Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/80c56c448e5797be9804d721f47b13d4a883cc4f.roa
File:                     80c56c448e5797be9804d721f47b13d4a883cc4f.roa (raw, json)
Hash identifier:          jVrVdJHE3yHBuptjDIVQJBIiIZxc5dbUbDxg1xUZNOw=
Subject key identifier:   ED:F4:F1:9F:75:2F:ED:9D:4D:56:0C:07:E7:72:BC:F1:D3:47:CE:E7
Certificate issuer:       /CN=3abe8205e3875032dfb3042786eec7a637777979
Certificate serial:       19C440
Authority key identifier: 61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/80c56c448e5797be9804d721f47b13d4a883cc4f.roa
Signing time:             Mon 03 Oct 2022 22:51:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267831
IP address blocks:        45.173.200.0/22 maxlen: 24
                          2803:8460:1000::/36 maxlen: 36
                          2803:8460:2000::/36 maxlen: 36
                          2803:8460:3000::/36 maxlen: 36
                          2803:8460:4000::/36 maxlen: 36
                          2803:8460::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688640 (0x19c440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abe8205e3875032dfb3042786eec7a637777979
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=80c56c448e5797be9804d721f47b13d4a883cc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:e8:1d:9b:ef:9a:c8:60:1c:a8:39:79:1b:
                    f7:9e:c1:d9:3c:96:41:83:68:f0:1b:3a:1d:57:40:
                    42:cb:b6:62:1e:97:10:88:24:55:93:99:e1:54:48:
                    6b:97:21:1f:19:8a:81:f1:60:2d:2a:a0:b7:ff:9f:
                    0a:76:df:68:8f:b0:7a:91:c7:22:90:92:6c:17:9c:
                    14:ac:a5:55:26:2a:45:ec:e7:1d:7c:c5:c5:ed:d0:
                    d9:2f:fe:3e:ca:e2:8b:e5:66:05:48:f1:56:19:e4:
                    40:fb:ab:4f:d8:fc:f2:20:bf:a4:a3:3e:44:7a:ef:
                    a7:b5:81:7a:97:78:41:d2:6a:14:07:23:9f:66:8d:
                    8d:09:7d:d6:19:0c:f7:39:75:7c:0c:15:3d:bb:c0:
                    06:39:7a:77:77:c8:9c:92:a9:1e:1b:a7:10:5f:11:
                    cf:fd:57:72:fd:2a:5e:b6:06:d1:c1:b9:63:62:2e:
                    f1:94:27:a0:d6:60:3b:d9:3a:cb:da:a9:70:47:77:
                    59:ee:ef:7c:8e:d6:bf:4b:ec:c0:2b:9c:9c:7b:f9:
                    14:e8:39:c7:55:3b:a8:d1:92:0b:1f:6c:60:76:26:
                    16:2c:13:f5:2f:28:ba:ff:8e:5b:6f:bd:16:d6:55:
                    5c:be:64:00:c2:1c:b5:27:9a:58:30:36:c0:32:e5:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:F1:9F:75:2F:ED:9D:4D:56:0C:07:E7:72:BC:F1:D3:47:CE:E7
            X509v3 Authority Key Identifier:
                keyid:61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/80c56c448e5797be9804d721f47b13d4a883cc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.200.0/22
                IPv6:
                  2803:8460::-2803:8460:4fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:30:ba:44:ec:a8:fa:ef:08:86:a3:c7:df:9c:f7:35:9e:
         ac:2a:ac:fb:fa:c4:d6:4d:56:43:d7:c2:6a:89:06:1d:36:23:
         2b:c8:06:07:c1:b4:8a:1a:b5:97:9a:15:8a:ac:25:d5:1e:e8:
         f8:8a:56:ec:dc:58:a7:5d:ea:ee:aa:da:61:b3:04:b0:b0:34:
         44:c9:a4:1b:e8:a0:fb:3f:26:7d:f1:77:bb:72:d4:04:22:36:
         09:7f:2a:21:87:26:f1:c3:00:4d:0a:b7:e8:ec:25:5e:04:e5:
         98:f4:86:05:aa:24:96:a7:56:83:fa:57:8c:a8:df:7a:bb:be:
         93:e3:be:19:76:16:0f:7b:ba:3a:e6:9c:a6:c0:8d:ec:51:5e:
         b6:8c:8e:1c:b6:ae:03:65:7d:d1:cd:e9:f7:e0:d3:e8:5e:1b:
         73:53:74:e5:d9:db:27:45:aa:6d:e9:95:af:2f:db:b3:be:63:
         26:83:02:85:00:d0:28:6f:04:08:84:1d:c0:e2:96:ac:1e:af:
         8d:07:e0:c6:4f:35:4b:1a:bd:b8:a9:52:3a:0b:59:21:2d:1a:
         b9:bc:e3:db:83:d1:c2:e7:d9:10:b4:33:41:eb:72:31:7a:bc:
         4c:94:8f:f5:11:6f:73:d5:f2:9f:aa:6c:f6:fe:d2:bd:e9:4f:
         50:01:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----