Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/f11d035040bcb4fd0ae3aa2d77aa76597e763374.roa
File:                     f11d035040bcb4fd0ae3aa2d77aa76597e763374.roa (raw, json)
Hash identifier:          XnPGfEjJJSLWjBu0RRvi0I135V4XlVYGbcg2SGJRpvU=
Subject key identifier:   D0:3A:CC:BD:41:FB:1D:88:D4:85:3F:5A:42:DC:21:0D:34:C8:FD:E8
Certificate issuer:       /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial:       2732FB
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/f11d035040bcb4fd0ae3aa2d77aa76597e763374.roa
Signing time:             Wed 03 Jan 2024 20:33:01 +0000
ROA not before:           Wed 03 Jan 2024 20:33:01 +0000
ROA not after:            Sat 03 Jan 2026 20:33:01 +0000
asID:                     271911
IP address blocks:        45.70.56.0/22 maxlen: 24
                          2803:a820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568955 (0x2732fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
        Validity
            Not Before: Jan  3 20:33:01 2024 GMT
            Not After : Jan  3 20:33:01 2026 GMT
        Subject: CN=f11d035040bcb4fd0ae3aa2d77aa76597e763374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:c7:41:a5:5c:97:76:94:af:61:f5:64:30:
                    2c:56:81:74:c4:1c:e5:06:53:fe:02:3f:74:27:b1:
                    62:db:88:87:b0:ac:6f:0d:46:e1:9e:09:cd:48:c3:
                    86:84:bf:12:b8:57:f3:68:5d:e2:1a:37:e3:70:87:
                    f7:f7:28:5a:f5:9e:fb:d0:6d:e8:0b:c7:a1:78:ae:
                    2b:99:bb:b1:99:d1:ba:e9:52:a8:ee:7a:5e:6c:aa:
                    7d:69:74:43:0c:e0:73:da:22:7b:a2:c2:26:9c:89:
                    b2:cf:6e:f0:29:3f:48:66:4d:35:d0:8c:c1:97:9a:
                    45:64:eb:d0:b3:dd:de:fa:d4:c4:01:ca:bc:37:22:
                    65:db:88:64:ed:5d:dd:ca:b0:d9:a7:dd:2f:a8:77:
                    1f:62:88:5e:f0:37:d3:26:af:c7:88:25:5c:5e:4a:
                    06:cb:67:3c:03:f8:67:d4:15:54:9e:96:05:d1:23:
                    6a:da:ca:58:6f:1b:02:c5:06:b4:b3:a7:d1:09:43:
                    d1:2a:bb:ba:8c:08:97:c1:d7:88:af:6b:04:52:80:
                    99:fd:02:bd:75:30:23:31:69:d9:da:3d:d4:ba:95:
                    5a:f8:19:f0:8f:97:66:f2:57:32:94:8a:a2:9f:c3:
                    dc:dd:3f:ef:61:de:06:b2:8a:d0:44:9d:4f:ad:95:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:CC:BD:41:FB:1D:88:D4:85:3F:5A:42:DC:21:0D:34:C8:FD:E8
            X509v3 Authority Key Identifier:
                keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/f11d035040bcb4fd0ae3aa2d77aa76597e763374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22
                IPv6:
                  2803:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:c2:40:dd:50:a1:39:ee:48:26:0a:d7:d0:4d:ce:e0:fe:
         06:ff:f9:b7:d0:db:9c:fd:5a:1d:ed:bc:dc:01:ce:77:85:1a:
         5f:89:c4:dc:45:74:5e:15:58:07:cf:07:36:93:d4:ae:66:53:
         29:6e:b7:cd:21:b2:59:12:b6:fd:06:18:23:55:35:98:80:21:
         36:07:8e:37:39:aa:79:7c:9f:96:e5:87:a3:a7:b3:63:83:ea:
         0e:74:5e:96:aa:66:55:ec:53:d4:b9:f9:40:ae:03:6c:64:d1:
         89:8b:c6:fe:0a:87:e3:9d:13:fd:8c:7b:fc:56:d7:2f:2f:81:
         81:16:ba:a7:d3:79:55:f6:91:2a:2c:86:cb:9a:6d:ae:f0:80:
         d7:32:7c:41:39:84:a0:c4:bc:91:aa:55:84:84:25:15:11:3f:
         c8:97:2f:ec:b3:23:9f:60:5e:ea:0c:31:4e:47:ef:00:d0:c5:
         09:92:5b:d9:b8:dd:2c:30:0b:9a:5c:5e:ff:d1:da:33:ef:e9:
         51:55:10:49:3b:1c:fa:e2:96:e5:c4:1c:9c:87:7a:aa:84:ca:
         b0:b8:91:4c:27:a3:a6:b0:f1:42:7f:1a:56:0d:19:0b:41:67:
         a3:37:6a:a1:c4:d9:a7:0c:4c:0b:4a:cc:c3:05:1d:6a:2f:41:
         fc:95:1a:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDJzL7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
MGEwNzMwODZiMzkzODRlOTA5Nzg2ZDBhMTk0NDE4YWNkMGJkNDkwHhcNMjQwMTAz
MjAzMzAxWhcNMjYwMTAzMjAzMzAxWjAzMTEwLwYDVQQDEyhmMTFkMDM1MDQwYmNi
NGZkMGFlM2FhMmQ3N2FhNzY1OTdlNzYzMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgoHHQaVcl3aUr2H1ZDAsVoF0xBzlBlP+Aj90J7Fi24iHsKxv
DUbhngnNSMOGhL8SuFfzaF3iGjfjcIf39yha9Z770G3oC8eheK4rmbuxmdG66VKo
7npebKp9aXRDDOBz2iJ7osImnImyz27wKT9IZk010IzBl5pFZOvQs93e+tTEAcq8
NyJl24hk7V3dyrDZp90vqHcfYohe8DfTJq/HiCVcXkoGy2c8A/hn1BVUnpYF0SNq
2spYbxsCxQa0s6fRCUPRKru6jAiXwdeIr2sEUoCZ/QK9dTAjMWnZ2j3UupVa+Bnw
j5dm8lcylIqin8Pc3T/vYd4GsorQRJ1PrZUISQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFNA6zL1B+x2I1IU/WkLcIQ00yP3oMB8GA1UdIwQYMBaAFNbaxmLPwxq/xneG
fKaBiz9NhvCdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjEwYTA3
MzA4NmIzOTM4NGU5MDk3ODZkMGExOTQ0MThhY2QwYmQ0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWM0OTRhY2QtNjdjMS00NmMwLWI2YzUtY2FhYmNi
Y2UxZDk0L2YxMWQwMzUwNDBiY2I0ZmQwYWUzYWEyZDc3YWE3NjU5N2U3NjMzNzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYzQ5NGFjZC02N2MxLTQ2YzAtYjZjNS1jYWFi
Y2JjZTFkOTQvNjEwYTA3MzA4NmIzOTM4NGU5MDk3ODZkMGExOTQ0MThhY2QwYmQ0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi1GODANBAIAAjAHAwUAKAOoIDANBgkqhkiG9w0BAQsFAAOC
AQEAIqfCQN1QoTnuSCYK19BNzuD+Bv/5t9DbnP1aHe283AHOd4UaX4nE3EV0XhVY
B88HNpPUrmZTKW63zSGyWRK2/QYYI1U1mIAhNgeONzmqeXyfluWHo6ezY4PqDnRe
lqpmVexT1Ln5QK4DbGTRiYvG/gqH450T/Yx7/FbXLy+BgRa6p9N5VfaRKiyGy5pt
rvCA1zJ8QTmEoMS8kapVhIQlFRE/yJcv7LMjn2Be6gwxTkfvANDFCZJb2bjdLDAL
mlxe/9HaM+/pUVUQSTsc+uKW5cQcnId6qoTKsLiRTCejprDxQn8aVg0ZC0Fnozdq
ocTZpwxMC0rMwwUdai9B/JUatw==
-----END CERTIFICATE-----