Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/3bf42d32c4b1da8b5b981e1c1408add9ef6d1b08.roa
File:                     3bf42d32c4b1da8b5b981e1c1408add9ef6d1b08.roa (raw, json)
Hash identifier:          lW1LCAr+dCeYBpRP0oBkF8zp/eX8MRVjQLzN4f2dLE4=
Subject key identifier:   E0:4E:16:6E:10:FE:0B:85:81:52:5F:D5:94:AC:82:F9:80:A4:3C:E5
Certificate issuer:       /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial:       22C1
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/3bf42d32c4b1da8b5b981e1c1408add9ef6d1b08.roa
Signing time:             Sat 07 Oct 2023 20:19:44 +0000
ROA not before:           Fri 06 Oct 2023 20:19:44 +0000
ROA not after:            Tue 07 Oct 2025 20:19:44 +0000
asID:                     28435
IP address blocks:        45.189.148.0/22 maxlen: 22
                          2806:366::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8897 (0x22c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
        Validity
            Not Before: Oct  6 20:19:44 2023 GMT
            Not After : Oct  7 20:19:44 2025 GMT
        Subject: CN=3bf42d32c4b1da8b5b981e1c1408add9ef6d1b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:b2:44:a4:70:df:e9:f5:2c:d7:db:b9:e3:
                    6f:ac:eb:4e:53:fd:1b:87:ed:85:e9:2a:19:b2:c6:
                    ee:4e:22:b8:b0:42:06:fc:1a:00:4a:93:89:8b:5e:
                    09:c5:5c:84:ac:99:f0:0c:ff:c0:3b:88:57:4b:b3:
                    59:99:79:42:7e:f5:9d:e5:6b:51:56:da:b4:1a:09:
                    ab:04:03:c7:1d:a1:54:2a:95:54:2f:80:a9:bc:ef:
                    f3:83:3a:54:08:b7:d7:34:31:e1:33:6e:db:b0:fa:
                    a6:7e:0c:c6:32:d3:8b:27:20:43:ab:f3:8a:63:b3:
                    f1:15:98:5c:a2:34:bc:57:de:94:b5:36:25:7d:11:
                    e2:b1:21:9d:0f:91:75:4c:2a:7a:29:3c:a7:c3:60:
                    ba:0e:83:d9:6f:4b:3a:2c:dc:dc:6b:c0:42:de:f4:
                    b7:5c:63:61:9f:6d:19:95:43:39:bc:26:1f:c4:f6:
                    12:55:95:b0:95:5d:4e:45:60:d9:7a:37:fc:5e:0a:
                    39:4a:4e:b3:34:96:bf:b0:85:91:42:76:f5:bb:7d:
                    63:19:4b:12:c2:33:30:55:34:d0:db:72:7d:c0:a3:
                    2f:c2:0d:bc:ea:e8:43:92:d0:b9:6f:d6:d0:dc:cf:
                    22:9c:99:d8:63:94:62:92:49:9a:0f:72:eb:3c:ca:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:16:6E:10:FE:0B:85:81:52:5F:D5:94:AC:82:F9:80:A4:3C:E5
            X509v3 Authority Key Identifier:
                keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/3bf42d32c4b1da8b5b981e1c1408add9ef6d1b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.148.0/22
                IPv6:
                  2806:366::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:87:bd:58:25:f9:45:da:03:56:ae:5c:e1:e7:04:bc:56:98:
         18:66:40:b0:51:22:1e:a8:ad:c1:f1:91:57:d2:51:09:ad:3d:
         8b:8d:0c:6f:4e:5a:fd:50:d6:48:7b:50:93:59:78:88:2f:bd:
         89:a4:71:dd:50:99:63:10:23:c2:35:0b:0d:63:49:b2:57:c1:
         a9:d2:ec:37:3c:87:4c:fa:48:21:00:ab:f7:71:a6:00:9f:b0:
         e5:4b:68:37:1d:13:c7:df:d2:10:f3:fa:8c:9f:61:b5:a3:56:
         38:63:fe:86:ae:29:f6:e8:9c:14:1f:d9:ed:f2:d6:60:92:4d:
         f7:a9:e3:03:58:5a:13:d6:d9:38:f1:11:ec:a4:aa:4f:14:85:
         13:55:52:d4:d6:54:af:bd:14:1a:e0:ea:fa:c5:0c:64:be:9a:
         06:83:69:f0:10:d2:f3:bb:13:50:4b:32:fc:cd:af:a2:f6:df:
         94:bc:79:88:86:3e:d9:17:95:13:64:58:61:b6:8c:26:50:93:
         e6:0f:66:3b:f6:3c:59:07:bd:07:17:90:65:7d:f1:a9:58:f9:
         df:2f:b2:ad:c6:49:5a:b3:f4:22:42:80:84:6f:6c:b9:f4:2b:
         96:83:26:a9:35:eb:a2:09:d1:4a:12:7a:04:97:52:74:8e:88:
         ed:7e:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----