Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/c0dd60d06c0882f23e0d3876b0b3b16bcb4d6fb4.roa
File:                     c0dd60d06c0882f23e0d3876b0b3b16bcb4d6fb4.roa (raw, json)
Hash identifier:          PUfw1bxvcLJQnlD+97wQ4dKGCJp0W7OZ4EApDJ6KOTc=
Subject key identifier:   D6:98:1C:2D:21:7A:BF:0D:15:DA:1D:28:4A:A9:FD:03:CB:38:7F:4C
Certificate issuer:       /CN=a431b12cbb45857ee37540244e236b5fe1793e26
Certificate serial:       259D15
Authority key identifier: 0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/c0dd60d06c0882f23e0d3876b0b3b16bcb4d6fb4.roa
Signing time:             Fri 05 Jan 2024 13:36:30 +0000
ROA not before:           Fri 05 Jan 2024 13:36:29 +0000
ROA not after:            Mon 05 Jan 2026 13:36:29 +0000
asID:                     61468
IP address blocks:        45.238.216.0/22 maxlen: 24
                          2801:1c:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465045 (0x259d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431b12cbb45857ee37540244e236b5fe1793e26
        Validity
            Not Before: Jan  5 13:36:29 2024 GMT
            Not After : Jan  5 13:36:29 2026 GMT
        Subject: CN=c0dd60d06c0882f23e0d3876b0b3b16bcb4d6fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:ae:f6:44:27:43:45:41:4c:ea:4d:5c:b6:
                    4e:75:3d:3d:44:20:6b:6f:20:a2:62:29:8f:f0:04:
                    89:bd:8a:a1:a8:f1:cd:74:fa:c5:b9:c7:5c:cd:11:
                    c8:56:55:1f:7d:5b:50:23:ac:5a:9a:a7:f2:76:df:
                    81:8c:6d:71:92:dc:54:9d:ec:17:af:31:b3:ef:90:
                    af:58:43:b2:88:2d:d7:b3:16:23:7a:dc:17:a0:88:
                    d9:da:2a:ab:b4:a8:10:74:c0:dd:0e:c4:49:ff:da:
                    84:e2:fe:7e:4d:eb:67:8f:00:4e:5b:1b:9d:e3:a3:
                    bb:75:75:bf:85:f8:f2:12:e7:c4:9d:1a:7e:fb:75:
                    98:23:61:a4:b2:90:0d:1f:f0:a3:f6:e4:20:18:f1:
                    37:c3:94:c1:95:77:bb:84:62:5a:8f:d8:26:b1:9f:
                    97:1e:8e:d8:11:a7:4d:0b:a8:11:80:5d:dd:50:1a:
                    eb:d8:e4:b3:9c:1e:0e:aa:af:a3:1f:ba:fe:b1:97:
                    01:87:9e:d8:ac:b9:91:05:5a:89:01:33:fe:5e:11:
                    91:4b:45:99:c5:b0:d5:c6:16:a0:77:81:6e:4f:e0:
                    a2:24:2e:ea:9d:58:56:8f:b3:06:ac:a2:4a:a0:21:
                    9a:be:ab:93:4d:31:3f:85:02:8b:11:4e:3b:bf:2d:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:1C:2D:21:7A:BF:0D:15:DA:1D:28:4A:A9:FD:03:CB:38:7F:4C
            X509v3 Authority Key Identifier:
                keyid:0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/c0dd60d06c0882f23e0d3876b0b3b16bcb4d6fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22
                IPv6:
                  2801:1c:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:22:56:e5:1b:d2:f9:92:e6:0c:c5:b3:48:b1:61:89:c0:
         67:58:06:ce:89:db:92:a1:08:58:ac:84:f2:2b:9f:ed:df:7c:
         fb:89:e6:e4:82:97:44:3a:99:0f:c4:50:64:01:be:40:56:0d:
         71:cc:60:16:d1:11:18:72:19:ba:a2:9e:4a:0d:e2:83:c6:95:
         6c:8b:1a:44:4a:3a:1b:7d:74:e2:58:90:36:6d:3f:b1:17:7d:
         2b:60:4d:3b:84:d6:f5:7e:ec:f9:64:6e:35:a9:b2:e1:f3:35:
         ee:2a:0c:0d:16:35:f5:f4:40:2c:58:42:f5:50:5f:47:7e:08:
         34:07:f3:79:9e:ff:a7:63:02:42:1a:68:49:33:11:20:c1:95:
         8a:40:c3:d6:c4:f4:0f:d5:32:b5:21:b9:7e:13:ed:cd:ef:28:
         64:51:b7:7e:9a:fb:56:c9:3e:78:53:fc:8a:ea:3b:b5:e9:13:
         89:34:55:66:3e:ed:63:aa:34:b5:2a:ef:3e:7e:57:86:bf:9d:
         55:2b:81:05:ba:0b:2d:f4:2a:05:1c:82:fb:a6:7b:ac:ab:13:
         9a:8b:12:bb:64:5e:3f:fd:cd:4c:df:8e:57:cf:a7:2f:f6:0e:
         5a:4a:cb:b4:59:e8:6f:0f:be:37:05:29:f1:2f:e0:29:d7:98:
         ca:4a:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----