Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/9e1d6971d1edd302095c02b4f171a795502a75fa.roa
File:                     9e1d6971d1edd302095c02b4f171a795502a75fa.roa (raw, json)
Hash identifier:          38Z/nY311vI46nDrILsfGW0x7tcIogr/ky/FuIuzdGo=
Subject key identifier:   0E:E1:A5:80:B4:F0:28:C0:4D:9B:57:AC:32:3C:A4:57:4F:B4:53:81
Certificate issuer:       /CN=53bdb74e475b2a4347038eba8bfa2e4427b6097d
Certificate serial:       1E5508
Authority key identifier: 57:45:08:43:15:02:39:35:FD:2E:45:2F:39:E5:05:8C:8C:AE:AF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53bdb74e475b2a4347038eba8bfa2e4427b6097d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/9e1d6971d1edd302095c02b4f171a795502a75fa.roa
Signing time:             Mon 13 Nov 2023 15:49:23 +0000
ROA not before:           Mon 13 Nov 2023 15:49:22 +0000
ROA not after:            Thu 13 Nov 2025 15:49:22 +0000
asID:                     269846
IP address blocks:        45.187.4.0/24 maxlen: 24
                          45.187.5.0/24 maxlen: 24
                          45.187.6.0/24 maxlen: 24
                          45.187.7.0/24 maxlen: 24
                          2803:40e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987848 (0x1e5508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bdb74e475b2a4347038eba8bfa2e4427b6097d
        Validity
            Not Before: Nov 13 15:49:22 2023 GMT
            Not After : Nov 13 15:49:22 2025 GMT
        Subject: CN=9e1d6971d1edd302095c02b4f171a795502a75fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:ff:2e:cc:de:23:9a:dc:fc:38:ae:e3:8c:
                    c6:da:be:17:53:58:30:47:2a:27:31:0f:45:c0:ed:
                    76:a6:b4:0d:b7:00:12:37:15:06:b3:83:d2:94:19:
                    94:0c:77:0c:cf:8c:3f:c6:e5:06:cb:61:4e:63:64:
                    74:27:db:88:8d:db:89:2f:b3:fb:f4:c8:00:3d:a2:
                    5b:f8:8e:a4:3c:29:15:09:0c:91:3d:18:7f:a0:bc:
                    46:68:59:f7:ed:4b:e7:2a:8b:84:23:f8:b3:bc:f1:
                    b3:11:7c:ff:f6:e3:c0:04:47:0c:f7:41:b9:e6:48:
                    08:10:dc:46:fd:03:e2:b1:34:65:6e:e4:e8:71:5c:
                    ed:4f:54:56:6d:58:fd:8d:12:a6:db:df:8a:c1:1f:
                    2b:cf:2d:74:33:50:a2:35:8e:2e:46:62:4b:98:74:
                    67:c8:bf:89:f3:c2:da:6d:c5:d5:18:40:0c:a8:54:
                    97:33:4e:15:f5:63:b3:1b:c5:e2:94:e5:98:8b:3c:
                    6e:d8:64:d5:ef:e0:c9:74:26:41:68:03:ec:3d:6d:
                    97:76:00:d5:d6:b7:90:75:ee:93:76:ef:5e:14:3c:
                    1d:ce:7f:f6:b4:17:e5:fa:d9:ea:41:3a:06:0e:95:
                    bb:a2:a0:f9:7b:98:7a:7f:d8:d9:37:d1:f3:d1:49:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:A5:80:B4:F0:28:C0:4D:9B:57:AC:32:3C:A4:57:4F:B4:53:81
            X509v3 Authority Key Identifier:
                keyid:57:45:08:43:15:02:39:35:FD:2E:45:2F:39:E5:05:8C:8C:AE:AF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53bdb74e475b2a4347038eba8bfa2e4427b6097d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/9e1d6971d1edd302095c02b4f171a795502a75fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/53bdb74e475b2a4347038eba8bfa2e4427b6097d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.4.0/22
                IPv6:
                  2803:40e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:b7:d3:b6:df:5d:3f:33:34:4a:be:93:42:14:69:56:05:
         73:3a:50:54:78:03:6d:0f:5d:14:02:fb:c9:1d:21:73:54:a4:
         52:f7:1d:78:c1:45:e1:2c:6d:69:c6:18:cb:c7:a0:76:4a:e0:
         31:1d:64:21:79:26:98:19:68:a5:2f:13:13:dd:1c:4d:73:4c:
         ad:51:1e:05:a0:72:b5:ff:c2:99:e6:77:9c:f3:89:fa:b1:43:
         5c:0a:12:0e:fa:ea:28:bc:41:78:9a:32:8d:54:93:21:fa:5a:
         ca:1c:cc:95:b4:0d:d5:d0:e7:11:46:49:e1:b2:6e:55:39:83:
         9e:24:07:ba:6b:f0:23:35:50:3e:c0:dd:e2:bb:c1:34:ac:c0:
         35:28:c4:43:75:a7:6e:27:3f:8e:f3:9c:9e:1c:c3:60:16:40:
         86:ac:ba:b6:02:43:6f:6c:29:40:db:89:96:6f:6f:6e:b9:63:
         8f:96:66:a8:dd:e1:1c:99:7c:28:37:31:17:05:ce:1f:08:b9:
         4c:c9:9d:40:d2:5f:a2:9a:55:6f:67:b2:25:f3:bc:d3:47:47:
         64:5e:9f:8f:20:fb:02:8f:68:cd:56:81:84:21:fa:67:0c:e9:
         18:c1:a4:b8:51:4f:a9:2f:12:6d:4b:b2:02:d0:b9:95:60:76:
         7e:2e:ea:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHlUIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUz
YmRiNzRlNDc1YjJhNDM0NzAzOGViYThiZmEyZTQ0MjdiNjA5N2QwHhcNMjMxMTEz
MTU0OTIyWhcNMjUxMTEzMTU0OTIyWjAzMTEwLwYDVQQDEyg5ZTFkNjk3MWQxZWRk
MzAyMDk1YzAyYjRmMTcxYTc5NTUwMmE3NWZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkDH/LszeI5rc/Diu44zG2r4XU1gwRyonMQ9FwO12prQNtwAS
NxUGs4PSlBmUDHcMz4w/xuUGy2FOY2R0J9uIjduJL7P79MgAPaJb+I6kPCkVCQyR
PRh/oLxGaFn37UvnKouEI/izvPGzEXz/9uPABEcM90G55kgIENxG/QPisTRlbuTo
cVztT1RWbVj9jRKm29+KwR8rzy10M1CiNY4uRmJLmHRnyL+J88LabcXVGEAMqFSX
M04V9WOzG8XilOWYizxu2GTV7+DJdCZBaAPsPW2XdgDV1reQde6Tdu9eFDwdzn/2
tBfl+tnqQToGDpW7oqD5e5h6f9jZN9Hz0UmMGwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFA7hpYC08CjATZtXrDI8pFdPtFOBMB8GA1UdIwQYMBaAFFdFCEMVAjk1/S5F
LznlBYyMrq/TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTNiZGI3
NGU0NzViMmE0MzQ3MDM4ZWJhOGJmYTJlNDQyN2I2MDk3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmU3MTBiYzItMWQ2YS00ZTQ2LThmNmYtNTBlOTc4
NDUyMGM2LzllMWQ2OTcxZDFlZGQzMDIwOTVjMDJiNGYxNzFhNzk1NTAyYTc1ZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZTcxMGJjMi0xZDZhLTRlNDYtOGY2Zi01MGU5
Nzg0NTIwYzYvNTNiZGI3NGU0NzViMmE0MzQ3MDM4ZWJhOGJmYTJlNDQyN2I2MDk3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi27BDANBAIAAjAHAwUAKANA4DANBgkqhkiG9w0BAQsFAAOC
AQEAN52307bfXT8zNEq+k0IUaVYFczpQVHgDbQ9dFAL7yR0hc1SkUvcdeMFF4Sxt
acYYy8egdkrgMR1kIXkmmBlopS8TE90cTXNMrVEeBaBytf/CmeZ3nPOJ+rFDXAoS
DvrqKLxBeJoyjVSTIfpayhzMlbQN1dDnEUZJ4bJuVTmDniQHumvwIzVQPsDd4rvB
NKzANSjEQ3Wnbic/jvOcnhzDYBZAhqy6tgJDb2wpQNuJlm9vbrljj5ZmqN3hHJl8
KDcxFwXOHwi5TMmdQNJfoppVb2eyJfO800dHZF6fjyD7Ao9ozVaBhCH6ZwzpGMGk
uFFPqS8SbUuyAtC5lWB2fi7qsQ==
-----END CERTIFICATE-----