Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa
File:                     5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa (raw, json)
Hash identifier:          3QVloktvO523LTofN40WHxvqDOhYpGuUoR/vP3bGsr8=
Subject key identifier:   70:9C:22:40:94:CF:F9:D2:D8:EC:6D:38:48:D6:E0:E0:42:EF:5E:F9
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       18302A
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa
Signing time:             Mon 08 May 2023 15:39:19 +0000
ROA not before:           Sun 07 May 2023 15:39:18 +0000
ROA not after:            Thu 08 May 2025 15:39:18 +0000
asID:                     267919
IP address blocks:        45.179.200.0/23 maxlen: 24
                          45.179.203.0/24 maxlen: 24
                          2803:ee60:10::/44 maxlen: 44
                          2803:ee60:20::/43 maxlen: 44
                          2803:ee60:40::/43 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585194 (0x18302a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: May  7 15:39:18 2023 GMT
            Not After : May  8 15:39:18 2025 GMT
        Subject: CN=5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:61:1b:dd:0f:83:b5:b7:38:7c:21:76:bd:f4:
                    09:d0:6a:43:66:42:98:d0:3c:8a:c5:66:29:be:07:
                    6b:d8:9e:62:42:a8:27:fb:d8:8a:c3:d9:e5:e0:42:
                    87:3b:ac:c9:a5:6b:26:c2:64:bd:aa:40:1d:a4:aa:
                    63:38:36:a8:05:4e:15:b8:ba:98:0c:94:63:af:bb:
                    32:e6:67:94:d4:5f:05:cc:a5:62:78:27:43:b0:81:
                    f9:d5:1d:51:67:92:3d:b4:09:5b:95:01:c5:62:3d:
                    0c:e3:ee:75:f2:fd:29:a7:9f:6a:33:74:f1:dc:91:
                    b8:72:ba:6d:4f:4e:ac:37:a3:95:72:39:fa:d6:22:
                    44:cc:50:8d:2b:6d:62:ac:d6:e2:71:ab:7b:7e:0b:
                    71:43:d6:a0:bf:79:5c:8e:2a:62:f8:4c:71:33:25:
                    8c:bc:58:48:8e:b4:8f:c4:89:fa:3e:6e:0b:1a:5b:
                    6a:da:11:c3:2e:89:32:47:3c:50:ae:28:77:d6:36:
                    b0:8b:e3:7d:33:10:bc:ea:f9:df:6d:55:d4:b2:c4:
                    ed:53:9e:9d:da:2b:5d:38:4d:f6:9d:6a:98:d3:3a:
                    3c:51:c8:aa:aa:00:bb:6f:80:8e:df:85:ce:fa:ea:
                    62:71:ba:a3:f8:23:31:0f:df:25:fa:25:ca:b7:a0:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:22:40:94:CF:F9:D2:D8:EC:6D:38:48:D6:E0:E0:42:EF:5E:F9
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/5671f9f8bcc0099a52b317456c64fc0fe4a2e5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.200.0/23
                  45.179.203.0/24
                IPv6:
                  2803:ee60:10::-2803:ee60:5f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:95:bb:e5:53:08:9e:b0:08:5e:ec:39:a3:bc:7b:e5:c4:14:
         e2:45:bc:3d:e5:9d:cd:77:9a:84:21:a9:6d:47:c3:b3:32:44:
         02:73:50:7a:6a:82:07:65:43:92:f6:79:e3:8f:99:7a:af:aa:
         50:11:ee:95:f4:9d:5e:85:e7:56:84:35:06:65:1b:cf:c3:9a:
         8c:aa:03:51:3a:a1:57:c8:98:a8:01:b1:05:43:f4:17:e5:65:
         2c:8b:a8:9e:74:86:5a:9a:27:ce:52:0b:9b:ce:55:a5:1d:bb:
         1f:ce:c0:09:fa:75:84:ef:23:66:f6:1d:00:e7:70:20:0d:ee:
         fd:91:cf:87:ef:57:69:00:63:73:b3:f3:91:21:93:15:a3:62:
         54:21:ae:35:eb:a0:16:fe:e1:09:c7:c5:1e:f3:17:7a:03:cf:
         89:3a:52:1a:ea:47:57:5f:b3:9e:bd:7c:15:d2:7b:3a:2d:1a:
         ca:d5:65:37:49:86:1b:97:fc:92:86:7e:0b:96:7f:7a:cc:e7:
         66:b3:98:5d:ca:97:5d:81:fa:28:ba:d9:a7:23:90:8b:d4:d7:
         04:e2:01:70:64:7f:5c:75:bc:4f:4f:0b:e1:8d:20:d3:24:a3:
         cd:5e:29:ba:ca:97:ed:38:3d:0c:84:de:a0:53:ef:b9:3f:38:
         ae:43:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----