Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24b934d4-e04e-49b9-95e1-1b3dbc0695f6/2a71a96445219bd5d98dae0a9f41e7c8602bf017.roa
File:                     2a71a96445219bd5d98dae0a9f41e7c8602bf017.roa (raw, json)
Hash identifier:          eBvL78QxxEPymlLK3Vn9V3arhQDE0hjD9NegOqRO8F4=
Subject key identifier:   38:0C:6F:F2:BD:1F:8A:5C:55:BC:FC:25:D0:71:C8:5A:9C:58:4F:B0
Certificate issuer:       /CN=5601ff30cdcb6a27b021eeff65d530454b9f8880
Certificate serial:       2454E5
Authority key identifier: 08:7B:69:AB:BD:3C:E9:FA:1C:05:2D:5E:F1:BC:BB:B7:0D:E0:0A:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5601ff30cdcb6a27b021eeff65d530454b9f8880.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24b934d4-e04e-49b9-95e1-1b3dbc0695f6/2a71a96445219bd5d98dae0a9f41e7c8602bf017.roa
Signing time:             Fri 24 Nov 2023 13:57:13 +0000
ROA not before:           Fri 24 Nov 2023 13:57:13 +0000
ROA not after:            Mon 24 Nov 2025 13:57:13 +0000
asID:                     267756
IP address blocks:        45.170.44.0/22 maxlen: 26
                          2803:ba0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381029 (0x2454e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5601ff30cdcb6a27b021eeff65d530454b9f8880
        Validity
            Not Before: Nov 24 13:57:13 2023 GMT
            Not After : Nov 24 13:57:13 2025 GMT
        Subject: CN=2a71a96445219bd5d98dae0a9f41e7c8602bf017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:e9:9c:58:19:d3:f0:0e:54:61:d5:7a:fe:
                    b9:98:02:9f:f0:0e:ab:78:e7:09:21:63:53:1f:22:
                    9e:5d:38:21:1d:8e:1c:1c:69:9a:9e:41:45:c4:c2:
                    db:77:d1:d0:8f:bf:b4:20:02:6b:2f:5d:98:56:6c:
                    17:82:75:90:96:eb:46:5d:17:8e:38:c1:94:b3:09:
                    3c:4d:38:6d:7d:6f:2d:53:dd:a3:d7:eb:92:1d:5f:
                    6a:16:91:b1:71:b2:ff:ba:20:a8:8f:0f:d6:d0:48:
                    4d:bb:c7:fd:27:f1:04:2d:17:2f:3d:85:ee:6f:31:
                    0b:19:a3:49:86:75:3f:ee:b3:b6:51:6f:31:d6:f2:
                    dc:bc:e8:6f:47:b7:c9:06:9c:fe:f2:33:53:9f:86:
                    30:87:b8:d4:ef:bb:a0:05:cc:d0:f3:e2:93:fd:87:
                    48:57:8f:9f:97:cc:ec:40:0e:dc:da:ef:6f:c5:76:
                    c1:9b:9f:fd:3e:68:82:67:81:af:43:67:e0:cf:50:
                    15:70:f7:38:a7:4c:44:76:70:5a:03:89:55:76:68:
                    99:52:da:b1:b6:25:ae:24:9f:c7:7a:ec:f7:69:a0:
                    7f:22:9f:35:d3:05:7b:ae:7e:1e:8f:96:d2:de:b8:
                    eb:4b:36:5b:fe:c7:b4:2b:c2:2e:96:9b:81:1d:c4:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:6F:F2:BD:1F:8A:5C:55:BC:FC:25:D0:71:C8:5A:9C:58:4F:B0
            X509v3 Authority Key Identifier:
                keyid:08:7B:69:AB:BD:3C:E9:FA:1C:05:2D:5E:F1:BC:BB:B7:0D:E0:0A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5601ff30cdcb6a27b021eeff65d530454b9f8880.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24b934d4-e04e-49b9-95e1-1b3dbc0695f6/2a71a96445219bd5d98dae0a9f41e7c8602bf017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24b934d4-e04e-49b9-95e1-1b3dbc0695f6/5601ff30cdcb6a27b021eeff65d530454b9f8880.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.44.0/22
                IPv6:
                  2803:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:3b:f4:68:56:92:e3:e0:c7:ca:d6:18:f8:e7:b1:21:2f:
         a5:cb:aa:75:b7:9c:56:2a:61:11:1f:11:c2:e1:f0:8e:e2:10:
         cb:29:7a:6c:42:9f:90:b7:e7:0d:0a:8b:3c:6d:eb:b6:b8:89:
         ce:99:8c:98:fc:07:23:81:93:5b:55:88:07:bc:97:1d:45:ea:
         e9:77:2a:17:4b:99:45:cf:33:52:5e:e2:93:91:5f:25:a2:69:
         8f:c5:48:a8:3f:58:e0:34:76:6c:70:a4:4c:5a:d5:88:9b:ad:
         fe:2d:c3:2a:df:f6:d3:0b:40:fe:6f:a9:bf:05:e6:13:0b:e5:
         c4:e4:1d:b1:c1:d8:06:37:d3:e6:53:32:f7:29:f2:15:50:6d:
         73:83:06:16:e8:eb:b7:d1:f6:19:17:0b:87:e6:65:5a:4b:b2:
         2d:9f:53:0a:ed:97:1d:6c:71:4b:29:88:01:92:c4:81:2e:ad:
         01:9f:a2:41:6b:b6:61:77:89:31:6a:7d:f1:d1:ba:85:48:20:
         5c:12:df:68:9b:6e:01:ad:37:d8:af:24:eb:4d:e6:08:64:43:
         00:bc:d5:c7:a4:ce:de:fb:3b:5f:c5:cd:76:d0:93:86:0d:01:
         50:5b:15:3f:d0:c1:d8:59:43:ac:f2:77:3e:a1:aa:b9:9c:a7:
         5b:68:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----