Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/281b2d517f121537b3d47c3f09c5b7e4609e9931.roa
File:                     281b2d517f121537b3d47c3f09c5b7e4609e9931.roa (raw, json)
Hash identifier:          CEu0DD+5XWKwy84tGW+q9NHhzc7sc+igiajqZqfDGD8=
Subject key identifier:   D1:CC:59:D3:1D:37:2A:7A:73:12:14:DE:61:8C:32:6C:11:D2:56:FB
Certificate issuer:       /CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Certificate serial:       23EABF
Authority key identifier: B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/281b2d517f121537b3d47c3f09c5b7e4609e9931.roa
Signing time:             Wed 08 Nov 2023 14:26:50 +0000
ROA not before:           Wed 08 Nov 2023 14:26:47 +0000
ROA not after:            Sat 08 Nov 2025 14:26:47 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 23
                          2801:13:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353855 (0x23eabf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
        Validity
            Not Before: Nov  8 14:26:47 2023 GMT
            Not After : Nov  8 14:26:47 2025 GMT
        Subject: CN=281b2d517f121537b3d47c3f09c5b7e4609e9931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:b4:a8:65:fa:aa:c2:64:f9:2e:bd:fc:5c:
                    40:cc:9b:24:ad:8c:af:15:ba:dc:57:95:dd:4c:d3:
                    6d:6b:54:9d:6c:29:b5:7f:ff:7f:2c:0e:98:ed:3f:
                    01:76:a2:df:cc:5a:9f:24:9d:98:00:5e:37:50:4d:
                    00:b9:d3:59:c1:63:c2:01:2a:e5:63:68:19:d0:f6:
                    97:f9:14:d2:0f:84:49:da:45:8b:78:ec:ee:aa:b7:
                    4a:11:4b:d6:a5:06:da:c6:af:a7:44:6e:3c:31:3a:
                    79:24:6f:96:52:be:e4:f7:03:78:cf:f5:8c:32:da:
                    28:45:0a:9d:9b:db:eb:b5:df:64:fd:53:e8:89:d9:
                    b8:ac:81:73:30:64:f7:50:8a:d3:ec:de:33:1a:b9:
                    9e:0a:47:b5:3b:61:6a:e7:73:fd:c5:99:74:b0:20:
                    2d:ec:4a:ff:88:1f:27:6c:0c:ac:58:a6:8c:9c:d9:
                    c4:5f:ad:98:05:7a:ef:7b:de:8c:25:97:8e:e3:d7:
                    fa:0c:30:2b:29:b3:28:9f:60:ea:de:3a:d6:fa:d9:
                    01:76:72:87:a6:b6:63:8e:e1:4d:88:9f:0b:60:89:
                    0b:4c:66:11:38:13:e5:a4:04:f8:f7:77:17:fe:81:
                    f0:f4:f8:4f:db:0b:b2:b3:af:7d:90:d1:e9:34:a3:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:59:D3:1D:37:2A:7A:73:12:14:DE:61:8C:32:6C:11:D2:56:FB
            X509v3 Authority Key Identifier:
                keyid:B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/281b2d517f121537b3d47c3f09c5b7e4609e9931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:9a:41:32:f5:c1:35:65:31:14:69:31:cd:e6:03:3f:80:
         d3:a2:53:04:e4:b6:c7:93:8c:54:83:d2:5a:2c:59:e7:cd:f3:
         14:54:00:9f:a6:30:61:e4:e2:90:c6:dc:21:b1:7f:e6:84:86:
         b0:74:a0:d5:88:81:e2:70:e5:51:de:ce:3e:fb:d3:54:5c:1e:
         f9:bc:fe:f4:06:ed:11:2a:9a:55:d1:57:b1:37:97:88:47:db:
         70:78:0e:28:a3:6b:2b:4b:81:d5:fa:ca:f9:ce:d5:bf:f3:41:
         cd:7c:3b:59:49:61:93:94:17:a1:fe:f4:c0:f1:76:11:a0:86:
         88:c3:3e:db:1c:81:97:e4:5e:93:81:a2:8b:b4:70:1a:26:16:
         20:fc:69:33:3c:2c:4b:c5:9b:fb:ce:ab:6a:4e:bb:2a:cd:2e:
         32:a5:fb:21:ac:37:85:e9:e0:19:f0:cf:be:b4:1e:2d:78:65:
         2a:43:49:68:64:9c:cc:d4:17:1a:fc:ec:11:3b:70:9d:33:43:
         fb:b6:26:82:a6:2a:25:ad:d2:56:b0:3a:80:2b:31:71:71:63:
         57:19:a8:24:a7:3e:15:ce:ce:88:14:05:fe:7e:2d:98:5d:e9:
         d9:37:2e:69:91:1a:7c:7c:64:29:1c:58:eb:89:b4:e3:de:64:
         af:be:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----