Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/fda803935bbf19ac60269f78b6bd9c7195b7f9af.roa
File:                     fda803935bbf19ac60269f78b6bd9c7195b7f9af.roa (raw, json)
Hash identifier:          m9/nOkGqMfGdFt8PSRTSGPmQ27zABJtcTCZJ44yUoCg=
Subject key identifier:   6F:FA:F9:59:7B:BE:B8:64:49:60:53:09:83:68:30:01:AC:B6:81:09
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       254862
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/fda803935bbf19ac60269f78b6bd9c7195b7f9af.roa
Signing time:             Wed 27 Mar 2024 08:30:05 +0000
ROA not before:           Wed 27 Mar 2024 08:30:05 +0000
ROA not after:            Fri 27 Mar 2026 08:30:05 +0000
asID:                     52409
IP address blocks:        45.191.84.0/22 maxlen: 24
                          2803:ece0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2443362 (0x254862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Mar 27 08:30:05 2024 GMT
            Not After : Mar 27 08:30:05 2026 GMT
        Subject: CN=fda803935bbf19ac60269f78b6bd9c7195b7f9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:9e:b6:e6:81:9c:f7:23:94:06:7c:18:be:
                    48:ff:c0:ce:75:ef:b5:5c:d0:bc:0e:54:cc:c4:ed:
                    13:d5:f9:06:31:93:cc:30:59:2e:c7:4e:17:b1:c4:
                    b1:1c:5f:23:71:de:f9:2a:e0:6b:a6:61:58:e0:e3:
                    02:67:8a:45:4f:02:a2:10:48:18:00:75:0a:7f:fa:
                    32:78:47:ff:1f:40:32:82:08:e2:e0:f4:29:a8:96:
                    c5:d7:1b:17:90:e2:b6:88:69:eb:e4:08:e2:2b:7f:
                    8a:25:ca:2e:dc:55:fe:ba:07:7e:2a:66:ff:b4:ea:
                    98:a6:5e:38:51:85:f9:f1:17:7e:f4:9a:4a:b8:6c:
                    a4:ad:cb:ee:5a:18:25:4d:73:9c:48:52:1a:b8:2d:
                    07:71:8b:3d:3b:fd:27:d3:30:21:31:63:14:3c:8a:
                    d0:01:d4:f0:90:92:64:ba:6f:37:18:a1:df:ec:2d:
                    ec:88:5f:21:f1:a3:a3:c4:9b:5b:14:9e:b5:7c:9c:
                    62:4d:e3:3b:2a:09:25:9f:f4:56:df:96:97:b5:5e:
                    d0:42:4f:8a:ba:93:e7:c9:e4:24:63:e5:b9:5d:8b:
                    2f:80:9e:aa:13:96:4d:70:87:89:9a:14:0a:c9:86:
                    42:7a:21:b9:1d:6b:be:d9:0e:59:cf:cc:be:68:a3:
                    c4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FA:F9:59:7B:BE:B8:64:49:60:53:09:83:68:30:01:AC:B6:81:09
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/fda803935bbf19ac60269f78b6bd9c7195b7f9af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:7e:56:84:c4:74:84:bc:ae:88:4c:ff:21:d5:37:14:78:
         4e:5f:a0:e0:67:fa:6b:b1:56:97:1e:b2:a4:0f:9c:fe:b3:10:
         c5:6f:34:45:8e:86:82:10:85:b8:72:d9:c5:29:1d:6a:57:18:
         e8:f8:9b:35:e9:b2:db:48:b2:8a:16:bd:c6:b7:df:38:e0:48:
         6a:aa:3c:80:27:98:52:04:b0:1d:d2:39:f2:0e:13:73:5c:94:
         49:ad:ca:49:58:c5:c6:36:38:cd:18:b4:e9:19:16:d0:7a:b0:
         ce:b6:e3:66:aa:ed:21:00:29:e8:ba:53:80:24:5e:63:52:3a:
         44:85:43:e8:e8:0b:3e:b5:10:d6:fe:b6:95:b5:37:60:da:a9:
         61:09:f2:16:b7:55:b6:93:1f:e5:11:fe:5a:66:9e:93:5c:72:
         81:48:ae:95:0f:85:dd:7f:8e:b1:79:60:64:4c:d0:7b:38:6e:
         73:d2:b7:91:ea:1a:5e:b4:5f:5f:04:fd:c9:0d:81:89:ba:44:
         f2:08:69:d2:f5:cd:a2:71:b7:c1:2a:6e:68:56:12:10:41:eb:
         43:c8:db:be:df:cb:a1:61:ef:e8:9d:6c:16:20:17:70:57:84:
         12:07:0e:a6:a8:c7:20:2b:d0:92:ef:9d:d8:9c:a9:1a:db:c7:
         6c:cb:1b:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJUhiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
M2QwNzFiNDZkNjg4MjlhOTM4ODc3MGM0NTU5MmEzZmYzMDllNGQwHhcNMjQwMzI3
MDgzMDA1WhcNMjYwMzI3MDgzMDA1WjAzMTEwLwYDVQQDEyhmZGE4MDM5MzViYmYx
OWFjNjAyNjlmNzhiNmJkOWM3MTk1YjdmOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmjeetuaBnPcjlAZ8GL5I/8DOde+1XNC8DlTMxO0T1fkGMZPM
MFkux04XscSxHF8jcd75KuBrpmFY4OMCZ4pFTwKiEEgYAHUKf/oyeEf/H0Ayggji
4PQpqJbF1xsXkOK2iGnr5AjiK3+KJcou3FX+ugd+Kmb/tOqYpl44UYX58Rd+9JpK
uGykrcvuWhglTXOcSFIauC0HcYs9O/0n0zAhMWMUPIrQAdTwkJJkum83GKHf7C3s
iF8h8aOjxJtbFJ61fJxiTeM7Kgkln/RW35aXtV7QQk+KupPnyeQkY+W5XYsvgJ6q
E5ZNcIeJmhQKyYZCeiG5HWu+2Q5Zz8y+aKPEuQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFG/6+Vl7vrhkSWBTCYNoMAGstoEJMB8GA1UdIwQYMBaAFFMGfRswbItLnJQH
+mkG2HSPpt+GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjEzZDA3
MWI0NmQ2ODgyOWE5Mzg4NzcwYzQ1NTkyYTNmZjMwOWU0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDRkMGIxZTMtYjNmYi00MjYzLTgyNDgtYTA3ZTY3
ZTlmNzkzL2ZkYTgwMzkzNWJiZjE5YWM2MDI2OWY3OGI2YmQ5YzcxOTViN2Y5YWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNGQwYjFlMy1iM2ZiLTQyNjMtODI0OC1hMDdl
NjdlOWY3OTMvYjEzZDA3MWI0NmQ2ODgyOWE5Mzg4NzcwYzQ1NTkyYTNmZjMwOWU0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi2/VDANBAIAAjAHAwUAKAPs4DANBgkqhkiG9w0BAQsFAAOC
AQEAMyx+VoTEdIS8rohM/yHVNxR4Tl+g4Gf6a7FWlx6ypA+c/rMQxW80RY6GghCF
uHLZxSkdalcY6PibNemy20iyiha9xrffOOBIaqo8gCeYUgSwHdI58g4Tc1yUSa3K
SVjFxjY4zRi06RkW0HqwzrbjZqrtIQAp6LpTgCReY1I6RIVD6OgLPrUQ1v62lbU3
YNqpYQnyFrdVtpMf5RH+Wmaek1xygUiulQ+F3X+OsXlgZEzQezhuc9K3keoaXrRf
XwT9yQ2BibpE8ghp0vXNonG3wSpuaFYSEEHrQ8jbvt/LoWHv6J1sFiAXcFeEEgcO
pqjHICvQku+d2JypGtvHbMsbKQ==
-----END CERTIFICATE-----