Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/ee54eb1737057098755101aa241ab5d9469b9c9b.roa
File:                     ee54eb1737057098755101aa241ab5d9469b9c9b.roa (raw, json)
Hash identifier:          T1n7bnKlqYbalGW9V8fzWkIr32fhiyX8geNnNJhtR40=
Subject key identifier:   10:D3:CC:11:8B:FB:63:9A:D8:A0:F4:B7:E7:3C:B7:D8:94:2B:20:D3
Certificate issuer:       /CN=40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc
Certificate serial:       0CD9E6
Authority key identifier: B5:DD:5D:60:DB:94:C2:17:EE:FD:3C:17:AF:2B:3A:2B:81:26:28:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/ee54eb1737057098755101aa241ab5d9469b9c9b.roa
Signing time:             Wed 24 Mar 2021 14:34:17 +0000
ROA not before:           Wed 24 Mar 2021 14:34:17 +0000
ROA not after:            Tue 24 Mar 2026 14:34:17 +0000
asID:                     266901
IP address blocks:        45.161.108.0/22 maxlen: 22
                          2803:76a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842214 (0xcd9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc
        Validity
            Not Before: Mar 24 14:34:17 2021 GMT
            Not After : Mar 24 14:34:17 2026 GMT
        Subject: CN=ee54eb1737057098755101aa241ab5d9469b9c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:a3:5a:39:8b:74:80:58:fe:c7:24:17:51:
                    9d:8e:81:87:e6:19:d8:42:e4:cb:7c:9d:5e:81:23:
                    78:ce:37:92:6b:12:13:ba:95:ec:56:00:e6:a0:94:
                    cd:8f:34:e4:40:20:a8:68:bb:19:b8:6f:d8:2b:a7:
                    ae:2b:8a:63:ec:58:0e:47:0b:e3:5d:bd:d7:4c:84:
                    6e:19:bd:90:b1:5b:8e:e8:18:8f:9b:97:12:3d:b9:
                    02:68:38:d0:34:79:ac:d3:e2:ca:d0:ec:6c:29:40:
                    2e:11:70:a5:49:9a:64:cd:54:a3:f8:b0:be:dc:18:
                    06:5f:75:80:dc:f8:47:11:0d:cd:5c:d4:83:58:dc:
                    44:21:2f:8f:6c:c5:97:75:c7:64:16:11:72:1c:40:
                    9f:61:2b:53:9a:24:b5:85:45:8b:e7:1a:e2:7c:7e:
                    88:e4:b5:7b:e0:71:95:18:25:d6:73:e4:57:4f:26:
                    39:40:39:c8:4b:bb:98:19:0c:00:ac:02:69:28:9b:
                    e4:93:34:6d:a5:76:1c:ab:28:51:b0:40:81:bd:12:
                    ff:00:cd:5f:25:f3:c1:a0:74:4b:5d:62:4c:10:1a:
                    c1:87:7c:fd:41:3c:2d:02:04:87:07:79:ad:6f:e7:
                    23:fa:84:be:b0:3d:44:7f:a4:20:49:4b:a5:54:fb:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D3:CC:11:8B:FB:63:9A:D8:A0:F4:B7:E7:3C:B7:D8:94:2B:20:D3
            X509v3 Authority Key Identifier:
                keyid:B5:DD:5D:60:DB:94:C2:17:EE:FD:3C:17:AF:2B:3A:2B:81:26:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/ee54eb1737057098755101aa241ab5d9469b9c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8992f9bd-dbaa-4d74-9621-a15a9c4c241f/40b7026dfe364d1dbd1c504bdcc6ffb28fbc41fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.108.0/22
                IPv6:
                  2803:76a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:d4:42:25:67:08:23:24:5a:eb:ee:44:6f:74:72:03:f4:fc:
         ff:7e:08:21:fb:97:b0:9a:5a:d8:fc:f3:d9:11:a1:38:ff:5d:
         93:54:64:83:f5:32:5c:82:3b:39:a8:45:cf:8f:8c:07:71:e1:
         9c:67:49:80:c5:f2:0e:c2:85:50:fc:e6:46:fb:c1:17:b7:87:
         cf:ab:58:32:2d:3e:67:85:dd:b2:cf:cd:05:c4:ca:b0:a2:76:
         d2:d8:48:6a:2b:57:8c:a4:9f:c6:ac:0b:38:e4:98:76:3f:db:
         8b:cc:1c:67:64:4c:96:21:e4:74:e9:9a:5e:4d:2e:1d:08:e5:
         37:52:e2:ef:4a:67:19:d2:b2:57:7f:6c:25:f6:79:f2:bd:c9:
         8c:32:4e:a1:fb:5c:7a:c0:d1:11:95:b8:83:c5:ee:9c:ef:30:
         cf:b8:56:82:90:5e:1f:e8:6f:4a:d6:43:85:49:88:ad:1e:be:
         2c:ab:b0:ef:51:7e:a0:79:c4:15:19:4a:fa:bb:8d:5b:d2:d1:
         dd:8b:48:a6:0b:f4:1c:2d:4f:42:a8:00:d5:4e:f7:2f:df:02:
         8b:54:7d:2f:1c:80:27:c0:b1:e6:ca:be:c7:90:4c:21:7b:1e:
         c4:0f:d2:fd:59:63:c9:76:76:68:d1:bd:60:5c:d9:38:6e:ae:
         39:38:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----