Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/e1d90497161f2661d76b17ebf5ff8bd39c1112f5.roa
File:                     e1d90497161f2661d76b17ebf5ff8bd39c1112f5.roa (raw, json)
Hash identifier:          UPp6yVgSumnLvr58irhhQmhMzZKqZx8dKcDrhm8k80s=
Subject key identifier:   85:96:E6:9A:5B:90:5B:9E:CE:57:CE:B3:D4:61:8E:17:BB:46:C2:C9
Certificate issuer:       /CN=281bebe647f8282f645bffb38feb15c2808f4701
Certificate serial:       0A6D35
Authority key identifier: 15:8F:D4:10:6F:3C:88:10:D0:71:1E:88:16:11:E3:37:BF:C5:C4:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/281bebe647f8282f645bffb38feb15c2808f4701.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/e1d90497161f2661d76b17ebf5ff8bd39c1112f5.roa
Signing time:             Wed 24 Mar 2021 14:37:23 +0000
ROA not before:           Wed 24 Mar 2021 14:37:23 +0000
ROA not after:            Tue 24 Mar 2026 14:37:23 +0000
asID:                     269884
IP address blocks:        45.188.216.0/23 maxlen: 23
                          2803:f8e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683317 (0xa6d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281bebe647f8282f645bffb38feb15c2808f4701
        Validity
            Not Before: Mar 24 14:37:23 2021 GMT
            Not After : Mar 24 14:37:23 2026 GMT
        Subject: CN=e1d90497161f2661d76b17ebf5ff8bd39c1112f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3e:76:be:3d:e2:73:ae:66:72:62:cc:ec:b6:
                    3b:71:17:cd:24:a5:83:36:79:86:10:5a:48:5d:24:
                    9d:25:44:a3:a3:f9:93:cd:2d:39:30:a2:82:d7:71:
                    bc:56:76:e6:8c:36:67:42:68:8e:f9:7f:f4:cc:c6:
                    b5:e2:68:27:c8:c9:94:ad:f5:12:fc:66:a3:2b:58:
                    21:7f:b1:1a:4e:97:14:11:e0:5b:8c:88:b1:18:32:
                    cf:d9:a1:f3:9c:1d:30:21:80:f6:8d:65:e0:4e:ce:
                    23:e6:53:56:be:de:6b:67:21:24:91:e0:bc:e6:b7:
                    97:ea:39:df:22:cc:14:ff:48:b5:99:b2:c0:86:d1:
                    c2:96:80:3d:11:45:99:b1:f5:f7:ad:2f:85:b3:c3:
                    b2:b1:d4:29:47:bf:23:de:7a:bf:50:19:96:b9:06:
                    38:a8:cb:02:82:75:48:e0:12:90:0e:e3:3f:9a:1b:
                    37:83:73:d3:87:c8:a4:2c:44:52:6e:9e:e5:93:00:
                    0e:48:58:7e:38:f6:26:53:9f:51:56:93:a8:86:16:
                    85:c7:64:fe:b9:a8:11:ea:22:09:12:0c:20:e3:8d:
                    63:48:36:a0:1a:36:a1:ff:05:41:32:ff:ea:cf:06:
                    3a:58:96:7b:7a:2e:c3:d5:06:b5:c5:74:03:47:b0:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:96:E6:9A:5B:90:5B:9E:CE:57:CE:B3:D4:61:8E:17:BB:46:C2:C9
            X509v3 Authority Key Identifier:
                keyid:15:8F:D4:10:6F:3C:88:10:D0:71:1E:88:16:11:E3:37:BF:C5:C4:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/281bebe647f8282f645bffb38feb15c2808f4701.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/e1d90497161f2661d76b17ebf5ff8bd39c1112f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85b80afb-25f5-48c4-ad3d-54bcefee01cf/281bebe647f8282f645bffb38feb15c2808f4701.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.216.0/23
                IPv6:
                  2803:f8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:c2:9d:1d:d7:00:fe:27:9d:b2:65:34:af:b9:e6:3d:a9:
         c7:4a:4f:40:ec:e9:82:51:b1:98:5b:7a:66:0c:48:3e:d3:38:
         03:42:34:d4:1a:1a:bb:5b:b6:87:a1:4f:f0:2b:05:c4:f2:73:
         88:1f:d5:2b:3c:c6:65:a7:ad:79:76:36:44:cf:66:4e:18:98:
         01:21:57:87:a7:1f:6c:d9:d1:ac:9e:b0:0c:15:07:95:75:94:
         29:0e:02:d0:4d:8b:70:ac:04:71:11:78:3b:97:1d:6c:2a:1e:
         c9:c2:e5:fa:a5:c7:44:ea:16:16:6a:8d:7b:b9:5c:af:b8:17:
         35:9c:2f:b5:0f:1e:49:a4:5d:68:2f:c3:05:18:63:77:b9:57:
         bf:e9:93:68:b2:a8:c9:15:22:14:80:aa:21:11:1c:aa:3a:93:
         c0:72:68:d9:cd:ae:c0:b6:e7:0a:6e:c0:46:1c:d2:71:65:bf:
         dd:dd:3f:8b:cb:48:6d:55:41:dd:6d:0a:97:40:6f:de:2f:64:
         7c:b0:23:1c:a4:37:88:e6:a7:17:a8:b0:08:00:91:f7:a6:0a:
         ed:35:d3:47:0b:5a:ef:fc:ba:8a:46:95:f7:c9:c8:2c:61:93:
         45:bd:65:4d:cd:58:e6:0e:50:ad:69:ab:c9:e4:93:ed:52:78:
         59:59:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----