Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/67c1c0fe892c9db9b735623bfb959a688a045ea5.roa
File:                     67c1c0fe892c9db9b735623bfb959a688a045ea5.roa (raw, json)
Hash identifier:          XphMuVLhLQpDy87AxQlMYbXJqc0w9yhdTWAsDmXADTA=
Subject key identifier:   63:0B:3F:81:A1:73:80:F6:93:E6:D2:1A:67:D2:64:F8:A6:52:51:80
Certificate issuer:       /CN=9f38530271142a50ccefbe64df571c9b0e259487
Certificate serial:       0D285A
Authority key identifier: 99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/67c1c0fe892c9db9b735623bfb959a688a045ea5.roa
Signing time:             Wed 24 Mar 2021 14:34:50 +0000
ROA not before:           Wed 24 Mar 2021 14:34:50 +0000
ROA not after:            Tue 24 Mar 2026 14:34:50 +0000
asID:                     269822
IP address blocks:        45.65.232.0/22 maxlen: 22
                          190.102.120.0/22 maxlen: 22
                          190.102.124.0/22 maxlen: 22
                          2803:15c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862298 (0xd285a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f38530271142a50ccefbe64df571c9b0e259487
        Validity
            Not Before: Mar 24 14:34:50 2021 GMT
            Not After : Mar 24 14:34:50 2026 GMT
        Subject: CN=67c1c0fe892c9db9b735623bfb959a688a045ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:9e:78:b1:32:54:71:b9:4a:29:03:a3:db:
                    e9:52:9c:fa:44:ee:33:ee:03:78:67:05:1c:e3:64:
                    6c:ad:5c:0f:36:27:50:b6:b2:c6:55:09:16:5f:89:
                    bd:b3:22:22:67:9a:22:f7:26:e2:ad:87:b5:c8:b5:
                    0f:77:1a:a6:54:9e:fe:29:58:2b:36:4c:2c:5c:f9:
                    3d:3e:a1:48:5f:86:e8:07:3a:a0:47:41:6b:16:33:
                    f3:38:b2:1e:bf:c0:c1:42:c7:90:ac:ec:65:fe:4e:
                    f8:8a:49:24:a7:c5:dc:93:a9:43:60:a9:70:a0:34:
                    5c:5b:71:ea:f4:84:92:ee:48:65:d8:74:46:29:b4:
                    6f:ba:37:f8:ea:32:55:ec:61:6b:c0:7a:08:92:64:
                    f9:e0:91:59:1e:43:14:49:3b:6a:e2:eb:0d:52:9c:
                    23:92:d6:03:6f:e8:22:83:ea:4a:fe:b1:75:f2:0f:
                    18:a9:7f:b8:30:8b:ff:4b:0a:1e:9f:74:09:96:b8:
                    3e:de:ee:74:fe:27:f1:f7:08:1c:3c:07:c8:c9:27:
                    ff:ce:2e:00:dd:78:bc:65:03:76:53:fa:ec:60:84:
                    84:91:89:ba:84:a2:33:3a:f4:d0:d3:eb:ef:6b:a9:
                    07:61:16:69:d3:1b:aa:59:34:9a:c2:8a:df:59:c7:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:3F:81:A1:73:80:F6:93:E6:D2:1A:67:D2:64:F8:A6:52:51:80
            X509v3 Authority Key Identifier:
                keyid:99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/67c1c0fe892c9db9b735623bfb959a688a045ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/9f38530271142a50ccefbe64df571c9b0e259487.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.232.0/22
                  190.102.120.0/21
                IPv6:
                  2803:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:f4:82:61:44:e2:8d:4a:3f:9f:59:49:ae:6c:71:2c:93:
         5f:d3:cb:42:2d:25:17:f6:4b:d0:da:a4:fc:38:07:c0:a0:b6:
         e6:5b:db:3c:92:93:12:65:7e:e9:15:50:cc:f8:9a:58:e0:43:
         d8:ed:7f:83:b3:d2:dd:ea:e6:e8:8b:2a:8b:07:e4:ca:3b:64:
         1e:76:c0:bb:0d:62:b6:2a:4f:28:ca:4c:7f:f5:55:27:54:b6:
         71:27:db:ae:02:5b:0f:16:1e:58:7d:20:8a:19:8f:92:4f:02:
         07:fb:0b:f9:a2:c3:cd:99:a4:d0:9a:e6:63:55:0a:19:b1:44:
         a9:cb:f8:2a:34:4c:3a:4d:c3:6c:91:4a:aa:1b:47:dd:cf:96:
         81:66:97:36:13:84:d8:dc:07:4e:2c:a1:58:61:f9:0e:88:da:
         b8:3f:b0:d1:2a:0f:b7:38:5d:21:69:01:c7:da:b6:16:c5:bd:
         eb:17:4f:5a:57:c0:82:8b:8b:11:8b:53:81:08:00:d5:0e:41:
         d3:48:5f:7d:69:67:fe:32:d3:55:93:66:2b:fc:c7:8c:19:65:
         10:a6:07:a6:74:ba:bf:a4:ce:0c:56:83:39:2c:e0:fe:e3:8b:
         89:51:16:15:38:cd:09:6d:b5:a9:7e:4a:20:14:89:11:87:d7:
         49:b5:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----