Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/3c3846f620682a518b561b83b881add7e38181f8.roa
File:                     3c3846f620682a518b561b83b881add7e38181f8.roa (raw, json)
Hash identifier:          oMF3B0XOrKX5VP8cz0Cvjsh5LnASMNe7SiOXNIj01SQ=
Subject key identifier:   B3:2F:0F:CD:4B:14:51:A5:AF:04:A2:08:91:41:0A:9B:25:C4:06:01
Certificate issuer:       /CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
Certificate serial:       0D2622
Authority key identifier: CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/3c3846f620682a518b561b83b881add7e38181f8.roa
Signing time:             Wed 24 Mar 2021 14:42:25 +0000
ROA not before:           Wed 24 Mar 2021 14:42:25 +0000
ROA not after:            Tue 24 Mar 2026 14:42:25 +0000
asID:                     27884
IP address blocks:        45.234.232.0/22 maxlen: 24
                          2803:8f20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861730 (0xd2622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c18b7e771d28c4143ac2e64846e9f82bfa8a93
        Validity
            Not Before: Mar 24 14:42:25 2021 GMT
            Not After : Mar 24 14:42:25 2026 GMT
        Subject: CN=3c3846f620682a518b561b83b881add7e38181f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:a4:45:83:dd:44:60:b5:f7:45:3b:2c:d9:
                    6b:99:0e:f9:e5:40:9a:f9:22:cd:08:fb:6a:c8:e7:
                    d0:1a:6b:b0:55:1d:0a:ce:3d:87:00:2d:19:70:0c:
                    e8:3d:17:d4:97:0c:ca:a6:84:25:dc:2a:71:c1:19:
                    1d:f6:40:ea:12:de:04:9f:b4:93:a0:50:d6:e7:94:
                    11:f8:52:fe:34:da:eb:2d:1f:fe:ae:7e:22:89:b9:
                    65:80:ef:42:38:4a:e0:f9:40:4b:f3:97:df:d5:ba:
                    21:89:c9:d2:34:3e:27:c1:14:09:93:a9:b6:09:8a:
                    ba:4a:02:32:c5:d2:97:57:bd:fd:e9:f9:0b:17:c3:
                    dd:e9:4c:6f:5a:78:04:11:71:98:c9:2f:ec:51:6c:
                    10:31:54:1c:69:b5:63:f4:6b:98:af:bd:c1:ea:cd:
                    64:f9:eb:16:02:1b:5e:d9:12:ae:48:31:54:f4:92:
                    6c:0e:9e:4d:88:a4:59:64:f2:b4:21:ed:b3:f4:80:
                    0b:15:02:0c:42:95:97:73:7b:79:64:0b:76:08:39:
                    2b:8b:b0:f5:64:0c:20:8b:0f:31:20:87:a8:6d:d7:
                    83:97:08:5b:05:0a:3f:55:27:af:34:63:b7:45:3b:
                    c2:8d:6d:a8:73:80:0e:d5:1e:e7:88:73:a2:b9:e7:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2F:0F:CD:4B:14:51:A5:AF:04:A2:08:91:41:0A:9B:25:C4:06:01
            X509v3 Authority Key Identifier:
                keyid:CC:22:94:7A:06:AB:24:B5:D8:FE:86:71:F5:BE:C8:4A:B6:3D:A9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/3c3846f620682a518b561b83b881add7e38181f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a5e35e14-d8ca-4dd0-86fa-1dff22b989b0/00c18b7e771d28c4143ac2e64846e9f82bfa8a93.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.232.0/22
                IPv6:
                  2803:8f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:85:2b:c5:5c:91:83:2f:d7:f0:2b:e8:11:5a:51:a9:0e:
         38:94:40:67:3e:85:62:7c:b2:e5:12:6b:8d:f8:cf:42:ae:e0:
         b5:38:89:f7:31:7f:88:77:75:9e:a3:3f:68:83:d1:32:05:f7:
         30:fd:65:d8:e1:ce:e2:e4:22:c0:ce:0f:b9:db:ad:ec:37:7d:
         53:bd:7c:a8:ca:4f:b2:03:f7:c2:2a:16:0e:f5:4e:90:72:bf:
         31:cd:5d:bd:d5:ba:a6:f9:56:88:a7:1b:6b:af:b9:76:61:6e:
         7f:3d:7f:4a:e2:c8:e3:e2:43:5b:13:a5:3c:90:22:9a:8c:f2:
         09:71:a2:0c:63:d4:e3:51:ec:c4:f1:0c:15:88:1b:41:5e:fe:
         6a:c6:60:1e:58:a5:90:90:07:24:54:18:45:b8:76:ee:78:3d:
         40:41:7b:c2:4b:ab:9a:76:1a:e5:63:cd:e2:22:a2:70:5c:9e:
         be:f9:56:f0:54:df:57:96:2e:e8:a7:35:f8:ec:44:3b:8c:01:
         a2:25:82:a0:cf:90:91:df:6e:d7:79:4d:5d:8e:57:97:76:70:
         22:c6:ea:27:5b:5c:0d:39:ac:50:db:38:01:82:cd:c1:af:25:
         c6:f1:3f:2d:f7:e4:67:99:58:67:82:c3:e7:f8:aa:2b:ae:30:
         07:9c:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----