Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/4cf8038c986df361af19ce5dea7841456622d7e3.roa
File:                     4cf8038c986df361af19ce5dea7841456622d7e3.roa (raw, json)
Hash identifier:          O0KYPRjtXzXh8SmIrKkdZtGgAD/l3piVLEMGubflIj4=
Subject key identifier:   C6:A4:CA:7C:73:68:9C:64:16:0B:B3:97:BF:04:76:1E:C4:DE:05:75
Certificate issuer:       /CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0
Certificate serial:       02FE1C
Authority key identifier: CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/4cf8038c986df361af19ce5dea7841456622d7e3.roa
Signing time:             Wed 24 Mar 2021 14:30:49 +0000
ROA not before:           Wed 24 Mar 2021 14:30:49 +0000
ROA not after:            Tue 24 Mar 2026 14:30:49 +0000
asID:                     136907
IP address blocks:        45.191.112.0/22 maxlen: 22
                          2803:1ae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196124 (0x2fe1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0
        Validity
            Not Before: Mar 24 14:30:49 2021 GMT
            Not After : Mar 24 14:30:49 2026 GMT
        Subject: CN=4cf8038c986df361af19ce5dea7841456622d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:e8:47:54:48:14:ce:6d:fa:56:df:99:f4:
                    d9:06:63:0f:41:40:9b:d7:d5:74:40:8c:29:48:18:
                    77:d2:a7:b4:c4:4c:9a:6a:8a:93:a7:17:2f:01:ac:
                    dc:2f:64:08:44:18:2a:08:e6:d4:97:00:0f:39:11:
                    f9:86:48:92:94:7b:75:f2:4e:8b:47:d3:7c:a8:e9:
                    68:5e:57:e7:d6:0b:a1:e0:06:ae:e6:ba:ea:b0:b7:
                    fa:04:40:de:10:3a:3a:e8:6c:9b:1a:bf:1f:ae:1e:
                    bc:78:77:4d:f2:a0:6d:be:fd:03:84:db:7a:f0:b7:
                    ce:63:cc:a2:d5:d6:fc:12:c2:5d:69:4f:7c:5e:52:
                    a3:8b:9c:2b:90:3a:9c:78:fd:1b:d1:81:97:a9:e7:
                    60:67:d9:28:4c:7f:03:a8:3e:25:36:ca:cb:c0:1c:
                    f9:4c:5a:80:ff:78:18:d3:d4:80:7c:6d:00:12:93:
                    6a:64:01:51:f2:3b:c3:e0:03:bb:47:c1:b4:50:54:
                    b4:d6:cb:d3:b6:f0:21:35:3c:35:28:02:68:0b:54:
                    90:15:60:a3:c3:79:67:3c:9e:84:a4:a3:bd:fe:ee:
                    0f:45:95:06:04:f0:2e:6b:ab:2c:c4:37:51:70:8a:
                    b7:88:95:58:c8:98:71:fc:3d:d7:e9:a4:1b:62:96:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:CA:7C:73:68:9C:64:16:0B:B3:97:BF:04:76:1E:C4:DE:05:75
            X509v3 Authority Key Identifier:
                keyid:CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/4cf8038c986df361af19ce5dea7841456622d7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.112.0/22
                IPv6:
                  2803:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:c6:a2:3e:f3:df:6c:17:12:ee:92:48:e5:7a:aa:c0:3c:fb:
         4a:1d:f8:9b:4f:e9:87:02:2b:eb:9c:40:df:78:4d:ae:41:16:
         ee:92:29:63:97:2d:40:85:c8:3f:83:1b:80:b0:6d:3e:d0:da:
         cd:9e:44:54:27:eb:d1:a0:8e:02:8e:96:e9:77:a3:f1:b0:12:
         98:f7:51:9b:75:b1:ac:b6:6e:31:37:37:18:a4:5f:0d:d2:b3:
         92:d2:f3:fa:bc:2d:97:3a:7e:44:12:ba:e5:41:1e:81:cc:03:
         d1:b7:9f:f8:2a:50:ed:cd:3b:70:d2:65:95:ca:84:dc:df:72:
         76:be:60:80:51:16:c0:73:34:8f:87:0a:bb:db:e3:b4:c0:9a:
         b6:2c:ed:a3:c4:16:cd:76:0c:1c:d2:cf:c8:76:16:aa:fc:cd:
         24:cf:8c:b7:14:ec:9d:f6:6f:d2:ab:36:fb:4b:d8:f3:c3:62:
         a1:7f:1c:34:c3:5b:d6:fa:9b:9d:0f:5b:aa:f7:4c:83:d6:23:
         01:c2:f0:21:45:ed:f4:36:79:33:70:a4:36:07:78:85:6f:e4:
         2d:fc:ad:e0:83:e3:ba:c2:c9:51:f6:ec:a9:94:cd:c8:0d:51:
         77:f5:4f:7e:dd:8b:95:53:c8:d5:d1:64:89:e0:c7:aa:37:c0:
         9c:e1:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----