Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/a186a3b57e9ac5f5e78c60a9f5a3c1e5891cdae5.roa
File:                     a186a3b57e9ac5f5e78c60a9f5a3c1e5891cdae5.roa (raw, json)
Hash identifier:          esAu9FcEmV6DbgjEh5EAxKwqFXpztqiTuiFG1AP5dms=
Subject key identifier:   BD:4B:8D:04:C0:A5:47:3A:63:6B:39:CF:EE:4A:C1:84:BE:AF:F8:01
Certificate issuer:       /CN=72abba6b7cd25cc52bbab3345005452793c3070a
Certificate serial:       1192
Authority key identifier: DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/a186a3b57e9ac5f5e78c60a9f5a3c1e5891cdae5.roa
Signing time:             Tue 20 Jul 2021 17:28:31 +0000
ROA not before:           Tue 20 Jul 2021 03:00:00 +0000
ROA not after:            Thu 20 Jul 2023 03:00:00 +0000
asID:                     271938
IP address blocks:        45.5.216.0/22 maxlen: 22
                          2803:8610::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4498 (0x1192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72abba6b7cd25cc52bbab3345005452793c3070a
        Validity
            Not Before: Jul 20 03:00:00 2021 GMT
            Not After : Jul 20 03:00:00 2023 GMT
        Subject: CN=a186a3b57e9ac5f5e78c60a9f5a3c1e5891cdae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:a5:1a:29:26:4e:89:7a:3f:7d:fc:ae:5c:
                    a9:6c:01:60:58:b5:0b:96:c2:4f:df:9e:0c:98:54:
                    49:3d:23:97:64:5a:2b:0a:37:2e:5c:1a:c6:b8:b4:
                    4d:60:07:dc:89:36:34:88:9d:a4:76:cf:a8:23:29:
                    4e:e6:23:3f:c2:d8:74:7e:3e:d6:b6:a4:2f:ad:93:
                    a8:9d:48:f9:4d:9e:5c:ca:15:b8:eb:66:3c:43:6a:
                    f9:41:ad:9b:59:25:d3:c9:3d:e7:48:1c:85:77:03:
                    28:aa:d1:16:0a:5d:a3:97:37:f2:4a:f2:77:19:a4:
                    10:ee:07:08:d4:b5:8b:46:c3:63:3c:7c:92:75:ce:
                    f0:26:48:5e:90:84:23:81:3b:31:08:a4:1a:20:05:
                    d8:0b:cd:3d:e2:36:b7:7b:37:84:93:79:55:0b:13:
                    43:94:b2:ef:30:23:ac:84:02:42:6f:84:85:7d:a6:
                    86:53:b0:04:65:49:cb:1e:c7:89:c0:45:56:f6:8c:
                    de:07:97:71:21:53:a8:70:8f:24:c3:8d:0d:16:a6:
                    7d:7c:c7:9c:6e:69:d5:ae:51:a7:d2:b1:70:ee:53:
                    65:a5:73:ef:fc:3d:9f:c7:e9:b7:9d:e2:98:4a:9d:
                    b8:5e:93:79:6d:5b:78:38:38:fd:74:e9:44:0d:aa:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:8D:04:C0:A5:47:3A:63:6B:39:CF:EE:4A:C1:84:BE:AF:F8:01
            X509v3 Authority Key Identifier:
                keyid:DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/a186a3b57e9ac5f5e78c60a9f5a3c1e5891cdae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22
                IPv6:
                  2803:8610::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:36:7d:71:10:99:ee:85:90:d5:a9:b1:8a:0d:8a:a1:fa:
         83:20:08:0b:21:b4:74:4f:23:2d:f9:c2:58:76:d9:8e:1a:b3:
         ab:22:a8:e9:03:b8:e5:f2:04:c3:64:80:53:3a:db:cc:66:e7:
         3a:12:91:b4:3f:26:b6:dd:3b:c4:0f:24:fb:fb:43:f8:af:92:
         a5:80:f7:3a:8f:84:7a:0d:ba:87:1e:ae:eb:c3:c7:c8:86:3d:
         85:95:3d:2a:9f:51:2a:c6:37:81:cb:bc:d0:76:a0:66:9e:57:
         0b:d8:f0:4a:d0:a7:cf:da:49:4f:f5:b6:9b:b5:e8:0c:7e:2b:
         9d:7b:34:7b:ac:69:50:e4:75:51:82:b1:2a:6e:aa:3f:6d:80:
         52:22:c1:d8:2c:7a:72:81:4a:70:62:a5:6d:7a:2f:cd:e8:e4:
         86:97:f2:5f:8f:a0:64:a6:9a:2d:73:81:07:75:70:9c:0f:d0:
         d1:ca:c0:73:a2:52:0a:46:3b:dc:c2:99:a0:13:3c:e5:21:44:
         d9:aa:41:9a:4e:48:e3:d4:df:ed:2c:60:18:32:a0:b5:b2:e4:
         a4:b0:a9:be:b9:b7:1d:75:17:5e:1f:e3:bc:68:51:df:fc:ec:
         11:6f:22:12:ee:a3:4b:33:f4:e0:cb:46:c7:ce:b0:1a:46:8f:
         f3:1c:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----