Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c39453cf-3e01-44a5-af13-2bce1f1dc999/4f2ffc35e568ffbeb38af46a0df0a4162a6313e3.roa
File:                     4f2ffc35e568ffbeb38af46a0df0a4162a6313e3.roa (raw, json)
Hash identifier:          SgV6hb5UJwQiWFKSFhqtFx/yzcFjh8hJPBUE/UCfaEA=
Subject key identifier:   75:37:E4:CA:F9:30:74:46:1F:02:AD:49:D0:C8:84:49:68:C8:04:FC
Certificate issuer:       /CN=b26c7d492f5b66b9f68a28ef17727c62ca024a42
Certificate serial:       04F0B0
Authority key identifier: 0E:C0:BD:D3:C9:1A:83:D0:97:14:AE:50:77:C1:1D:21:48:AE:07:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b26c7d492f5b66b9f68a28ef17727c62ca024a42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c39453cf-3e01-44a5-af13-2bce1f1dc999/4f2ffc35e568ffbeb38af46a0df0a4162a6313e3.roa
Signing time:             Wed 24 Mar 2021 14:32:27 +0000
ROA not before:           Wed 24 Mar 2021 14:32:27 +0000
ROA not after:            Tue 24 Mar 2026 14:32:27 +0000
asID:                     267918
IP address blocks:        45.178.84.0/24 maxlen: 24
                          45.178.85.0/24 maxlen: 24
                          45.178.86.0/24 maxlen: 24
                          45.178.87.0/24 maxlen: 24
                          2803:6e60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323760 (0x4f0b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26c7d492f5b66b9f68a28ef17727c62ca024a42
        Validity
            Not Before: Mar 24 14:32:27 2021 GMT
            Not After : Mar 24 14:32:27 2026 GMT
        Subject: CN=4f2ffc35e568ffbeb38af46a0df0a4162a6313e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:5e:76:33:f5:1d:ac:b1:66:8a:af:bc:4f:
                    fd:a7:7c:2b:bc:0a:c7:a6:00:8f:c4:45:41:0d:48:
                    52:69:89:c3:59:01:7c:6e:d2:c1:47:b0:47:79:7a:
                    23:aa:44:f2:4d:b9:fa:f6:f3:fc:a2:2b:e9:18:6f:
                    20:82:2d:62:57:19:9b:ed:bd:a2:c6:47:60:c3:52:
                    a2:51:85:a6:59:ca:53:58:31:41:9c:55:0d:a4:fb:
                    07:c0:74:8d:5c:92:0f:be:74:88:1e:9b:be:03:24:
                    1e:98:cb:4b:cb:d3:2c:40:a2:dc:f6:f6:21:4c:b7:
                    01:38:f1:80:05:92:77:bf:66:a7:c6:5b:46:ab:f7:
                    90:dd:45:3a:29:7b:e2:43:00:4e:97:30:02:28:2b:
                    68:5d:c0:8e:79:e7:ef:f3:fa:94:e2:ee:68:f7:f3:
                    86:f1:f4:ca:a9:e6:ee:2b:ef:41:96:87:1d:6a:89:
                    79:bc:db:b0:46:64:ca:08:6f:b0:d7:9f:4f:ae:74:
                    88:ff:65:23:cb:68:52:fa:2b:f1:a9:45:36:25:5e:
                    16:16:e4:25:85:0f:98:a6:ef:aa:47:f2:63:80:59:
                    50:0e:b0:fa:66:57:23:03:06:f7:e7:19:9c:fc:0d:
                    75:ef:f5:fe:be:a8:48:81:f5:f7:76:72:43:a7:f2:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:E4:CA:F9:30:74:46:1F:02:AD:49:D0:C8:84:49:68:C8:04:FC
            X509v3 Authority Key Identifier:
                keyid:0E:C0:BD:D3:C9:1A:83:D0:97:14:AE:50:77:C1:1D:21:48:AE:07:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b26c7d492f5b66b9f68a28ef17727c62ca024a42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c39453cf-3e01-44a5-af13-2bce1f1dc999/4f2ffc35e568ffbeb38af46a0df0a4162a6313e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c39453cf-3e01-44a5-af13-2bce1f1dc999/b26c7d492f5b66b9f68a28ef17727c62ca024a42.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.84.0/22
                IPv6:
                  2803:6e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:8d:2e:34:e6:9b:23:74:0b:eb:03:84:cc:76:67:37:6a:
         f3:b5:c1:83:0d:8a:cb:1d:54:d7:ed:84:ca:e7:71:1c:0c:d2:
         f5:bb:bf:74:88:ad:a5:f0:6d:42:bc:69:54:85:59:d4:4d:11:
         09:69:98:2b:f8:55:73:09:a8:56:03:43:2e:8b:d2:83:6c:f1:
         e3:70:f8:6f:fd:ac:90:10:63:40:51:f4:86:1a:0c:3e:36:83:
         6f:45:91:f9:54:be:4c:c9:35:a4:2c:d4:17:3f:44:79:b0:bd:
         63:f8:f1:37:50:44:15:13:6b:e1:b8:9d:20:a7:27:11:83:b2:
         c9:e3:d8:a9:31:49:9d:a4:b1:68:8d:8c:e2:c0:26:cd:1d:92:
         26:77:26:a2:72:28:56:9f:21:62:52:c5:f3:70:60:57:f4:b1:
         69:46:a9:97:bb:79:64:c0:3a:65:b8:0f:fb:8a:be:86:4f:2c:
         b6:91:99:8f:a1:7f:03:6d:e8:13:4f:f6:2e:31:d8:a6:33:98:
         e4:be:4f:8f:a3:35:ab:e2:b4:9b:10:84:06:9e:72:69:f0:38:
         02:78:9b:3c:8c:8b:76:d8:ee:6c:4d:a9:5c:79:b2:fb:33:2f:
         31:59:8f:19:cb:eb:6e:96:d5:49:d8:db:be:17:94:35:a8:d8:
         49:0c:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----