Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/05310425a0bcc7a4f230ba61fb1078e48f2e79ff.roa
File:                     05310425a0bcc7a4f230ba61fb1078e48f2e79ff.roa (raw, json)
Hash identifier:          gZp2aLmlCzOs4n7vcRlDT6sgpV1wXkXoR39+CE/qyFQ=
Subject key identifier:   2C:7A:AF:16:D6:32:85:43:DF:0D:37:99:64:19:A7:53:05:36:53:CB
Certificate issuer:       /CN=9794e945ad36051cb9233097311cb0d25eabbba0
Certificate serial:       153414
Authority key identifier: 14:C0:DF:95:38:1D:3C:FB:F1:64:E1:A7:87:A7:47:57:05:6D:67:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9794e945ad36051cb9233097311cb0d25eabbba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/05310425a0bcc7a4f230ba61fb1078e48f2e79ff.roa
Signing time:             Fri 25 Mar 2022 11:59:24 +0000
ROA not before:           Fri 25 Mar 2022 03:00:00 +0000
ROA not after:            Mon 25 Mar 2024 03:00:00 +0000
asID:                     267895
IP address blocks:        45.177.128.0/22 maxlen: 24
                          2803:6660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389588 (0x153414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9794e945ad36051cb9233097311cb0d25eabbba0
        Validity
            Not Before: Mar 25 03:00:00 2022 GMT
            Not After : Mar 25 03:00:00 2024 GMT
        Subject: CN=05310425a0bcc7a4f230ba61fb1078e48f2e79ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:49:a4:ee:25:90:00:7a:05:15:90:10:01:
                    7f:1e:3e:51:6f:41:40:f4:53:e4:0b:38:92:78:68:
                    a1:83:30:ae:81:ea:5f:db:2c:df:e7:e1:82:48:3a:
                    ae:ee:dc:11:e3:85:e9:9a:0f:83:5d:1a:ae:d2:b7:
                    e3:30:49:77:ee:98:90:83:44:41:45:bf:5e:2a:74:
                    3d:b6:d9:20:4d:86:58:5c:b2:8a:91:64:51:53:d6:
                    f9:e0:d1:c5:94:84:ad:a5:0f:39:51:4a:03:15:7e:
                    ee:02:43:87:16:54:6c:fb:2a:5d:65:db:55:9d:ca:
                    1b:db:35:ce:c2:28:6f:d7:79:a9:2b:9e:5a:bd:36:
                    73:47:bb:07:4a:1a:71:7a:2b:fe:53:91:1d:19:80:
                    21:fd:d4:10:67:d0:96:3c:60:e2:34:de:46:2a:4f:
                    2e:40:a3:50:65:b5:f3:15:44:99:ca:8a:07:ac:4c:
                    59:fe:21:5c:c5:92:2e:cc:50:f5:b8:d7:03:1e:41:
                    d0:81:52:f7:be:0b:90:26:2f:65:7f:b2:c7:70:30:
                    3e:d5:97:ec:4a:a2:12:26:09:97:67:30:ac:06:9c:
                    5a:59:65:9f:e5:f0:74:22:ce:ee:59:cc:9c:c3:99:
                    aa:97:78:72:ba:0a:f4:8a:b7:1a:2b:5a:62:dc:cb:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7A:AF:16:D6:32:85:43:DF:0D:37:99:64:19:A7:53:05:36:53:CB
            X509v3 Authority Key Identifier:
                keyid:14:C0:DF:95:38:1D:3C:FB:F1:64:E1:A7:87:A7:47:57:05:6D:67:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9794e945ad36051cb9233097311cb0d25eabbba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/05310425a0bcc7a4f230ba61fb1078e48f2e79ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/9794e945ad36051cb9233097311cb0d25eabbba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.128.0/22
                IPv6:
                  2803:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:b6:f8:58:5b:2e:e1:dc:f0:f5:21:93:83:f8:4e:b5:51:
         83:16:90:95:a2:ca:b9:f9:35:b2:62:d6:d1:29:c6:64:fb:4a:
         80:7b:aa:a2:8f:7d:19:6e:4b:ad:99:37:9b:d9:b2:dc:2c:30:
         8c:ed:03:a5:e3:24:86:f0:c8:ec:09:78:88:66:ab:2a:b2:4d:
         7a:6c:35:db:4a:11:b8:c5:cc:59:f4:94:6a:b5:6c:f2:a6:1f:
         74:0f:ce:71:84:84:30:8a:a6:98:8e:f7:a7:97:2d:c2:fb:d9:
         30:26:2e:67:b9:bd:ad:d4:54:70:96:ff:eb:fc:76:23:90:8e:
         6f:55:23:5d:5e:1b:d1:45:7b:3e:c7:0e:03:af:f5:d1:76:d4:
         29:74:40:ef:b9:b4:33:03:c1:f0:1c:9e:45:6a:df:6e:d8:a5:
         1b:99:ab:1c:05:31:86:c6:f3:6d:ad:9b:cb:60:fd:5e:c1:6f:
         1a:52:56:1d:92:25:e5:16:c4:b3:88:51:98:bc:a9:f6:16:ac:
         52:ad:c6:44:d5:2a:bc:36:5b:cb:6b:6f:2c:16:81:59:5f:db:
         7e:4a:f2:29:49:65:dc:ef:18:cf:2b:91:01:cc:fa:50:81:3b:
         08:a1:03:43:a6:00:42:e1:84:dd:4c:0b:71:42:48:cb:50:27:
         7c:49:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----