Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/db919af8e6c2b5ca5a356c55977cd90c2482f7ae.roa
File:                     db919af8e6c2b5ca5a356c55977cd90c2482f7ae.roa (raw, json)
Hash identifier:          lyeAhA2D/gb+TpCXN8uKNbRM3LGoG3zjP/hG7cbKSiI=
Subject key identifier:   D3:EF:BA:61:1B:60:9A:E1:84:B6:CB:BA:9E:9B:5A:9C:A3:32:22:83
Certificate issuer:       /CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
Certificate serial:       1550AB
Authority key identifier: 28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/db919af8e6c2b5ca5a356c55977cd90c2482f7ae.roa
Signing time:             Sat 04 Jun 2022 21:17:10 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269852
IP address blocks:        45.188.228.0/22 maxlen: 24
                          2803:e0e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396907 (0x1550ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=db919af8e6c2b5ca5a356c55977cd90c2482f7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:3b:f4:7c:2f:7b:e2:73:49:b3:48:17:97:
                    56:ff:69:4a:d2:49:ce:c0:5a:32:8b:b3:ce:26:1e:
                    52:fb:6b:b4:04:81:b2:bb:3a:72:31:07:83:f8:c5:
                    c8:3c:3d:8b:3a:47:79:7e:13:52:54:16:2e:7b:a5:
                    5e:f8:13:32:6f:3d:ec:48:f6:26:2f:3b:7e:30:7b:
                    25:79:a4:6d:13:24:55:57:07:b3:ec:7f:c8:b8:7b:
                    8b:d7:a2:c9:19:91:99:a8:b7:60:af:43:12:5b:c5:
                    4e:b8:74:e1:05:67:72:82:c6:ec:29:e7:18:30:96:
                    9c:89:8b:be:d5:ea:5d:de:fd:8c:8f:c1:dc:42:df:
                    cb:65:44:d9:65:67:28:41:37:2b:d8:fc:7f:bf:0b:
                    bc:bb:e5:02:9b:12:a5:6a:72:3c:34:0e:e6:bd:05:
                    22:44:da:88:3f:f4:c3:69:07:be:9e:06:38:05:18:
                    59:3b:35:2e:f0:31:11:76:2c:09:12:4a:02:71:ab:
                    09:18:74:29:60:64:fe:50:73:4d:ae:7a:cf:85:4c:
                    d9:09:95:1f:2e:ac:18:91:bb:89:34:05:6f:0e:a2:
                    43:bf:3d:1d:63:d5:a7:9d:68:3f:32:12:3f:ff:de:
                    08:82:bb:8d:cf:9f:e4:c4:9a:a9:80:0f:c0:28:91:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:BA:61:1B:60:9A:E1:84:B6:CB:BA:9E:9B:5A:9C:A3:32:22:83
            X509v3 Authority Key Identifier:
                keyid:28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/db919af8e6c2b5ca5a356c55977cd90c2482f7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/8a612a5048f3992505dee3fd707ff02cc9aa4192.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.228.0/22
                IPv6:
                  2803:e0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:b9:cc:82:fb:d3:07:cf:d9:b8:c6:3f:b3:d9:c5:bf:22:
         9d:f8:0a:f9:a2:d2:20:cc:bb:d9:66:09:b1:ed:bc:8d:f1:1b:
         1b:10:ab:c9:ef:3c:a5:eb:f5:05:c6:b7:db:40:d8:f1:a8:8e:
         92:d9:cb:3f:f9:d1:17:61:51:a7:9f:fa:cf:95:ac:32:cb:6f:
         d1:eb:ea:4b:bf:b8:24:c3:59:92:4d:e4:76:4a:e5:97:50:10:
         17:91:4b:f5:08:62:e3:8c:fb:6d:96:e1:47:58:15:7a:81:bd:
         d1:70:1f:11:3a:b0:ec:58:dc:93:b7:65:e5:e7:e2:82:dc:cb:
         fa:b8:ac:c6:df:7b:ee:08:79:52:6c:5b:ea:96:75:ce:d8:93:
         9a:2b:18:91:98:7f:f4:32:e5:a7:fe:97:7d:77:7e:fc:4f:dc:
         c4:fb:93:ab:cf:28:51:25:82:4f:59:c9:f1:fe:d2:9c:fe:d3:
         40:bd:9e:05:5c:06:00:20:5e:d8:71:95:2a:6e:51:f8:b4:df:
         8d:66:89:88:b9:84:12:a4:31:c1:33:a2:07:2e:cd:a3:4b:7e:
         44:c0:02:c4:8b:f0:04:a1:4d:c5:92:90:71:95:6a:a7:fc:b1:
         60:75:42:5e:f1:65:c9:02:17:38:93:28:33:b2:07:82:fb:36:
         ab:b8:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----