Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/1083f58332902dd6d048ce4ed45d253d504c1c3f.roa
File:                     1083f58332902dd6d048ce4ed45d253d504c1c3f.roa (raw, json)
Hash identifier:          zW4McQbTDrn4R1vNsa4MX1YZ2YNcuXZ3GLLJ4hpTVzY=
Subject key identifier:   FD:08:5E:1F:15:C9:68:61:DE:B0:1A:26:E6:2E:A9:50:4D:0D:0A:1B
Certificate issuer:       /CN=0f385b55aff201749c5d3f77595f6566c0d0a75f
Certificate serial:       0BFEB5
Authority key identifier: 0A:6B:07:AA:2F:61:B2:FD:C4:28:2B:92:14:40:62:22:49:66:13:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f385b55aff201749c5d3f77595f6566c0d0a75f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/1083f58332902dd6d048ce4ed45d253d504c1c3f.roa
Signing time:             Wed 24 Mar 2021 14:31:11 +0000
ROA not before:           Wed 24 Mar 2021 14:31:11 +0000
ROA not after:            Tue 24 Mar 2026 14:31:11 +0000
asID:                     267817
IP address blocks:        45.174.24.0/22 maxlen: 24
                          2803:7060::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786101 (0xbfeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f385b55aff201749c5d3f77595f6566c0d0a75f
        Validity
            Not Before: Mar 24 14:31:11 2021 GMT
            Not After : Mar 24 14:31:11 2026 GMT
        Subject: CN=1083f58332902dd6d048ce4ed45d253d504c1c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:97:9e:22:d6:39:eb:3f:d6:d0:b1:34:4f:
                    a5:82:9c:c2:c0:da:5a:ad:73:05:0b:c3:3d:87:c7:
                    a6:ca:24:64:9f:9e:93:53:5e:0a:14:5e:2a:4d:a4:
                    27:5e:87:5e:89:6b:9a:74:c3:0b:9f:ae:e4:e0:75:
                    e1:e1:e3:f4:6f:0e:fc:b9:d5:68:79:08:0f:07:f9:
                    48:31:e5:27:6c:a8:f9:53:92:5c:ab:33:06:c8:75:
                    7e:52:b5:74:61:c5:02:9d:94:cc:ff:2d:86:50:3a:
                    da:58:2d:b5:4d:74:30:f9:5b:c5:33:2c:6e:84:18:
                    bf:a9:b4:bd:73:14:98:7e:25:25:3c:0c:45:60:41:
                    b5:ee:98:06:7b:14:9b:99:06:2f:0b:88:0d:c6:b2:
                    f6:16:00:56:4f:93:f7:fe:96:11:73:7a:14:6c:5b:
                    94:e4:72:6a:e6:0b:b8:a5:13:01:82:8c:37:28:27:
                    68:20:10:c6:0b:60:6e:3a:db:61:02:75:c8:14:fa:
                    5d:1d:b1:f2:a5:38:4a:c7:6f:a1:e5:b3:6e:0b:8b:
                    8d:85:5e:d3:1f:9a:aa:55:7c:86:15:49:2e:8d:13:
                    7c:cc:32:61:a9:90:99:80:a8:f6:28:d6:c8:cb:30:
                    30:b0:7e:be:3a:63:bb:ab:e0:a2:6a:6a:49:4f:ea:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:08:5E:1F:15:C9:68:61:DE:B0:1A:26:E6:2E:A9:50:4D:0D:0A:1B
            X509v3 Authority Key Identifier:
                keyid:0A:6B:07:AA:2F:61:B2:FD:C4:28:2B:92:14:40:62:22:49:66:13:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f385b55aff201749c5d3f77595f6566c0d0a75f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/1083f58332902dd6d048ce4ed45d253d504c1c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/0f385b55aff201749c5d3f77595f6566c0d0a75f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.24.0/22
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:db:4b:f4:61:41:60:3a:8c:6a:41:e5:fc:3e:88:c0:d9:
         e8:cf:41:ac:bf:a7:9e:95:a7:8d:8b:40:a2:98:bc:2d:30:8a:
         71:0d:3a:75:81:1f:88:ea:6d:02:9c:99:8f:f7:c0:69:41:42:
         2f:f9:c3:1b:9e:8c:ef:8f:de:09:d5:fb:68:80:51:b9:3e:8a:
         25:b9:18:3c:e6:28:cd:78:bd:05:f5:ff:73:00:ab:c4:af:da:
         9d:13:7e:1d:e1:5e:c1:83:02:68:ac:a7:18:4b:cd:d4:05:77:
         8e:27:4e:0f:11:c9:8c:10:6c:39:2a:5f:be:37:2f:9f:5f:53:
         01:c7:67:9b:de:bd:8c:73:9f:78:a5:34:b8:84:5c:74:c6:34:
         15:bb:72:07:9e:00:6c:6d:78:50:88:9e:77:f1:40:22:58:98:
         0a:66:9a:9a:87:b8:6b:24:82:3d:1c:88:da:7a:39:5d:49:82:
         bb:c2:04:a0:57:fe:d6:1f:10:08:52:e5:c8:02:6c:e2:3f:87:
         32:3a:78:be:91:eb:08:bf:cf:6a:19:a0:bf:2b:1d:95:9e:07:
         64:59:43:2a:d2:c0:c3:a7:f5:16:03:a9:ef:19:c0:84:cb:0b:
         25:47:b4:84:66:75:86:10:6d:cc:6f:ee:06:5e:d5:52:01:10:
         1a:10:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----