Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/9a7280330d85c724b704414eae6a6770908e609a.roa
File:                     9a7280330d85c724b704414eae6a6770908e609a.roa (raw, json)
Hash identifier:          1MVV4Udo8CSd7ZQKtSa4m+1/mXT71qv0K4qy5mLp+Rg=
Subject key identifier:   30:C8:1C:0E:F8:DE:73:6C:23:AD:82:36:15:D4:F6:CC:33:32:44:82
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       0D1C55
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/9a7280330d85c724b704414eae6a6770908e609a.roa
Signing time:             Wed 24 Mar 2021 14:37:09 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     263779
IP address blocks:        45.231.54.0/24 maxlen: 24
                          200.10.176.0/24 maxlen: 24
                          200.10.177.0/24 maxlen: 24
                          200.107.82.0/24 maxlen: 24
                          200.107.83.0/24 maxlen: 24
                          2001:13c7:7004::/48 maxlen: 48
                          2801:1d:a001::/48 maxlen: 48
                          2801:1d:a004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859221 (0xd1c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=9a7280330d85c724b704414eae6a6770908e609a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a3:a9:4c:8b:7d:82:9b:ef:29:e4:6e:99:34:
                    71:7b:e6:b8:d1:a1:3b:16:3f:14:23:69:87:7e:c9:
                    50:5f:88:f7:32:75:8a:d8:a9:05:fd:e2:f2:e2:82:
                    f3:ad:2d:20:ee:0c:d9:dd:c0:03:05:62:5b:39:fc:
                    4e:6b:15:41:d0:7f:63:cc:af:00:8a:74:ad:8a:ed:
                    b6:23:fb:f4:4a:f2:52:02:67:ac:6d:42:0d:3b:43:
                    e0:15:aa:34:23:40:63:1c:9e:46:e5:e5:55:b4:ad:
                    fe:cc:bf:ed:4b:d6:d6:b3:8a:57:c4:f4:55:32:02:
                    c8:e5:8a:b1:08:56:8b:8f:f7:d2:a5:cc:91:4c:5a:
                    23:02:ac:74:85:f8:24:11:9e:05:25:6e:00:3b:37:
                    30:0c:d3:a3:77:d2:6b:9e:0b:cf:9a:e1:eb:c1:65:
                    bb:0d:ae:ad:c5:b2:52:24:d5:ae:a9:8b:12:e5:bc:
                    c8:20:d1:88:59:78:ee:20:ba:11:7c:b1:26:f4:01:
                    90:ae:96:66:57:2c:b6:f2:0d:12:67:78:f9:10:51:
                    39:0d:bb:32:ba:85:fd:2c:16:a4:4f:59:55:cc:9e:
                    0b:21:bc:1c:9a:79:0e:85:4e:b1:74:f1:84:c0:ae:
                    08:66:30:ea:57:69:46:17:94:40:10:99:dd:c0:59:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:1C:0E:F8:DE:73:6C:23:AD:82:36:15:D4:F6:CC:33:32:44:82
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/9a7280330d85c724b704414eae6a6770908e609a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24
                  200.10.176.0/23
                  200.107.82.0/23
                IPv6:
                  2001:13c7:7004::/48
                  2801:1d:a001::/48
                  2801:1d:a004::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:76:5a:1c:e4:a1:8c:04:77:13:10:2e:61:92:d7:11:a3:2b:
         7c:14:3c:ca:14:e6:84:c8:8d:61:36:7d:4c:dc:9e:12:ae:ff:
         0c:d3:5c:a2:4c:e0:c7:5c:62:9d:46:76:b3:02:bf:0f:43:0d:
         63:45:c2:89:66:56:b5:ac:ee:b7:35:dd:59:82:e6:d1:e5:a0:
         50:39:52:e5:08:56:3f:8c:32:c9:8f:30:8c:f2:21:b5:8b:f1:
         3f:1e:bd:f4:dc:53:40:b8:de:83:e3:03:df:0a:99:72:fb:7e:
         b3:19:95:49:25:1e:92:39:3b:b6:21:0c:6a:e0:ef:50:d3:f1:
         70:95:b0:ed:4b:48:0d:f2:50:be:7e:36:b7:9b:d1:5f:34:72:
         9c:ed:7a:f0:ab:98:b0:88:3f:9b:12:ff:ae:31:91:24:ec:5c:
         a6:07:50:e1:83:f6:53:a0:fb:53:52:4d:65:59:d6:cf:e5:2e:
         b9:0d:c5:2c:a3:c1:f9:6c:81:69:f8:62:1b:19:c9:bb:7f:41:
         1b:1e:97:d0:8e:34:0f:bb:42:e3:62:62:8b:82:2e:f0:83:e6:
         dc:b4:8e:ac:4a:96:a3:ba:bf:77:4d:b3:63:f8:26:c5:06:91:
         c3:b4:7e:60:6d:ba:0f:3f:12:a3:93:a9:ea:f1:94:b4:6c:07:
         c5:e7:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----