Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/422f40810e94412e4b93072b897c3718a6dbff13.roa
File:                     422f40810e94412e4b93072b897c3718a6dbff13.roa (raw, json)
Hash identifier:          J9H+wwkLt+WtdibXQxL29Tl49H7tqqSGkr6OvrUcAnQ=
Subject key identifier:   A0:C7:0C:49:1B:3C:1B:36:F0:C6:EA:BE:A9:2B:3A:7A:86:67:8F:BC
Certificate issuer:       /CN=1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd
Certificate serial:       25986F
Authority key identifier: 12:21:AF:42:6F:04:C8:EC:87:30:BE:5C:A6:78:F0:AE:16:8A:1C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/422f40810e94412e4b93072b897c3718a6dbff13.roa
Signing time:             Fri 05 Jan 2024 16:39:14 +0000
ROA not before:           Fri 05 Jan 2024 16:39:14 +0000
ROA not after:            Mon 05 Jan 2026 16:39:14 +0000
asID:                     269790
IP address blocks:        45.182.119.0/24 maxlen: 24
                          2801:1a:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463855 (0x25986f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd
        Validity
            Not Before: Jan  5 16:39:14 2024 GMT
            Not After : Jan  5 16:39:14 2026 GMT
        Subject: CN=422f40810e94412e4b93072b897c3718a6dbff13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:16:90:7c:fe:ee:a5:ad:83:33:30:71:18:
                    1b:4c:47:87:a5:8c:3d:df:e6:8d:24:13:40:6d:aa:
                    89:8c:86:a9:e9:e8:a6:97:ea:b4:b3:fe:39:7b:3c:
                    6e:a0:97:10:79:f4:70:62:2d:02:d8:12:b0:31:c6:
                    5d:eb:a0:74:4b:9a:88:bf:49:62:08:aa:8e:08:6f:
                    bb:26:8f:23:6e:c0:4e:0f:1f:44:43:4b:ea:35:98:
                    7c:cf:5a:04:37:a3:f3:9d:4b:f1:4a:1a:08:4e:36:
                    81:ec:29:6e:bf:94:5e:6b:fa:ce:06:8d:f0:cc:72:
                    f7:ee:e1:b7:4e:67:4a:17:e8:e2:d2:b7:18:1e:c7:
                    4d:48:22:53:01:81:73:98:f2:65:7c:e0:91:4d:28:
                    5e:10:05:d4:e7:05:3e:b1:e7:d4:e8:48:90:be:03:
                    a2:18:70:08:c0:47:f0:f2:68:2b:b0:da:f9:a7:7c:
                    7d:38:5d:19:70:81:05:06:cc:9c:41:7b:eb:6f:cb:
                    83:4a:6a:c8:56:fc:46:d9:cf:96:17:95:1e:1b:7f:
                    67:92:c7:6c:a4:09:dc:71:81:e8:c2:7d:50:f8:b1:
                    3b:5b:89:c7:c0:94:5c:13:71:ec:32:6d:aa:bd:58:
                    96:d7:01:22:19:44:e4:75:39:c2:8f:24:f3:bd:01:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:0C:49:1B:3C:1B:36:F0:C6:EA:BE:A9:2B:3A:7A:86:67:8F:BC
            X509v3 Authority Key Identifier:
                keyid:12:21:AF:42:6F:04:C8:EC:87:30:BE:5C:A6:78:F0:AE:16:8A:1C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/422f40810e94412e4b93072b897c3718a6dbff13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.119.0/24
                IPv6:
                  2801:1a:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:cf:f9:e4:69:4f:c8:bb:73:d5:3c:4c:40:f7:86:25:23:
         ee:3c:7d:80:ec:8f:db:e8:f9:4f:65:27:b8:1d:20:6d:15:a0:
         27:fc:d7:51:0d:99:81:67:39:20:82:df:b5:a6:d7:c0:bb:5d:
         de:c0:50:7b:46:92:31:10:0f:e3:76:84:60:22:4e:bb:c6:da:
         66:58:13:92:ad:83:7f:5c:ff:12:26:41:1e:01:9d:9a:82:7b:
         7b:92:2e:6f:5b:2d:60:16:4d:4f:89:a8:d7:8c:62:92:17:a2:
         38:bb:40:18:02:22:13:a7:9d:93:7e:65:75:48:9c:0d:26:ea:
         e4:e4:fc:a1:d3:8d:82:1e:37:54:1a:a8:d9:f4:0d:26:1a:c5:
         84:60:06:85:36:a4:eb:1c:64:47:35:85:2a:3b:51:0e:cc:0a:
         92:35:77:05:09:46:2d:ac:50:94:e8:1d:0d:a4:10:23:eb:c6:
         d2:98:19:1d:71:84:e7:6a:ff:6d:72:9d:70:f2:29:34:6b:04:
         0f:39:d5:00:87:cc:bd:16:dc:ef:5a:f4:48:8d:db:91:7b:e3:
         c7:aa:fe:ab:51:e6:af:1a:5b:90:a2:00:86:6d:8f:72:d0:c0:
         1c:ec:ec:04:d6:33:7b:82:85:49:ce:85:e9:26:1a:7a:73:52:
         bf:3f:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----