Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/994515065f160ebfded70ff275c1f6171f8e2684.roa
File:                     994515065f160ebfded70ff275c1f6171f8e2684.roa (raw, json)
Hash identifier:          2mCzzmmLgtoCzxgyk36aLlbE1mrMvm/xCPgIM9ucEPA=
Subject key identifier:   5A:0B:B0:59:35:F0:73:14:AB:16:3B:88:5F:A5:45:48:26:8C:C2:04
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       0B629D
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/994515065f160ebfded70ff275c1f6171f8e2684.roa
Signing time:             Wed 24 Mar 2021 14:31:20 +0000
ROA not before:           Wed 24 Mar 2021 14:31:20 +0000
ROA not after:            Tue 24 Mar 2026 14:31:20 +0000
asID:                     266668
IP address blocks:        45.228.188.0/22 maxlen: 22
                          2803:a920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746141 (0xb629d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Mar 24 14:31:20 2021 GMT
            Not After : Mar 24 14:31:20 2026 GMT
        Subject: CN=994515065f160ebfded70ff275c1f6171f8e2684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:0a:54:5f:2b:08:72:33:04:a6:65:ba:7c:
                    8e:1a:1e:55:ba:ac:d5:e0:f1:af:5d:a4:aa:c0:a8:
                    f4:00:77:34:cb:e7:a7:a0:a1:99:99:64:ae:59:62:
                    ff:c8:bb:6f:d8:88:73:9c:dc:24:eb:26:96:7b:45:
                    f5:2f:e2:8a:a2:16:74:6d:0e:44:05:96:71:58:7c:
                    bd:29:a0:88:bc:0d:2c:fa:9f:4a:1a:66:d3:af:5f:
                    08:a3:31:4e:03:da:5b:43:cb:cc:c7:28:24:8d:5b:
                    62:17:ea:7c:35:c0:a4:09:0f:34:ba:72:66:9d:ef:
                    a0:fc:fb:cc:f5:e9:0a:a8:98:be:40:97:90:6b:16:
                    a4:70:a2:33:97:43:25:ab:09:43:ed:90:c5:7f:1d:
                    65:f0:b1:32:66:89:9a:36:ea:e4:6b:d8:91:17:0c:
                    91:14:6b:f8:00:fe:7b:88:1c:17:97:0b:e0:6a:dc:
                    db:42:61:18:d9:9a:e6:25:4b:5b:d6:0a:7a:bc:1c:
                    5a:3b:4e:b4:99:ee:51:1a:27:08:c5:fd:81:d4:83:
                    f4:ce:6c:d3:11:df:28:50:8d:dd:71:d5:4e:05:66:
                    2c:92:5a:3f:da:2e:88:f7:e8:6d:46:8c:ec:32:18:
                    4c:44:8a:df:78:66:a9:3a:16:90:7e:43:73:d6:39:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0B:B0:59:35:F0:73:14:AB:16:3B:88:5F:A5:45:48:26:8C:C2:04
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/994515065f160ebfded70ff275c1f6171f8e2684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/22
                IPv6:
                  2803:a920::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:88:02:ac:c5:48:2a:23:6d:1d:cf:8c:1d:cb:10:7f:fa:f3:
         0e:e2:34:02:18:92:b4:e8:5b:48:3f:15:dc:1e:1a:d2:52:ec:
         18:75:58:d1:87:7c:84:f8:bf:f9:c6:9a:ba:43:29:18:1d:39:
         f8:8d:f9:a7:c2:62:8c:49:e5:fe:40:d0:75:17:f3:49:2f:ac:
         ab:19:1b:2c:ac:c9:8d:66:33:7c:78:02:5f:12:87:24:fb:fb:
         52:41:3f:5d:36:d0:5b:7c:e2:f0:08:f0:45:b3:4d:61:f8:c3:
         d0:b9:79:2b:35:f6:2b:11:4b:c7:87:79:40:55:44:fb:01:7e:
         c4:38:1f:4a:24:0d:cc:66:84:3c:60:db:c8:93:8c:1d:6f:0e:
         bd:50:98:95:3f:63:12:d6:fd:26:58:84:9d:fb:a2:1b:0c:88:
         cd:6b:b0:f2:ab:63:8c:73:6d:9c:1c:ee:78:cd:6b:18:fc:ee:
         f5:71:da:cc:c9:3a:6e:43:73:37:ba:29:9f:78:53:b5:55:0f:
         10:ab:99:b3:f6:3e:2e:d0:e4:5e:14:97:9c:bf:c1:e9:63:36:
         7d:0b:a4:45:ec:b9:e8:a7:86:63:63:b4:5c:be:c5:a2:7d:ad:
         fb:85:8e:18:7e:b6:93:a1:3e:67:c2:d1:fa:f4:ee:88:87:ca:
         90:23:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----