Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0015aaa7773480879bf7ad3f5262b3270303faff.roa
File:                     0015aaa7773480879bf7ad3f5262b3270303faff.roa (raw, json)
Hash identifier:          f9P/jM06+oIOpFvpO8cGot8v6qrXMuq5iK+MVgWFxUA=
Subject key identifier:   DC:0C:E1:FC:28:A0:5D:48:C1:F6:11:50:4F:7C:AD:53:4A:27:2F:F1
Certificate issuer:       /CN=0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7
Certificate serial:       1DF68E
Authority key identifier: 9A:38:AD:43:17:F1:E2:46:3E:04:C5:B2:FE:51:67:81:E8:79:88:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0015aaa7773480879bf7ad3f5262b3270303faff.roa
Signing time:             Fri 29 Sep 2023 08:30:02 +0000
ROA not before:           Thu 28 Sep 2023 08:30:02 +0000
ROA not after:            Sat 27 Sep 2025 08:30:02 +0000
asID:                     269795
IP address blocks:        45.184.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963662 (0x1df68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7
        Validity
            Not Before: Sep 28 08:30:02 2023 GMT
            Not After : Sep 27 08:30:02 2025 GMT
        Subject: CN=0015aaa7773480879bf7ad3f5262b3270303faff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:d3:bb:91:df:a9:54:18:6d:bb:98:4e:fd:
                    01:59:b2:64:74:ca:fc:5d:2f:b4:61:8a:bf:e2:99:
                    7d:2c:58:d7:6f:75:cd:f2:be:7f:3a:4a:15:1d:48:
                    ea:1b:1f:d2:99:40:c2:56:46:3e:54:04:30:a5:14:
                    ac:1d:52:32:f2:7f:36:d6:37:44:44:75:7f:a7:79:
                    cf:09:80:77:4f:f8:e5:f7:23:e0:76:4d:ff:97:22:
                    e3:0a:75:ce:ed:d4:26:05:87:0e:0b:c5:00:5c:82:
                    84:b4:fd:98:fd:7c:46:9c:d4:9a:8e:c9:26:e6:6d:
                    6e:3d:85:52:ab:03:c8:9f:38:87:8f:bf:a6:87:af:
                    0e:3e:ee:a7:d6:25:f5:32:87:c7:3c:13:5b:2d:08:
                    3d:a0:a3:00:82:2d:e7:b8:ac:8b:cc:0f:f1:49:52:
                    8f:39:2d:62:99:f3:06:9e:6e:08:90:8c:bf:3b:30:
                    18:ff:84:34:fa:f0:17:f9:8f:83:87:40:15:bc:74:
                    88:96:65:dc:6a:a1:63:c2:cd:95:d1:49:b9:69:70:
                    84:65:b3:b3:1d:13:a0:c3:99:4e:da:d6:1c:c6:8a:
                    e0:be:8d:75:e8:49:88:16:d0:18:59:60:fb:0f:9d:
                    7a:8f:54:1c:c9:5d:48:8d:3a:9f:32:d3:be:b5:82:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:E1:FC:28:A0:5D:48:C1:F6:11:50:4F:7C:AD:53:4A:27:2F:F1
            X509v3 Authority Key Identifier:
                keyid:9A:38:AD:43:17:F1:E2:46:3E:04:C5:B2:FE:51:67:81:E8:79:88:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0015aaa7773480879bf7ad3f5262b3270303faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:aa:ae:fc:19:d2:c2:f2:67:8a:c8:d7:62:18:de:32:6b:
         cf:01:35:71:85:00:cc:8d:7e:ea:cf:b0:c1:91:1b:11:7d:b7:
         cd:3b:9b:ef:c4:df:f5:4a:34:35:4b:d6:e3:16:66:ad:5c:73:
         eb:ac:38:00:bb:0c:ae:8b:c7:82:1f:73:e8:ff:2a:26:c1:93:
         42:45:2c:cb:8c:27:a5:1b:1a:c9:77:f2:ef:a2:c8:3d:a3:93:
         a6:fd:be:b6:0c:e5:9a:4a:9f:9f:03:fe:45:0c:df:73:c4:e0:
         c1:ef:e6:25:3a:32:0c:c9:f7:0b:56:82:ef:82:19:0a:7c:34:
         5d:06:93:da:33:fe:f2:6d:6c:4f:ae:41:15:27:8c:d5:c8:78:
         83:b8:94:f3:7a:2c:16:ef:84:0a:e0:00:19:55:fb:75:e4:7e:
         49:61:93:b3:67:af:d3:43:ac:d6:6a:85:6b:bd:0f:d7:83:d2:
         52:3e:d1:88:03:ae:92:1b:fe:62:c6:31:31:a2:a1:c8:b9:c5:
         64:f8:e7:00:fc:1f:f5:99:3f:16:6a:45:57:bb:b7:3e:06:1f:
         25:09:b7:32:36:4e:36:bd:2b:58:ce:9d:f6:0d:91:4d:29:55:
         58:aa:f9:f5:26:87:33:c0:7c:97:27:17:3e:85:69:e3:b6:89:
         a0:16:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----