Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/d2513f13691b6c6179b2387878ff7951344ba521.roa
File:                     d2513f13691b6c6179b2387878ff7951344ba521.roa (raw, json)
Hash identifier:          xQbVQHTGfHM/0EXWq/NnlFpXDrlYAc+oYtZhxzjHOgk=
Subject key identifier:   7E:97:2C:34:DB:BA:73:26:90:58:51:9E:45:18:E4:99:F0:5D:AE:5C
Certificate issuer:       /CN=5a044060d76aae49d9f5899b3c3c2defe0c5837f
Certificate serial:       0B9618
Authority key identifier: FF:9C:51:EC:A4:42:C1:86:74:15:1A:AF:8A:0F:79:13:74:9B:D7:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a044060d76aae49d9f5899b3c3c2defe0c5837f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/d2513f13691b6c6179b2387878ff7951344ba521.roa
Signing time:             Wed 24 Mar 2021 14:39:16 +0000
ROA not before:           Wed 24 Mar 2021 14:39:16 +0000
ROA not after:            Tue 24 Mar 2026 14:39:16 +0000
asID:                     266812
IP address blocks:        45.236.148.0/22 maxlen: 24
                          2803:d8a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759320 (0xb9618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a044060d76aae49d9f5899b3c3c2defe0c5837f
        Validity
            Not Before: Mar 24 14:39:16 2021 GMT
            Not After : Mar 24 14:39:16 2026 GMT
        Subject: CN=d2513f13691b6c6179b2387878ff7951344ba521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:cd:67:6e:d0:15:c5:b9:27:5b:f5:3f:ce:
                    71:ec:4f:4a:6a:0c:2b:4a:11:f1:54:20:17:5d:c1:
                    90:00:3f:b8:ae:ee:ab:a0:68:15:10:94:60:ee:41:
                    fb:eb:0f:65:a4:43:b1:e5:cf:71:9d:39:c0:2f:be:
                    f3:e6:ab:a8:c2:90:7b:8a:4f:05:71:8b:07:5d:18:
                    8d:71:fb:72:f7:ad:09:d2:af:37:bc:4a:87:e4:52:
                    98:37:a6:ea:db:33:27:43:ef:a8:37:43:6e:6c:88:
                    31:f3:7b:34:df:41:b3:9b:e7:d8:f0:78:60:ef:5a:
                    4e:8c:7c:e8:76:55:27:28:b8:46:a6:06:f6:71:07:
                    69:85:d1:cf:ff:e2:33:4b:bf:59:20:3b:d3:26:35:
                    72:2c:86:aa:2e:86:bc:95:75:79:cb:1c:ce:81:f6:
                    d5:b6:53:14:44:1c:c5:2a:27:e2:14:f5:ef:04:6b:
                    cf:a8:81:e5:c4:32:90:0e:11:6b:57:51:bd:72:02:
                    c5:cb:13:5e:e2:01:e5:3e:e2:96:bb:04:00:6d:a2:
                    89:c7:bd:4d:4a:fc:69:6f:3a:9b:d6:3b:00:5a:c6:
                    52:91:2d:a4:1d:9c:21:aa:31:21:30:8a:44:c6:7e:
                    d8:63:6f:5e:61:a0:12:75:37:1b:d5:28:a4:9b:c6:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:2C:34:DB:BA:73:26:90:58:51:9E:45:18:E4:99:F0:5D:AE:5C
            X509v3 Authority Key Identifier:
                keyid:FF:9C:51:EC:A4:42:C1:86:74:15:1A:AF:8A:0F:79:13:74:9B:D7:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a044060d76aae49d9f5899b3c3c2defe0c5837f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/d2513f13691b6c6179b2387878ff7951344ba521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/5a044060d76aae49d9f5899b3c3c2defe0c5837f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.148.0/22
                IPv6:
                  2803:d8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:ce:63:25:7c:1b:c0:ed:12:4d:73:fe:9a:45:64:62:88:
         f3:10:1a:fd:af:80:5a:13:27:8d:d1:0c:d9:b5:f7:2a:d6:16:
         56:b7:3a:54:a7:46:99:e3:c0:93:e5:ee:76:cf:1d:b2:28:f2:
         16:29:1f:64:04:02:6d:87:33:4e:33:36:00:f8:b5:f5:94:25:
         da:e5:bd:b1:09:02:4d:eb:d3:13:26:9d:75:7e:01:05:a9:e2:
         a6:9f:30:43:2e:f7:f7:40:00:38:48:26:9c:a4:a7:3a:35:04:
         1e:d8:ec:ff:3c:d8:e6:ec:97:c1:ef:a9:8a:30:a1:3e:8a:f8:
         5e:17:f7:60:16:00:7d:de:db:af:46:4d:6b:2b:b7:6e:d7:21:
         81:01:4c:7a:4e:c9:f0:2d:7e:b6:97:9b:e8:2f:54:50:67:c5:
         63:2b:23:a1:2e:fa:7b:44:6b:ac:e1:03:fe:0f:51:60:43:10:
         fe:4e:d0:41:f4:8e:fa:90:b3:f5:d5:0f:25:ac:c1:57:87:a7:
         76:28:b7:6d:45:b0:6f:ca:19:57:01:b0:9d:78:54:c7:80:74:
         ef:6c:14:cf:01:6b:37:65:56:74:0d:9c:10:f8:78:3d:42:8a:
         fb:70:58:8e:a7:0d:86:0b:4d:db:f3:ff:74:54:20:09:8b:2a:
         a8:99:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----