Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/c43f89333671d7c10cca2ff91f4833a2350032ae.roa
File:                     c43f89333671d7c10cca2ff91f4833a2350032ae.roa (raw, json)
Hash identifier:          +gnE+vJg1Istcc5uM/z1W7fl8fmfddfKOzX35L88jTg=
Subject key identifier:   69:6A:C2:E1:CB:65:6C:EA:BD:CD:11:9A:C8:97:DE:59:7E:35:81:9E
Certificate issuer:       /CN=debeb6294e93216759f5a631a2f8b9604e220b81
Certificate serial:       1F2AA5
Authority key identifier: 89:3B:59:E1:36:E8:7C:79:32:B5:E8:07:B1:F4:31:71:98:72:08:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/debeb6294e93216759f5a631a2f8b9604e220b81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/c43f89333671d7c10cca2ff91f4833a2350032ae.roa
Signing time:             Wed 05 Apr 2023 16:43:24 +0000
ROA not before:           Tue 23 Mar 2021 14:32:48 +0000
ROA not after:            Tue 24 Mar 2026 14:32:48 +0000
asID:                     266707
IP address blocks:        45.229.248.0/22 maxlen: 22
                          45.229.248.0/24 maxlen: 24
                          45.229.249.0/24 maxlen: 24
                          45.229.250.0/24 maxlen: 24
                          45.229.251.0/24 maxlen: 24
                          2803:3d20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042533 (0x1f2aa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=debeb6294e93216759f5a631a2f8b9604e220b81
        Validity
            Not Before: Mar 23 14:32:48 2021 GMT
            Not After : Mar 24 14:32:48 2026 GMT
        Subject: CN=c43f89333671d7c10cca2ff91f4833a2350032ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:69:22:ec:d8:a8:5c:e2:ef:7e:a9:6c:5e:
                    f6:37:fc:99:06:cb:f9:4b:fa:3e:40:f4:51:68:43:
                    7e:ad:c8:2c:b0:66:3d:83:ee:46:93:a5:ab:94:96:
                    e0:3c:06:7b:9a:ef:39:64:be:b9:be:0d:55:cd:56:
                    da:6d:88:63:cc:d0:d4:0c:3f:0b:8b:03:ef:6a:20:
                    a5:d9:b5:0e:e7:b3:f8:94:fa:c0:e0:fb:f9:52:6a:
                    a1:cc:ee:64:0b:30:c3:49:b9:ab:8c:c5:0e:fe:d5:
                    02:7d:13:45:8d:d5:97:e6:17:ee:97:cf:26:46:5b:
                    d6:fc:fb:4f:b4:4e:17:91:01:71:a7:72:77:24:ba:
                    28:33:0d:b1:fd:07:ce:d9:0e:b6:49:6f:1a:b5:cd:
                    b9:c2:8b:60:2f:c8:4d:50:b9:e3:55:27:3b:27:22:
                    22:34:9e:80:8e:77:92:bd:07:66:7e:5b:0c:93:0c:
                    8c:6b:14:00:08:a7:98:02:fc:58:ba:7d:c3:46:c2:
                    ac:72:17:8f:8b:95:c8:8f:5e:18:93:fe:25:9a:67:
                    c9:f5:a5:75:55:5e:50:51:d3:c4:45:e1:c2:24:ba:
                    e8:ac:6c:ba:13:5a:3d:83:e9:1e:74:f3:2f:11:06:
                    fa:4a:97:1f:a0:be:33:31:ac:fc:cf:2e:ab:c8:52:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6A:C2:E1:CB:65:6C:EA:BD:CD:11:9A:C8:97:DE:59:7E:35:81:9E
            X509v3 Authority Key Identifier:
                keyid:89:3B:59:E1:36:E8:7C:79:32:B5:E8:07:B1:F4:31:71:98:72:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/debeb6294e93216759f5a631a2f8b9604e220b81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/c43f89333671d7c10cca2ff91f4833a2350032ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/debeb6294e93216759f5a631a2f8b9604e220b81.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.248.0/22
                IPv6:
                  2803:3d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:58:21:09:c0:38:0e:fa:ac:21:b4:71:f1:25:86:1a:42:
         ee:b6:46:97:34:5b:5c:d9:da:b3:2c:f0:09:3a:24:e8:ad:e2:
         2e:5a:25:48:3e:8b:f5:5e:f6:f1:70:08:fb:e6:46:b1:f0:02:
         94:aa:8c:78:75:9b:de:9a:5b:95:94:f1:d4:d9:a1:39:47:2b:
         41:0e:08:1a:4b:e7:ad:3c:75:69:d3:61:68:98:70:6d:09:71:
         d4:da:f7:58:93:2a:80:78:19:e6:1a:72:78:01:b5:7e:f9:e1:
         d3:60:f6:90:7f:48:e0:0a:0a:dc:48:05:3d:05:9e:65:9f:88:
         7e:b3:67:6b:1a:e5:21:1e:67:df:25:a5:3b:37:e5:a3:01:c9:
         8d:e7:6e:6c:bd:60:15:be:6e:e4:45:21:a8:5d:08:a4:09:8f:
         cc:8d:8e:96:1c:92:6a:df:f0:d1:28:64:b5:56:f5:19:7e:37:
         73:9e:5c:3d:1f:37:13:ae:5a:31:7f:db:97:cf:bb:13:58:b8:
         c3:37:f6:48:fe:ed:1b:4d:e2:fe:1d:29:2a:11:91:2f:8f:3e:
         9e:8a:f6:fa:00:47:90:c0:22:9f:57:af:17:1e:7e:0e:16:64:
         12:e7:e6:ae:7d:37:3f:04:bb:ee:83:f1:f5:07:ae:79:1f:64:
         c8:06:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----