Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/13bda160c4af65431ff55cc337445ee1482afff4.roa
File:                     13bda160c4af65431ff55cc337445ee1482afff4.roa (raw, json)
Hash identifier:          CXx5z8ojffSvvZuXcGFa2JoIHThCzR49NP6kqZmfuek=
Subject key identifier:   18:CE:C8:AF:EB:4C:BD:F2:EB:E1:D4:40:CF:5E:13:3F:B1:9D:1A:AC
Certificate issuer:       /CN=8b9cb5e6af42fe0b3952f04c0400038291a3632e
Certificate serial:       0C8B49
Authority key identifier: C1:F4:33:D9:5C:DC:0F:2B:48:89:D1:F8:A5:85:87:F5:C3:FC:1B:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9cb5e6af42fe0b3952f04c0400038291a3632e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/13bda160c4af65431ff55cc337445ee1482afff4.roa
Signing time:             Wed 24 Mar 2021 14:36:31 +0000
ROA not before:           Wed 24 Mar 2021 14:36:31 +0000
ROA not after:            Tue 24 Mar 2026 14:36:31 +0000
asID:                     266848
IP address blocks:        45.238.196.0/22 maxlen: 22
                          2801:12:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822089 (0xc8b49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9cb5e6af42fe0b3952f04c0400038291a3632e
        Validity
            Not Before: Mar 24 14:36:31 2021 GMT
            Not After : Mar 24 14:36:31 2026 GMT
        Subject: CN=13bda160c4af65431ff55cc337445ee1482afff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:79:13:2e:45:8d:d9:2e:a1:83:e0:77:db:
                    ed:f2:42:74:00:d4:23:4a:21:fe:5a:49:22:0f:b5:
                    8c:e6:37:3e:9a:e7:ca:27:37:03:c6:4e:78:62:77:
                    16:5d:f2:bd:2f:46:a6:55:d5:d0:39:bf:5e:6d:20:
                    18:26:ec:c8:d9:5d:6e:01:f9:26:9c:9b:3a:97:c3:
                    a5:fb:79:b3:a3:40:72:52:e1:ed:3f:c3:38:9d:4a:
                    4d:04:12:bb:8a:99:5b:e5:60:87:b7:aa:6a:5f:0d:
                    a8:f3:19:d0:bc:09:7e:2a:a1:dc:8c:87:24:c3:95:
                    6e:42:c5:1b:06:29:f0:49:ba:0b:1b:38:2a:ee:96:
                    c7:b0:c2:87:45:52:a1:75:09:35:92:df:58:f4:f7:
                    21:21:8e:b1:87:c7:5c:f9:4a:e6:ca:ad:e2:3d:81:
                    4a:1f:3b:a1:d2:03:ab:5a:ea:5c:87:9d:f1:f7:07:
                    34:8c:eb:f0:4d:9f:20:8f:7a:a4:c2:14:a7:cb:61:
                    fe:40:d5:57:9a:1e:ae:37:47:fd:55:d2:9e:a6:0f:
                    1d:79:41:ae:88:fd:e8:dd:94:41:d3:59:8f:95:d2:
                    d0:44:8e:48:d6:e8:08:01:ca:d1:1f:35:d0:14:42:
                    c9:70:3b:d1:d9:a3:d2:9b:d1:72:83:2a:06:bb:3a:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CE:C8:AF:EB:4C:BD:F2:EB:E1:D4:40:CF:5E:13:3F:B1:9D:1A:AC
            X509v3 Authority Key Identifier:
                keyid:C1:F4:33:D9:5C:DC:0F:2B:48:89:D1:F8:A5:85:87:F5:C3:FC:1B:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9cb5e6af42fe0b3952f04c0400038291a3632e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/13bda160c4af65431ff55cc337445ee1482afff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eaaa58d8-7447-4323-9c46-50e614c0e8c5/8b9cb5e6af42fe0b3952f04c0400038291a3632e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.196.0/22
                IPv6:
                  2801:12:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:3e:20:97:b5:aa:3a:ae:10:9d:77:35:6b:ac:3c:0e:6d:
         f3:d3:ef:19:3f:2d:68:8f:bf:0f:f9:79:fc:89:67:40:35:39:
         fc:fb:fc:99:c4:48:5d:85:ca:29:f0:bb:f0:8f:e1:55:0d:0b:
         d5:ce:e0:e8:44:f8:7e:07:99:38:d2:3b:df:83:d1:51:3b:73:
         cf:63:fe:d6:7c:eb:7c:c4:a6:33:27:e7:fd:08:99:b8:92:1e:
         a9:f0:f5:2c:84:f3:23:13:7d:de:14:32:79:0a:f1:9a:0f:e3:
         47:aa:45:76:1e:4d:28:70:45:b8:e5:8d:d0:ee:bb:cb:8a:05:
         8f:8e:36:50:0e:1a:8b:09:5e:8f:36:ae:46:74:6a:a6:2f:ed:
         9b:e5:e8:5e:31:39:94:87:00:44:14:3e:c1:4a:39:94:fb:08:
         c7:ab:5b:41:3b:f9:2d:81:fc:ef:80:3b:91:bf:d4:7a:47:7d:
         d6:9c:79:07:6d:16:a7:64:15:58:3b:4d:a7:4c:29:aa:f2:1b:
         e5:13:66:19:3d:14:67:3b:21:29:af:b3:1a:bb:f8:f5:12:87:
         fe:76:10:98:96:5b:31:0f:b2:1f:ee:65:19:a3:3b:11:3f:6c:
         06:03:29:6f:7a:09:f9:b1:59:7f:7a:99:8f:a1:a3:dc:ef:86:
         1f:1c:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----