Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/578215b0d15d55e243a729271562af475fdb07f9.roa
File:                     578215b0d15d55e243a729271562af475fdb07f9.roa (raw, json)
Hash identifier:          zdiLSSxwrRnlxZUFDw6ufDF+mL4BPMflKprTRliW7cw=
Subject key identifier:   04:7D:B4:48:59:43:C4:E4:C7:F6:21:CC:A7:06:A4:3C:5B:8D:88:4E
Certificate issuer:       /CN=addc265893644938b54a21e410f7b22c5aeab890
Certificate serial:       0496
Authority key identifier: 06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/578215b0d15d55e243a729271562af475fdb07f9.roa
Signing time:             Mon 18 Jul 2022 12:32:55 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     266884
IP address blocks:        45.160.200.0/22 maxlen: 24
                          2803:6a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addc265893644938b54a21e410f7b22c5aeab890
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=578215b0d15d55e243a729271562af475fdb07f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:20:27:78:2d:ff:b3:6b:2e:10:e8:84:b6:
                    0b:08:93:af:0a:d9:a9:6d:d7:1f:4c:53:0d:d6:0e:
                    4e:5c:48:55:55:6d:6e:21:5e:34:81:d7:91:c3:79:
                    be:85:57:de:ba:86:3b:48:9b:e3:88:1d:53:5f:ef:
                    44:51:49:a7:0c:82:7d:e6:a8:8c:c1:8e:b5:61:b1:
                    76:e3:19:ba:b0:e8:b8:3b:85:21:e7:54:60:d3:6e:
                    de:7c:bd:3c:be:91:78:1a:1a:78:9f:ab:ef:d5:fb:
                    0a:2d:4b:07:8a:24:5b:ba:72:a4:62:f4:c6:e8:85:
                    e1:30:16:08:da:d7:c4:80:67:ee:3c:9a:a2:4b:67:
                    e3:ae:ea:59:9e:ca:cb:db:a6:e8:e5:92:10:21:89:
                    e5:ef:71:4a:aa:b2:d5:d1:da:c9:48:e2:07:9c:ca:
                    8c:5b:15:58:97:6b:40:4a:be:cf:c0:c5:28:66:c6:
                    8e:4c:71:4f:16:5d:7f:d3:15:7a:d3:c7:3d:95:31:
                    eb:4c:ca:13:24:47:95:d7:b4:64:0e:b7:83:8f:74:
                    7c:86:56:0f:4e:c5:80:25:6a:36:4b:2d:69:5f:10:
                    fe:a5:f7:3e:4a:66:c9:11:4a:8f:7c:a8:ed:3b:cd:
                    54:9f:64:1a:91:98:25:94:a4:df:2e:85:3c:62:b2:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:B4:48:59:43:C4:E4:C7:F6:21:CC:A7:06:A4:3C:5B:8D:88:4E
            X509v3 Authority Key Identifier:
                keyid:06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/578215b0d15d55e243a729271562af475fdb07f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/addc265893644938b54a21e410f7b22c5aeab890.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.200.0/22
                IPv6:
                  2803:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:04:aa:49:2b:7e:c3:3e:13:ba:98:52:b9:f1:b0:bd:ee:64:
         07:9e:37:bc:1d:6e:25:87:9f:20:c2:00:0a:41:e2:a7:94:d0:
         0f:5a:b9:f5:8d:c5:14:17:be:8c:90:32:02:10:8e:10:29:5e:
         e7:cf:77:42:02:4d:6f:7a:d2:56:a5:ab:7a:12:9f:bb:60:b7:
         68:6a:f6:b2:f4:4d:f6:20:e7:35:9c:0d:ea:c5:92:bb:69:77:
         a2:9e:6e:18:4e:00:73:5a:e5:15:18:0d:22:3c:17:d6:b2:8e:
         b2:78:44:0e:cc:e4:cc:b6:d7:ee:fc:49:9b:2d:db:a8:98:6e:
         99:a7:7e:17:39:b6:10:7c:e4:88:8b:e9:31:af:08:47:ea:08:
         d3:3e:da:14:e3:fb:cf:b8:84:38:90:b8:f8:d6:8a:ec:4f:d1:
         b5:e0:e5:01:2e:f1:cc:a0:a3:35:d9:d5:43:74:11:c5:a5:3b:
         8d:a4:f8:18:13:37:0a:d7:62:f6:b5:04:99:0e:76:29:ec:58:
         f9:6d:a0:b9:c7:98:02:63:ac:a8:23:32:7d:da:df:36:10:80:
         56:a4:51:7a:68:45:c1:2b:e5:0f:9d:6c:61:7e:27:d8:3f:d2:
         1d:44:9e:68:94:64:50:de:71:0a:e4:d1:ff:1b:16:1d:f9:b4:
         09:8c:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----