Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/699c7b1ee004f7f5b2e7f10d617f509d30e3eeb6.roa
File:                     699c7b1ee004f7f5b2e7f10d617f509d30e3eeb6.roa (raw, json)
Hash identifier:          8bLVm5etfv0Narmx36BcU1TTs+p73SLDMSpLQSnBl08=
Subject key identifier:   2C:4A:A5:49:37:19:53:7F:2A:85:B4:70:2C:ED:E3:08:C0:E9:B6:A5
Certificate issuer:       /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial:       263588
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/699c7b1ee004f7f5b2e7f10d617f509d30e3eeb6.roa
Signing time:             Thu 18 Jan 2024 17:08:35 +0000
ROA not before:           Thu 18 Jan 2024 17:08:34 +0000
ROA not after:            Sun 18 Jan 2026 17:08:34 +0000
asID:                     265858
IP address blocks:        45.225.204.0/22 maxlen: 24
                          2803:7a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504072 (0x263588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9288132902323827f44806de3061debd517a8fd9
        Validity
            Not Before: Jan 18 17:08:34 2024 GMT
            Not After : Jan 18 17:08:34 2026 GMT
        Subject: CN=699c7b1ee004f7f5b2e7f10d617f509d30e3eeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:bf:ef:7c:f9:82:71:84:64:54:39:5e:7b:
                    23:fd:92:19:e6:ed:93:63:62:c8:a7:a0:a9:0b:78:
                    bc:71:7e:16:21:b0:f1:fc:f1:76:56:e1:11:7f:c8:
                    ed:bb:52:68:5f:04:c0:d0:3a:00:a3:60:66:75:37:
                    a8:cf:48:49:af:14:57:45:8a:9d:49:7e:5e:7e:65:
                    a9:aa:94:25:14:27:56:74:1c:ae:5b:89:f8:2d:64:
                    3c:0c:63:e8:fd:ad:24:3d:86:4f:76:46:9a:af:f4:
                    6b:3f:8a:17:20:59:62:6c:50:bb:70:12:40:6d:9e:
                    3d:8f:ec:0f:f0:09:a0:71:51:17:f8:1f:dc:ef:0f:
                    dd:db:9b:45:2e:d1:81:87:e5:33:89:1c:10:a3:c7:
                    d3:9e:5d:a3:3f:0e:94:ca:17:48:20:42:1f:6c:64:
                    43:ff:35:7b:ca:d1:35:1f:85:a5:1a:68:1b:3b:58:
                    24:da:7a:26:14:8c:1f:ca:c0:b2:3a:b1:65:e7:a4:
                    79:b5:9f:f7:49:1d:55:38:a6:08:aa:3e:29:59:7f:
                    b2:bf:06:1f:b9:b1:e8:4e:0f:51:bb:df:1d:97:c0:
                    aa:5b:63:e1:a9:bb:0e:77:93:28:0f:c7:18:7e:fb:
                    eb:a4:e1:27:2b:8b:4e:65:0d:8c:58:9b:ec:dd:c0:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:A5:49:37:19:53:7F:2A:85:B4:70:2C:ED:E3:08:C0:E9:B6:A5
            X509v3 Authority Key Identifier:
                keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/699c7b1ee004f7f5b2e7f10d617f509d30e3eeb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.204.0/22
                IPv6:
                  2803:7a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:14:71:fc:27:f7:33:cd:9a:13:92:ca:6b:a3:bb:75:f9:89:
         8a:5d:6a:5e:ea:82:b7:bf:20:03:c8:ec:b0:ed:4f:e7:83:8e:
         2e:be:d6:cc:5b:96:43:da:15:4c:5f:83:d7:68:f4:09:92:99:
         93:9c:ec:1b:ff:b8:04:32:bc:f8:3f:3f:c0:a1:76:89:b6:a0:
         0e:3d:a8:22:6b:d8:f2:13:ab:d6:45:93:37:1f:bb:9e:ee:fb:
         69:0f:ea:4a:fd:ea:e6:8b:36:b9:65:61:c5:5f:2f:fa:1c:51:
         c0:06:a7:c4:a8:5f:22:b4:a2:95:4f:89:f3:06:a8:6f:0f:ba:
         fa:2c:e8:bf:d6:30:dd:0d:34:bc:ab:5f:f0:58:0d:e6:b2:21:
         bd:4c:3a:99:a3:cd:24:52:f2:02:39:1a:6d:76:46:90:d5:77:
         b1:58:27:35:9d:28:b1:23:53:e6:64:0e:13:aa:d6:42:ba:fc:
         eb:1b:38:f7:07:4a:8d:82:0c:c0:aa:9d:f2:60:5c:b9:41:b5:
         58:9a:53:6f:f9:30:ce:ba:7e:2c:fa:b3:2a:8a:b9:59:65:1c:
         64:78:20:82:f7:4c:71:41:eb:8b:64:69:75:8c:d0:56:41:8a:
         ec:d1:29:1d:81:ee:16:a5:8b:dc:76:6f:cc:1d:8a:fa:d8:f7:
         dc:21:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----