Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/25d7706e9e048f47ce85ad9b7b0200c93fa9cc36.roa
File:                     25d7706e9e048f47ce85ad9b7b0200c93fa9cc36.roa (raw, json)
Hash identifier:          E0CNTkGyuj9XKnJQxUS3PMZWMZ+I2lhYK+0WxHwjXY0=
Subject key identifier:   6C:32:25:4F:14:6B:87:A8:8A:18:34:E3:31:5E:D0:7A:CB:56:CA:60
Certificate issuer:       /CN=92ca889a4929892f5cd2be7cc3a7292074866d6c
Certificate serial:       0480BB
Authority key identifier: DC:42:50:06:AE:D5:7E:74:8A:62:15:16:5E:ED:86:49:8D:FE:36:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca889a4929892f5cd2be7cc3a7292074866d6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/25d7706e9e048f47ce85ad9b7b0200c93fa9cc36.roa
Signing time:             Wed 24 Mar 2021 14:34:49 +0000
ROA not before:           Wed 24 Mar 2021 14:34:49 +0000
ROA not after:            Tue 24 Mar 2026 14:34:49 +0000
asID:                     265696
IP address blocks:        45.5.184.0/23 maxlen: 23
                          45.5.186.0/23 maxlen: 23
                          2801:14:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295099 (0x480bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ca889a4929892f5cd2be7cc3a7292074866d6c
        Validity
            Not Before: Mar 24 14:34:49 2021 GMT
            Not After : Mar 24 14:34:49 2026 GMT
        Subject: CN=25d7706e9e048f47ce85ad9b7b0200c93fa9cc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:6e:3b:0d:31:1d:0f:1c:a7:5d:03:d1:75:
                    71:6a:de:04:bf:ca:a4:7d:f3:12:8a:38:2e:1e:31:
                    be:71:36:a5:ce:cd:4a:bf:14:51:1e:77:3d:6a:f7:
                    5d:0c:cb:c4:b2:e0:44:47:3c:b7:a6:b8:9f:05:73:
                    92:c2:f8:ac:2b:f1:db:3c:00:73:2a:a1:36:14:53:
                    7a:06:e1:a6:25:b7:74:1f:46:5c:79:66:55:f4:26:
                    fe:96:ad:82:c2:5b:21:f4:fe:a4:db:b3:a4:12:cb:
                    98:7c:9a:ff:dd:b1:84:6d:75:8e:c6:bb:78:db:56:
                    29:05:a1:b0:49:7d:37:8d:40:08:c1:6b:58:d1:9c:
                    ed:e1:75:ad:8c:52:a7:78:38:a6:c4:bf:77:43:51:
                    7e:2d:52:17:2a:79:43:ef:7d:86:23:ab:8c:75:bb:
                    3c:7e:51:b4:73:5b:b7:f8:b2:2b:d7:54:cb:ca:05:
                    3a:30:26:06:e7:7b:e7:4b:39:42:b2:4a:68:1b:bd:
                    70:52:72:ba:a5:a1:27:08:b8:99:9a:7b:cb:e1:6d:
                    dc:54:ea:d3:da:7e:39:8e:f1:c6:b1:5a:74:83:de:
                    fc:77:55:bd:e9:07:bf:8d:2d:1b:c7:1d:2e:33:5e:
                    72:76:46:be:0d:4e:42:cc:dc:03:a8:c3:04:02:3b:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:32:25:4F:14:6B:87:A8:8A:18:34:E3:31:5E:D0:7A:CB:56:CA:60
            X509v3 Authority Key Identifier:
                keyid:DC:42:50:06:AE:D5:7E:74:8A:62:15:16:5E:ED:86:49:8D:FE:36:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca889a4929892f5cd2be7cc3a7292074866d6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/25d7706e9e048f47ce85ad9b7b0200c93fa9cc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/92ca889a4929892f5cd2be7cc3a7292074866d6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.184.0/22
                IPv6:
                  2801:14:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:2e:b8:0c:ea:8b:31:4c:0f:c4:1a:c3:3e:1e:a1:c2:00:
         00:15:fd:04:85:32:d4:de:42:8f:21:d9:c0:ac:c5:8a:38:de:
         f2:d5:f0:ad:39:ef:52:f9:56:a4:19:d2:9d:2f:2d:91:96:a7:
         46:a0:97:ec:80:21:59:6e:8c:8c:76:4b:57:0a:3b:f1:1f:f5:
         33:88:2c:22:ee:02:5c:0b:57:9c:b0:0c:2d:93:03:c8:85:4d:
         25:85:d2:24:3e:70:d1:87:47:da:43:e1:40:45:95:a0:4c:06:
         1a:92:36:3f:75:98:cf:13:be:58:a0:72:63:bf:8e:70:08:59:
         bb:be:0b:f9:9e:0f:d9:0e:24:92:ba:b2:6a:10:a3:9d:e4:a4:
         13:19:ec:17:c8:f6:95:4b:1b:77:51:07:81:a3:2b:7b:70:54:
         86:60:b6:dd:36:db:12:66:bc:a7:4b:cf:56:4f:f2:db:25:a3:
         6d:f1:8d:8f:62:a8:8f:47:1e:cd:be:9b:04:52:ee:78:e3:9c:
         2b:3d:59:67:d3:af:7e:50:49:83:c2:83:27:22:5d:12:3c:b8:
         bd:23:d4:42:33:79:f4:a2:21:b5:21:0e:97:66:d6:da:7c:99:
         dd:21:25:dc:5f:21:13:10:1f:df:0d:39:52:31:41:cc:4d:89:
         4a:67:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----