Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/b43d0cd6ebab430a66b34b2ded3d1e3967c20f4c.roa
File:                     b43d0cd6ebab430a66b34b2ded3d1e3967c20f4c.roa (raw, json)
Hash identifier:          CoF5D+0KxhUvd2Jpt8LPnRr10aKGpUO8Msr94QzVxjI=
Subject key identifier:   DF:7A:7A:51:2F:63:35:26:F0:DA:2E:31:0C:3D:88:2C:5C:E1:E4:B0
Certificate issuer:       /CN=c9b66be6ecc75830506521bc2ec11d7c3adf7191
Certificate serial:       1E7540
Authority key identifier: 66:9A:93:1F:4A:55:C8:43:8A:D3:8F:4A:C0:A9:AF:33:18:FA:8C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9b66be6ecc75830506521bc2ec11d7c3adf7191.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/b43d0cd6ebab430a66b34b2ded3d1e3967c20f4c.roa
Signing time:             Mon 22 May 2023 21:14:55 +0000
ROA not before:           Sun 21 May 2023 21:14:55 +0000
ROA not after:            Thu 22 May 2025 21:14:55 +0000
asID:                     269820
IP address blocks:        45.186.200.0/22 maxlen: 24
                          2803:2760::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996096 (0x1e7540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b66be6ecc75830506521bc2ec11d7c3adf7191
        Validity
            Not Before: May 21 21:14:55 2023 GMT
            Not After : May 22 21:14:55 2025 GMT
        Subject: CN=b43d0cd6ebab430a66b34b2ded3d1e3967c20f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:8f:2d:f7:b2:42:b0:df:d2:09:b7:1e:3d:
                    b0:86:ec:e7:ef:44:4f:c3:cf:45:ef:b5:c8:9f:af:
                    b5:bf:25:d2:84:93:d5:64:a6:04:a7:92:13:fe:ec:
                    7c:bb:37:c1:d6:f6:6c:4e:77:f4:d6:31:82:e1:07:
                    1a:dd:33:64:97:41:8d:b6:34:7d:ac:26:92:97:b4:
                    f2:92:d9:e5:c1:fa:62:01:33:97:8a:20:5e:49:eb:
                    dc:65:de:3c:7a:c0:01:72:aa:f8:36:f6:ee:fa:44:
                    38:99:4a:90:07:d0:f6:65:ef:2a:e7:b0:7e:cd:4e:
                    c8:a8:f9:e6:bc:01:31:0a:98:60:a5:5a:83:f4:cc:
                    b2:96:b4:43:39:4a:fd:54:5e:de:33:84:f4:d7:6d:
                    af:77:57:70:f5:60:fa:81:77:f3:94:15:08:94:b3:
                    d1:4a:01:a5:97:92:6f:1b:8e:15:c8:15:ad:75:4a:
                    fe:f3:28:23:a4:5e:a2:c3:ab:8a:d6:78:da:fa:bf:
                    0b:91:e0:ec:ff:c8:56:d7:4a:da:a6:95:ac:6a:98:
                    1b:13:6c:1c:26:bf:c3:38:3c:23:59:e4:c6:01:f9:
                    1a:d7:66:75:e7:46:d3:5d:c1:dd:b7:38:2f:13:51:
                    8a:15:d7:8e:24:a0:92:82:3f:a1:f1:ab:8a:ce:3f:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7A:7A:51:2F:63:35:26:F0:DA:2E:31:0C:3D:88:2C:5C:E1:E4:B0
            X509v3 Authority Key Identifier:
                keyid:66:9A:93:1F:4A:55:C8:43:8A:D3:8F:4A:C0:A9:AF:33:18:FA:8C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9b66be6ecc75830506521bc2ec11d7c3adf7191.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/b43d0cd6ebab430a66b34b2ded3d1e3967c20f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3be67552-7f2f-4775-90e6-8979bbb2edeb/c9b66be6ecc75830506521bc2ec11d7c3adf7191.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.200.0/22
                IPv6:
                  2803:2760::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:ea:cf:86:6b:e5:65:d3:fe:57:3b:8d:c3:73:2a:ac:06:
         0b:da:61:43:17:5e:df:73:63:09:ba:96:79:d1:b3:d0:b0:ad:
         0a:ab:08:be:3a:07:fb:8d:18:8e:05:f4:24:87:33:c8:b0:87:
         32:bb:0b:01:77:f5:97:65:9a:c1:ee:dd:97:13:f2:55:60:6c:
         d8:f0:a2:51:7d:86:f1:fb:db:42:9e:1d:6a:0c:37:24:de:94:
         10:b3:13:40:83:4f:1c:48:a2:d0:4c:c7:ec:62:ec:82:a4:7f:
         f4:90:f8:eb:07:ac:37:07:28:87:5c:d3:62:93:76:85:dc:46:
         8a:c5:27:b8:23:b0:07:cf:71:59:07:ce:b4:c9:b2:45:56:50:
         c1:11:ed:4b:4d:82:39:38:69:34:17:86:d1:8f:78:13:65:3b:
         af:77:ec:68:72:ad:5c:e7:7c:cc:70:f0:b6:4c:89:a3:df:07:
         4d:32:2a:29:b6:8d:53:6f:6f:a9:02:a8:0b:3a:19:2a:be:ae:
         87:f4:f1:8d:59:f3:6d:8f:9a:6f:48:93:e9:48:14:30:21:f1:
         be:6d:ff:b5:b4:8b:b5:e8:5e:8b:f6:0c:d4:4d:89:83:05:4a:
         61:87:ba:db:41:2f:47:9c:97:6e:9b:a0:a1:29:36:ce:48:90:
         fa:b5:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----