Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/77480534c23e654a19b3b02b3d32d347741a04dc.roa
File:                     77480534c23e654a19b3b02b3d32d347741a04dc.roa (raw, json)
Hash identifier:          jSI767gLWokDxaQIGnCQZSOr4+EXw23Ryh3J5YWYvjs=
Subject key identifier:   B3:63:DF:F2:F0:30:73:FB:EE:C3:0E:E6:F7:E2:5B:BB:F0:AB:B8:2B
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0CF8E0
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/77480534c23e654a19b3b02b3d32d347741a04dc.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.60.0/22 maxlen: 22
                          2803:6ea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850144 (0xcf8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=77480534c23e654a19b3b02b3d32d347741a04dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:3c:9d:36:03:9b:23:4c:9c:8f:e1:9c:67:
                    ef:cb:65:3e:a4:6a:db:a1:2c:d5:10:4b:cf:1f:e0:
                    2b:78:87:06:ba:08:bd:09:5d:30:6f:80:f8:66:fa:
                    21:02:54:d8:ad:d3:e3:63:1f:99:e5:3a:9d:ec:4d:
                    ca:85:11:15:22:cd:68:e2:73:2c:cc:2f:11:91:6e:
                    4d:c3:dc:90:4f:ba:53:68:e5:a7:5b:e8:2a:e5:cb:
                    79:c3:8c:10:65:12:f1:40:22:6d:c9:19:bc:d9:2c:
                    a1:e6:58:44:01:64:7b:41:1c:35:2e:89:32:0e:8d:
                    d0:4b:0c:c1:46:04:31:1f:6f:6d:e9:a5:0f:e4:97:
                    58:b5:a7:2e:ed:da:ba:9b:67:10:98:34:97:a4:78:
                    1a:5e:d5:da:59:a3:9b:23:9d:f6:46:c9:7a:c2:4a:
                    a9:c4:6f:c6:90:fc:82:c6:6d:80:e3:6e:78:ba:fa:
                    6b:2a:5d:1b:17:2d:a6:ee:44:1b:5c:50:fa:63:ba:
                    ef:2f:a9:98:c8:bd:c2:9b:aa:02:cc:f6:f8:5e:1d:
                    15:06:0c:e2:5c:56:dd:8d:85:25:e6:6c:a0:88:a5:
                    c2:42:8a:58:2b:19:aa:fc:ee:82:24:f3:d8:2d:6f:
                    fb:0e:76:83:0e:00:ef:e5:1b:fb:11:ef:82:3a:b7:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:DF:F2:F0:30:73:FB:EE:C3:0E:E6:F7:E2:5B:BB:F0:AB:B8:2B
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/77480534c23e654a19b3b02b3d32d347741a04dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/22
                IPv6:
                  2803:6ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:66:c5:f6:5c:05:c5:cb:07:2a:58:41:9d:c3:84:6a:ab:
         f0:54:2e:45:ae:98:22:28:f7:fc:53:8a:9b:ca:ac:24:9c:d4:
         22:ae:07:34:f0:f3:e5:9b:ab:e4:e2:02:5b:5c:f1:83:69:22:
         cd:67:e9:f3:c3:44:3e:94:8e:a8:e8:2d:e9:43:90:e3:65:9e:
         52:4d:f7:10:82:43:e2:01:c6:68:75:e3:2e:9b:a4:bc:52:f0:
         73:83:08:f2:6e:aa:ae:db:dd:8f:f0:35:30:99:ea:69:e8:3e:
         c5:24:5c:91:db:5d:24:07:f1:5c:88:af:5c:70:e5:3e:9c:db:
         20:b6:fa:9a:3b:2d:ea:45:61:90:c9:aa:3f:bb:66:5e:50:e5:
         cb:b2:6b:12:74:86:39:4c:69:b7:93:38:dc:3a:09:22:1d:32:
         72:55:3c:7c:3f:f6:66:5b:2f:65:d7:05:ca:b7:75:27:48:42:
         21:50:d7:12:fa:07:bc:27:41:ae:4a:5b:9d:f6:4d:93:0d:f4:
         59:eb:d9:d8:15:2d:cc:92:1b:bd:53:a2:e0:67:d0:3c:a3:17:
         b4:5f:0e:4e:c8:56:a1:e7:bb:75:9a:9a:34:dc:06:fd:f6:12:
         fd:05:73:1a:4a:29:33:80:54:3a:7a:50:a7:1e:dd:7f:63:b2:
         c3:ff:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----