Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91a3d9b7-c150-4006-baf7-6e33ae3f9d35/18a4985805d01332a7cf0b2caac680faeb5bb020.roa
File:                     18a4985805d01332a7cf0b2caac680faeb5bb020.roa (raw, json)
Hash identifier:          l7p0O2JQQ8k5qqfJ4NWARf5DCyOBAWgQq1oHt86eBCU=
Subject key identifier:   E1:B4:8B:C4:D5:76:BB:FF:78:37:FB:D7:ED:8B:15:B7:30:15:7A:3E
Certificate issuer:       /CN=895d5fd53f0cabc796c570f24d6e82480646b104
Certificate serial:       0986
Authority key identifier: 10:CA:8F:D1:52:65:70:A2:CA:FD:F3:40:00:0A:48:46:D6:E8:A3:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/895d5fd53f0cabc796c570f24d6e82480646b104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91a3d9b7-c150-4006-baf7-6e33ae3f9d35/18a4985805d01332a7cf0b2caac680faeb5bb020.roa
Signing time:             Wed 24 Mar 2021 14:31:03 +0000
ROA not before:           Wed 24 Mar 2021 14:31:02 +0000
ROA not after:            Tue 24 Mar 2026 14:31:02 +0000
asID:                     266729
IP address blocks:        45.229.74.0/24 maxlen: 24
                          2801:1c:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895d5fd53f0cabc796c570f24d6e82480646b104
        Validity
            Not Before: Mar 24 14:31:02 2021 GMT
            Not After : Mar 24 14:31:02 2026 GMT
        Subject: CN=18a4985805d01332a7cf0b2caac680faeb5bb020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:7a:f6:8f:eb:2b:71:1f:a6:a9:c5:f8:f9:
                    39:be:51:b4:57:ba:34:9a:b8:cc:0c:39:80:f7:99:
                    71:37:55:aa:48:07:cb:4e:04:f8:6d:e1:66:ba:07:
                    be:62:6c:c2:f9:19:3c:b2:78:16:53:b0:87:fc:af:
                    2d:a8:c4:37:b5:74:9b:24:d2:0c:18:a6:4a:a0:1d:
                    e8:5a:e5:9a:bc:3f:74:fc:ce:48:ba:0a:7f:fb:cb:
                    33:af:e5:19:a5:7c:ef:66:52:9c:71:93:b1:31:b3:
                    e7:5d:46:3e:07:0a:d4:1f:d2:13:26:c7:e8:90:74:
                    48:5b:c5:43:36:57:9a:6b:da:56:f4:c9:2b:0c:b6:
                    be:36:60:da:47:70:a3:d4:54:81:d3:a2:6b:4e:a3:
                    9a:30:00:d5:82:db:0f:f5:df:13:60:31:6d:fb:80:
                    c0:b8:cb:e0:05:e6:75:52:7e:08:a0:71:1e:f6:40:
                    56:2d:96:12:e3:66:e6:b7:46:e2:b5:27:4e:75:04:
                    c1:8a:eb:66:c6:8b:11:34:81:9c:4e:46:e1:28:a9:
                    bc:d6:8b:14:15:ef:cb:cd:ee:2d:8e:02:ee:c2:85:
                    0a:57:58:15:f3:b5:62:e7:50:fc:6d:70:06:0e:5a:
                    5c:3f:80:9a:29:a9:1f:45:1f:97:3b:a4:f5:0c:ed:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B4:8B:C4:D5:76:BB:FF:78:37:FB:D7:ED:8B:15:B7:30:15:7A:3E
            X509v3 Authority Key Identifier:
                keyid:10:CA:8F:D1:52:65:70:A2:CA:FD:F3:40:00:0A:48:46:D6:E8:A3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/895d5fd53f0cabc796c570f24d6e82480646b104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91a3d9b7-c150-4006-baf7-6e33ae3f9d35/18a4985805d01332a7cf0b2caac680faeb5bb020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91a3d9b7-c150-4006-baf7-6e33ae3f9d35/895d5fd53f0cabc796c570f24d6e82480646b104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.74.0/24
                IPv6:
                  2801:1c:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:12:d3:81:c6:51:6f:05:91:d1:7c:f8:6b:b9:2f:d7:44:1e:
         26:cb:83:0a:90:e6:34:a1:3c:04:05:83:76:30:12:d9:25:ee:
         76:ed:93:f6:76:b0:01:32:4a:8f:d7:97:38:26:f4:08:e4:6c:
         ec:44:08:d3:8b:15:4c:57:ed:55:58:cf:1d:4c:85:ac:7b:18:
         4d:4b:cf:25:74:29:17:63:eb:ba:cc:c3:74:65:f7:e1:e8:2d:
         13:d1:ef:c2:61:81:40:e0:53:fb:ff:de:eb:09:c3:90:70:83:
         25:15:b2:3f:d9:18:77:4a:e8:a5:10:2d:e1:0c:fd:52:6a:45:
         58:82:18:f7:1c:dd:fb:91:60:5a:89:11:ee:c2:82:14:3f:ff:
         cb:4d:b4:20:ec:e9:7b:08:7e:9a:dd:7c:2e:e5:9e:7f:10:36:
         e1:5e:71:ca:ee:ed:76:6b:15:28:93:ad:4b:fe:62:76:aa:74:
         18:5e:95:90:01:88:57:f0:2c:96:ec:ae:14:d3:7b:29:cf:6a:
         ba:c0:fc:33:0c:4f:c1:2a:17:b0:fe:7f:b8:2a:5c:70:00:58:
         40:f6:69:60:2d:07:23:93:75:58:66:46:19:39:8c:3b:fb:d6:
         94:7e:6d:ad:a8:ec:24:61:f5:59:89:ad:9c:1a:65:15:b4:d4:
         ea:eb:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----