Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/e0ca7505d3b51eea8b2a24e971fd86dea377e01f.roa
File:                     e0ca7505d3b51eea8b2a24e971fd86dea377e01f.roa (raw, json)
Hash identifier:          rF0XwU+ZjdGoACcTN92UjYBsbTRLdrUjG53b/CA0lbc=
Subject key identifier:   E2:92:47:35:0B:A3:F4:D1:2A:76:7C:E3:78:E7:37:F7:68:85:9F:63
Certificate issuer:       /CN=b0ccf652dada809fc364ef32b2e5b048271f559d
Certificate serial:       014158
Authority key identifier: AA:45:F0:96:C1:A9:76:6C:23:1F:E6:A5:F4:22:7C:71:E7:43:25:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0ccf652dada809fc364ef32b2e5b048271f559d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/e0ca7505d3b51eea8b2a24e971fd86dea377e01f.roa
Signing time:             Wed 24 Mar 2021 14:43:27 +0000
ROA not before:           Wed 24 Mar 2021 14:43:26 +0000
ROA not after:            Tue 24 Mar 2026 14:43:26 +0000
asID:                     265598
IP address blocks:        45.184.124.0/22 maxlen: 24
                          2806:348::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82264 (0x14158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ccf652dada809fc364ef32b2e5b048271f559d
        Validity
            Not Before: Mar 24 14:43:26 2021 GMT
            Not After : Mar 24 14:43:26 2026 GMT
        Subject: CN=e0ca7505d3b51eea8b2a24e971fd86dea377e01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:9d:79:bb:19:f6:80:98:7c:44:b9:63:d5:
                    1b:e6:cf:ec:69:61:5f:4a:ae:b6:48:68:73:d3:fb:
                    49:f3:0f:16:7a:de:f5:16:61:18:cc:f2:de:a5:4f:
                    4b:d2:f0:6d:bc:13:47:e1:47:c1:35:0f:d1:1e:06:
                    8a:71:ac:c2:38:bb:b7:24:04:02:b9:8a:65:4e:70:
                    19:b9:84:75:60:d0:6d:8f:80:01:c0:3c:e6:87:86:
                    77:0f:90:c1:4e:49:d6:18:73:c0:2a:96:98:c1:92:
                    6f:a8:40:19:d0:8e:57:7e:bf:97:b0:ad:2a:b7:da:
                    48:cc:16:5c:ca:0b:30:89:8c:ea:f2:11:91:2f:48:
                    ad:78:c6:45:7c:ff:75:9b:3c:1c:a3:67:93:e6:86:
                    5d:fc:26:8a:07:5b:db:7d:72:3f:1f:46:7a:8b:ee:
                    ba:d7:68:70:43:33:c8:f9:ac:07:f6:81:0b:67:d0:
                    54:d6:67:f3:32:43:e0:f5:a4:92:90:70:73:52:ab:
                    19:d9:df:12:d5:0c:f0:09:d1:3f:cd:e0:9e:95:e7:
                    ef:c5:9c:c4:a0:83:80:d5:b2:ac:94:e0:a7:f7:33:
                    ad:8b:76:4e:ce:6e:fe:f1:6b:4e:fb:21:e7:2b:8e:
                    56:54:1d:84:db:ca:e7:b0:e2:2f:20:02:0b:f1:fc:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:92:47:35:0B:A3:F4:D1:2A:76:7C:E3:78:E7:37:F7:68:85:9F:63
            X509v3 Authority Key Identifier:
                keyid:AA:45:F0:96:C1:A9:76:6C:23:1F:E6:A5:F4:22:7C:71:E7:43:25:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0ccf652dada809fc364ef32b2e5b048271f559d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/e0ca7505d3b51eea8b2a24e971fd86dea377e01f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/b0ccf652dada809fc364ef32b2e5b048271f559d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.124.0/22
                IPv6:
                  2806:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:7d:9e:49:cf:d2:c4:0d:a1:39:97:6e:d3:77:9e:d0:c2:9b:
         52:61:5a:d3:62:52:53:46:0d:05:f6:ba:d8:18:da:8d:93:f6:
         31:c8:28:59:48:bb:f0:14:f1:59:65:8f:dc:d9:94:d0:ee:94:
         f2:41:fd:16:e2:fe:86:8b:9d:4c:bc:69:47:bd:ab:d6:5a:8a:
         c4:f7:42:bc:ed:0e:d9:28:89:b0:a1:81:3b:b2:4e:13:99:9d:
         03:b9:46:37:12:a7:1c:5f:a3:11:4e:18:ed:ad:a9:56:12:e5:
         b5:29:ce:87:3c:8e:a6:1b:03:9b:b3:27:64:f4:d7:7c:ab:f2:
         02:c1:e9:7e:74:49:ea:4d:db:02:d7:b9:8a:d4:bd:7f:21:5d:
         90:53:06:13:da:e4:ba:1a:71:45:c3:c9:52:ff:8f:6b:0d:4a:
         15:75:64:8e:b8:be:59:88:8c:b1:91:7c:14:da:a9:20:d9:31:
         61:1a:70:46:bc:43:7e:8b:03:8f:ad:39:72:8c:55:59:9f:7f:
         25:47:32:3a:b2:49:c1:af:2e:74:a6:20:72:83:8c:f3:bf:1c:
         c3:c3:d2:b8:5b:bd:f3:2e:72:ed:59:93:af:10:ee:dd:5c:cd:
         e5:27:cb:45:48:b1:5a:63:0e:da:60:39:cf:11:44:8b:f3:9b:
         ba:57:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----