Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/8b48e28b59ae041e8627d25845c08b49e7b6b23f.roa
File:                     8b48e28b59ae041e8627d25845c08b49e7b6b23f.roa (raw, json)
Hash identifier:          Gg3fPlLZouCiIbMBXZZucWeGTeHVwOlJHw14jLlO3wc=
Subject key identifier:   DF:98:0E:BC:1F:58:7A:8D:56:73:97:2F:52:B4:71:72:0A:5F:22:8F
Certificate issuer:       /CN=59ba3379065ccda821ece8dec246871e80f15545
Certificate serial:       0BA6B5
Authority key identifier: 6C:76:1E:50:C0:15:8E:91:80:5F:0C:85:C0:73:31:E9:A5:2B:50:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59ba3379065ccda821ece8dec246871e80f15545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/8b48e28b59ae041e8627d25845c08b49e7b6b23f.roa
Signing time:             Wed 24 Mar 2021 14:32:48 +0000
ROA not before:           Wed 24 Mar 2021 14:32:48 +0000
ROA not after:            Tue 24 Mar 2026 14:32:48 +0000
asID:                     267710
IP address blocks:        45.165.36.0/22 maxlen: 24
                          2803:29a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763573 (0xba6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ba3379065ccda821ece8dec246871e80f15545
        Validity
            Not Before: Mar 24 14:32:48 2021 GMT
            Not After : Mar 24 14:32:48 2026 GMT
        Subject: CN=8b48e28b59ae041e8627d25845c08b49e7b6b23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:a5:8c:15:41:5f:ed:1e:03:5b:3f:8a:33:
                    7f:b9:fd:92:e5:2e:7a:cb:03:21:65:00:36:e0:90:
                    6d:9b:92:3b:01:14:ce:61:6e:2d:1d:4c:28:eb:41:
                    ba:50:e7:40:02:3d:ad:b9:7f:6b:39:82:a9:82:e6:
                    16:ff:15:e8:fa:1d:04:9f:11:70:6f:1a:43:63:00:
                    a5:68:ec:4c:61:86:c9:4d:f9:f7:12:cb:c8:9e:07:
                    8f:d4:91:26:fd:b4:bc:f5:48:d8:ec:ed:36:1f:9e:
                    f1:f0:9a:df:03:1a:17:fc:a0:7e:82:03:7b:cf:eb:
                    97:a3:39:27:95:bb:81:0f:3c:48:8e:27:77:e7:75:
                    e5:b2:96:3d:03:3a:88:15:cf:2b:1a:9b:eb:f8:fc:
                    9c:7a:11:c7:87:f1:02:23:78:02:ff:aa:cc:97:a6:
                    eb:ef:30:9d:6d:fe:d6:7b:55:94:b2:c1:62:a9:58:
                    9c:0f:3e:35:79:bb:25:48:dd:ba:fd:d8:cd:b4:4a:
                    2b:29:8f:ad:29:47:6f:0b:56:e8:22:3c:54:9d:d2:
                    b1:3f:e4:7d:a8:a0:26:d9:df:8a:fa:53:01:66:b8:
                    0d:8f:04:85:eb:b0:48:15:38:4a:32:9a:40:ad:ba:
                    3d:95:a1:16:e5:5e:91:a2:90:ee:f3:23:64:ec:75:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:0E:BC:1F:58:7A:8D:56:73:97:2F:52:B4:71:72:0A:5F:22:8F
            X509v3 Authority Key Identifier:
                keyid:6C:76:1E:50:C0:15:8E:91:80:5F:0C:85:C0:73:31:E9:A5:2B:50:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59ba3379065ccda821ece8dec246871e80f15545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/8b48e28b59ae041e8627d25845c08b49e7b6b23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c16842e5-523c-460b-b315-ef2e64b520b1/59ba3379065ccda821ece8dec246871e80f15545.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.36.0/22
                IPv6:
                  2803:29a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:0e:14:df:5e:f2:fb:b4:ef:76:44:00:7e:05:3c:e3:6d:
         bd:15:74:ae:bc:cc:2e:69:72:bf:94:eb:ff:49:53:96:90:23:
         b3:37:11:6d:9b:2d:c0:47:1f:5c:5c:9d:29:23:ff:0c:0f:a0:
         d2:0d:36:d7:c8:75:1a:0a:20:f5:ad:b6:f1:20:cd:31:0c:83:
         bd:c6:f3:95:f9:aa:77:a9:0e:0c:c7:ba:74:a0:eb:a9:f7:27:
         5f:0b:76:e9:54:f6:86:3f:92:37:6d:ab:da:1c:86:3b:25:87:
         a2:ff:28:85:00:c0:76:28:b3:ae:fd:b5:2a:92:ef:fc:74:a0:
         fc:bc:bf:d6:01:6c:11:07:6a:10:6a:7d:d1:34:00:ec:02:7d:
         aa:e2:d8:dd:5a:87:e3:a8:56:42:96:29:6f:54:4a:1c:d3:f1:
         6f:33:b0:cb:b4:79:07:63:ce:cd:4b:a0:15:93:8b:28:78:e5:
         d8:32:cf:5e:a4:55:a1:93:47:c1:80:6d:63:96:ec:13:7b:8b:
         9c:e5:e1:47:db:a6:d9:a4:7b:4d:e1:88:69:11:2b:b8:41:2a:
         29:59:e7:8e:e2:42:31:eb:60:92:40:cc:95:ea:a3:ec:9a:f4:
         7a:b6:c3:d3:05:c4:b6:99:a3:ba:66:02:1e:80:3b:3b:3b:72:
         17:58:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----