Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/aa49e05b23436f1d1cae63c5d70c4c8309eb889d.roa
File:                     aa49e05b23436f1d1cae63c5d70c4c8309eb889d.roa (raw, json)
Hash identifier:          fk6J575IqEqu9wOQhblyNdo7q+wCkMwneUfGCt1+48s=
Subject key identifier:   DC:5C:DE:7E:17:A6:EA:BB:86:FA:69:46:CB:58:6E:FF:08:1C:71:13
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       0BA53D
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/aa49e05b23436f1d1cae63c5d70c4c8309eb889d.roa
Signing time:             Wed 24 Mar 2021 14:47:56 +0000
ROA not before:           Wed 24 Mar 2021 14:47:56 +0000
ROA not after:            Tue 24 Mar 2026 14:47:56 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          2803:f60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763197 (0xba53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Mar 24 14:47:56 2021 GMT
            Not After : Mar 24 14:47:56 2026 GMT
        Subject: CN=aa49e05b23436f1d1cae63c5d70c4c8309eb889d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:3c:d2:4e:62:ea:8c:fb:93:ee:f9:9c:7e:
                    19:39:fd:de:28:07:8c:e7:cc:5f:56:43:cf:b2:5c:
                    34:f4:29:87:08:d1:76:41:a5:ee:95:2e:7d:94:3a:
                    0b:2e:64:14:0b:63:fe:8f:70:4c:97:70:2b:fb:44:
                    38:55:90:46:a9:99:f7:46:00:49:60:6b:e5:72:5f:
                    7a:5d:11:c6:04:eb:8f:a2:59:8d:03:ea:8e:42:ef:
                    da:34:2b:ce:f5:dc:91:f2:cd:0d:cd:9e:a8:89:53:
                    59:10:c2:a0:48:f1:55:c3:15:7a:11:6b:35:39:c9:
                    33:78:47:ce:60:a4:80:d2:81:9f:c2:89:e2:87:5c:
                    af:65:ff:15:aa:0f:24:86:21:73:4c:a4:f1:ce:f3:
                    89:fc:c6:19:62:d7:3b:3c:7a:a4:ff:e6:4e:4e:b8:
                    5b:25:27:79:55:d3:92:45:27:e3:d8:52:ad:0f:61:
                    e1:cf:42:e9:0e:33:f8:7b:36:61:f4:a9:73:08:bf:
                    ed:5a:e9:67:37:e9:76:a8:7e:fa:13:b2:c3:4c:49:
                    9d:05:78:4a:66:64:58:f0:c9:d8:2f:d3:00:51:9d:
                    c8:09:18:35:cb:c8:72:9c:47:df:87:7f:2b:96:80:
                    8a:04:1d:10:10:f8:a3:ca:51:11:39:6b:1f:11:54:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:DE:7E:17:A6:EA:BB:86:FA:69:46:CB:58:6E:FF:08:1C:71:13
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/aa49e05b23436f1d1cae63c5d70c4c8309eb889d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:80:40:9d:53:d5:14:ce:d6:87:df:e7:7c:1e:52:27:8f:c4:
         a1:51:f5:22:8a:3c:7d:d3:de:80:24:d9:f1:4d:ed:2b:9b:28:
         05:44:e5:7a:5f:ca:d5:fc:f7:7f:d1:c3:f5:28:3c:5f:cb:f5:
         5d:ba:0e:38:87:79:a3:78:ed:28:4d:54:e0:39:7d:90:ec:7b:
         62:c8:65:15:d6:69:b0:a6:81:91:f0:29:f9:4a:be:7c:50:b9:
         9b:b5:f1:14:9d:60:f0:7e:60:d0:6d:56:b6:6b:c6:5d:5f:6d:
         02:90:80:54:59:36:11:45:7c:6d:1e:61:2b:6a:77:b8:3c:74:
         6b:13:42:3e:05:3c:78:17:05:64:78:4a:b0:a3:14:5d:20:5b:
         c6:44:84:8c:e6:8e:eb:f1:af:f2:7d:46:89:c1:33:59:88:f1:
         3f:10:d7:25:d7:bb:41:b6:24:c5:6b:29:eb:9b:5d:d8:22:f7:
         97:22:f6:c8:14:29:a1:a4:9e:c9:09:67:6d:1d:5f:b5:4c:2a:
         6b:10:64:cc:e4:c1:e1:53:5e:ae:62:c9:6e:53:4b:e8:c6:ec:
         61:7f:60:4e:92:f2:21:d4:6b:76:d2:30:f4:bf:1c:10:55:73:
         95:aa:ed:db:cb:36:7d:78:48:75:71:a8:9c:99:4b:c1:e1:2a:
         86:16:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----