:e1:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:39:F2:5C:DF:BF:32:5F:48:55:3F:DB:BB:A5:7F:35:15:84:AC:92
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/02cfb71150a4b6bd465966ff37c6b1025b2f574c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:db:4b:a7:2a:97:80:f1:80:bb:2e:fb:06:e9:e8:44:c6:6a:
         5c:78:17:69:f0:1d:ca:11:dd:e3:66:ca:c4:21:05:80:da:65:
         5d:5a:62:9e:76:f3:92:25:4a:a8:fe:1f:a4:28:d9:4e:69:25:
         39:19:f0:08:ec:aa:37:e0:0a:f0:9e:cf:1e:e2:dd:68:7a:cc:
         63:a9:eb:2c:b2:28:8d:95:3d:10:55:8f:66:c9:c3:54:d7:c7:
         cc:21:52:b7:0f:b7:f4:db:c1:0f:50:ec:cf:6f:2e:68:40:62:
         62:07:24:13:68:7f:58:54:c2:01:9a:07:ed:e7:8a:33:f0:cf:
         3a:4c:04:8f:c0:54:0b:a6:1b:e0:c0:99:11:85:f8:80:fc:40:
         cd:cf:fa:ec:bf:25:2c:03:c8:2d:a5:03:94:f8:d7:f7:fe:4c:
         e9:c4:b6:78:54:da:d4:19:b9:05:03:dc:de:c1:9c:57:fa:43:
         c2:54:7f:56:29:67:2a:ed:6f:70:11:f4:92:4b:e6:5e:1e:b4:
         20:48:7d:9f:4a:12:df:92:e9:ef:56:26:45:89:49:8d:5a:f8:
         a8:d2:d8:11:c3:13:de:23:28:5a:18:6c:d6:17:6f:78:e2:a4:
         3f:f7:cd:e5:51:3f:90:c6:71:0e:9f:2a:46:cd:48:9d:6d:f3:
         6a:7c:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----