Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/b862c9340f272f345285543dad49dfa76ef5b7bb.roa
File:                     b862c9340f272f345285543dad49dfa76ef5b7bb.roa (raw, json)
Hash identifier:          l/WnQYDAF4iDStBi8VOnk0IiKd6l9UoX/MAVQJjDots=
Subject key identifier:   DD:8E:F2:AD:04:B7:3E:BD:AA:97:61:70:2F:0B:C3:AD:18:CB:5C:7F
Certificate issuer:       /CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
Certificate serial:       1732D0
Authority key identifier: 8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/b862c9340f272f345285543dad49dfa76ef5b7bb.roa
Signing time:             Fri 13 May 2022 20:09:08 +0000
ROA not before:           Fri 13 May 2022 03:00:00 +0000
ROA not after:            Mon 13 May 2024 03:00:00 +0000
asID:                     265851
IP address blocks:        45.225.184.0/24 maxlen: 24
                          45.225.185.0/24 maxlen: 24
                          45.225.186.0/24 maxlen: 24
                          45.225.187.0/24 maxlen: 24
                          2803:6a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520336 (0x1732d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
        Validity
            Not Before: May 13 03:00:00 2022 GMT
            Not After : May 13 03:00:00 2024 GMT
        Subject: CN=b862c9340f272f345285543dad49dfa76ef5b7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:c0:a5:fc:8f:2e:c2:87:49:00:b3:3c:59:
                    bb:1f:70:c7:49:3a:e0:10:b3:d2:82:30:42:dd:5e:
                    3d:6b:f5:7d:86:11:fa:09:1c:ad:ec:6d:12:b2:99:
                    90:87:de:c4:05:d0:dc:1c:b3:8e:f4:ed:23:c7:a0:
                    be:d7:c6:c2:1c:78:c0:92:4c:40:7d:9f:4e:de:20:
                    1e:0e:5b:6f:18:13:7c:fa:cd:d1:03:1f:ab:23:1d:
                    9b:ff:4d:02:7f:e8:59:bb:f0:27:1c:9b:5f:f0:eb:
                    2c:ef:ac:ae:b1:e9:cd:2d:1f:bd:af:98:79:75:4f:
                    29:4b:f3:ca:9b:f0:3f:db:1d:67:2d:a8:f9:cf:0e:
                    da:2e:0f:36:52:fc:57:84:3e:f4:cf:81:67:fa:d5:
                    60:76:48:5c:b4:6c:62:9b:dd:4c:97:8f:95:3a:2b:
                    99:4b:5a:61:a0:f1:0b:0b:eb:25:d8:92:8d:d4:ba:
                    be:6f:6b:d9:85:ac:37:d6:79:0e:04:b0:17:55:6f:
                    91:c1:ab:b5:9b:d1:2a:1d:2c:03:e0:1f:f6:86:0e:
                    82:c5:e7:0b:07:5c:ae:04:5b:ce:3c:06:cd:3e:7c:
                    c8:ff:be:ec:ef:0d:f9:54:84:6a:23:0d:93:a0:c4:
                    f1:6d:da:d4:fc:5c:f4:95:f3:0b:9f:0e:7d:1b:be:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:F2:AD:04:B7:3E:BD:AA:97:61:70:2F:0B:C3:AD:18:CB:5C:7F
            X509v3 Authority Key Identifier:
                keyid:8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/b862c9340f272f345285543dad49dfa76ef5b7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/f568e289143efd5bc87b265db5fbd7741f1aaab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.184.0/22
                IPv6:
                  2803:6a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:ea:5c:a7:42:f0:48:f3:20:58:ce:f9:8a:80:83:0f:cf:
         cc:fb:97:16:f7:7f:a2:a8:35:f9:6b:55:ce:be:b3:ca:71:f9:
         78:3c:0c:b4:9d:17:8c:24:8e:ab:fd:e8:99:da:34:ac:af:f8:
         05:7c:36:16:92:cc:30:1e:8f:bf:e7:5c:0e:02:56:96:cb:ea:
         ab:7f:06:b5:83:a8:ec:ef:08:b6:97:82:4d:fc:96:b1:0d:6a:
         9c:0d:e7:c8:48:55:ab:78:4e:83:32:f0:76:6b:02:49:49:b8:
         01:76:a3:2f:db:b4:7c:b8:f6:e4:0b:2d:5e:a6:3f:30:90:c5:
         80:ce:7c:99:0e:62:1e:8e:5a:ea:59:54:87:b6:7a:54:97:36:
         18:f9:3e:3e:86:a3:fa:ad:6b:e1:2f:f3:29:a0:b2:78:9d:d3:
         16:e0:0b:ee:d1:d7:f0:f2:17:ed:f3:e4:0d:ab:e5:57:2b:b9:
         f7:3a:8a:7f:57:3b:48:2b:35:46:dd:8d:1e:ba:51:f7:5d:7b:
         e0:4d:13:7a:01:39:9b:b1:c2:42:57:2d:e8:07:8b:77:3e:82:
         63:35:ad:81:b0:eb:6f:3e:16:18:12:a2:a8:a7:90:de:cd:ad:
         17:e6:82:fe:7a:d0:1c:5c:88:a8:6e:8d:c8:36:d3:22:5b:d6:
         0f:6e:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----