Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/35a97266d7ee8157f9e8701b280c95e7f445fe64.roa
File:                     35a97266d7ee8157f9e8701b280c95e7f445fe64.roa (raw, json)
Hash identifier:          /kRc3bqbSGbTxE7BUjrOb89BtDBDVzbzbFTGJWjarhU=
Subject key identifier:   E5:70:EE:A2:AD:F9:75:65:AC:18:AB:A5:09:3C:A6:DF:E7:8D:BE:8B
Certificate issuer:       /CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
Certificate serial:       098F6B
Authority key identifier: 12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/35a97266d7ee8157f9e8701b280c95e7f445fe64.roa
Signing time:             Wed 24 Mar 2021 14:32:01 +0000
ROA not before:           Wed 24 Mar 2021 14:32:01 +0000
ROA not after:            Tue 24 Mar 2026 14:32:01 +0000
asID:                     263793
IP address blocks:        45.189.216.0/22 maxlen: 24
                          2803:82e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626539 (0x98f6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
        Validity
            Not Before: Mar 24 14:32:01 2021 GMT
            Not After : Mar 24 14:32:01 2026 GMT
        Subject: CN=35a97266d7ee8157f9e8701b280c95e7f445fe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:f7:27:e8:1d:8d:35:03:a6:56:57:e9:29:
                    d9:83:1a:15:cb:9f:26:19:1a:ce:50:2c:86:05:fc:
                    d9:47:f0:b9:71:45:5f:c5:9c:57:c4:de:74:5c:78:
                    fa:62:d5:7a:99:3d:bd:aa:e9:5b:58:9e:ea:36:fc:
                    e3:ff:65:b8:e4:c3:ee:c0:e8:3d:ae:03:56:35:6c:
                    e9:d4:ef:be:d4:c9:fc:d8:20:d3:df:05:24:f6:3a:
                    f7:07:6c:ac:02:23:9d:58:a6:62:5e:6c:4c:1b:7c:
                    76:76:c7:4b:c8:fe:6c:a7:05:ec:b4:4b:e6:eb:07:
                    9a:f2:59:2c:8f:64:d4:c1:61:5f:40:d8:47:90:38:
                    49:51:49:4a:2a:9e:e8:a2:b4:e5:22:da:ea:f2:0c:
                    2e:40:69:e2:b0:6a:03:82:52:1a:bc:88:9c:3c:85:
                    15:23:a1:db:5c:47:d1:c9:27:25:15:c7:c0:74:a5:
                    df:de:f3:e9:90:9f:c3:1e:1c:a0:fb:58:bb:ad:1d:
                    42:19:1c:32:23:5f:a8:81:4f:62:d0:e8:ff:b4:33:
                    f7:8d:a6:cd:56:08:81:31:53:35:5b:e1:16:c9:a3:
                    f3:9c:e0:ce:29:c2:90:15:4d:26:c9:a1:6f:22:57:
                    ff:6c:e1:f5:c6:24:e5:53:b0:d1:bc:7d:d4:55:e2:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:EE:A2:AD:F9:75:65:AC:18:AB:A5:09:3C:A6:DF:E7:8D:BE:8B
            X509v3 Authority Key Identifier:
                keyid:12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/35a97266d7ee8157f9e8701b280c95e7f445fe64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.216.0/22
                IPv6:
                  2803:82e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:41:44:c3:72:45:7a:a8:40:b5:ab:c8:ef:df:38:74:35:44:
         fe:df:ef:32:a5:40:45:2b:c1:eb:11:7d:67:5d:f0:36:2c:f9:
         30:91:f4:52:5b:89:08:b3:fd:84:55:69:ca:35:cb:1f:c3:62:
         ae:87:b4:9a:1d:2c:a0:8b:77:2b:14:42:9c:8e:1c:57:3a:43:
         ae:9d:3a:f0:0c:e7:a5:df:fd:cd:f8:a6:d2:ae:f0:01:6a:1f:
         fd:d1:4c:c5:73:5c:25:51:60:e0:03:25:fb:89:3f:5f:43:63:
         11:d3:65:02:d8:00:fd:f3:20:41:bf:62:f0:e2:80:ed:37:52:
         d2:67:99:ba:5e:bc:b0:07:48:31:fb:1e:e0:0c:1c:fb:c0:e8:
         24:a9:bb:a1:be:e1:62:96:c6:2c:c1:f0:c3:90:52:c0:e2:42:
         95:ef:b8:ef:22:35:01:6f:b6:40:55:55:d3:33:62:82:5a:ed:
         e5:01:3d:7e:34:57:9b:57:9f:8f:36:08:da:5c:8b:9f:f0:bb:
         8a:3d:d7:bc:72:c3:11:36:ee:e6:ef:5c:ed:11:93:f8:33:16:
         37:c2:c0:e5:c4:db:26:e0:b6:5c:e9:ec:35:8d:eb:c4:5d:e0:
         6d:33:ed:2c:17:e4:f5:ea:88:68:d5:86:fa:1e:e0:68:01:65:
         30:51:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----