Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/e55c3dabb011c75367b2ede91d165812b3851823.roa
File:                     e55c3dabb011c75367b2ede91d165812b3851823.roa (raw, json)
Hash identifier:          X1nNOqIrj3qybeE5uQoMAE/oQzXRrp07i9JulE98bUg=
Subject key identifier:   51:BF:8A:F5:DC:32:E9:3B:95:18:6C:F1:09:06:F3:CA:A2:68:74:7E
Certificate issuer:       /CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Certificate serial:       23E80F
Authority key identifier: B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/e55c3dabb011c75367b2ede91d165812b3851823.roa
Signing time:             Wed 08 Nov 2023 14:26:47 +0000
ROA not before:           Wed 08 Nov 2023 14:26:47 +0000
ROA not after:            Sat 08 Nov 2025 14:26:47 +0000
asID:                     27947
IP address blocks:        45.235.140.0/22 maxlen: 22
                          2801:13:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353167 (0x23e80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
        Validity
            Not Before: Nov  8 14:26:47 2023 GMT
            Not After : Nov  8 14:26:47 2025 GMT
        Subject: CN=e55c3dabb011c75367b2ede91d165812b3851823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:5a:28:61:cc:0e:e0:f0:44:e1:c0:97:bb:
                    c0:2f:85:c3:d3:b2:e5:33:0e:a6:9e:a4:6e:41:3f:
                    28:61:c3:fd:9c:68:ab:fa:6c:24:e6:2b:66:1d:48:
                    d6:e8:94:f2:d3:f1:3b:8e:f3:45:9e:a2:52:11:6f:
                    56:7b:cf:b8:e6:54:ca:1f:5e:59:64:0d:c1:13:c9:
                    c6:2e:ed:22:61:c3:4d:df:39:a5:c7:a2:2e:99:4c:
                    5d:2f:4f:dd:73:86:26:01:2f:da:bb:22:82:e0:a4:
                    06:3a:2a:32:67:ab:ad:66:23:b5:03:27:ee:02:d4:
                    a0:27:b1:c4:78:01:ab:67:fe:47:af:1b:7c:26:2a:
                    6c:83:cd:e3:85:f6:e6:7e:a2:62:e9:fb:f0:7e:92:
                    92:b3:7e:6c:c8:b6:0b:16:f6:62:bc:cb:cd:71:08:
                    11:a9:41:6c:5f:81:c6:f3:54:c7:6c:24:0a:eb:c5:
                    42:92:4c:5b:88:e6:f4:ad:48:84:30:09:be:d1:2b:
                    5b:b4:8c:54:a9:23:97:7a:9c:d1:bf:bd:62:25:9a:
                    08:27:51:e2:cd:49:8d:21:0c:fb:ce:be:7b:20:5d:
                    c2:c2:0b:34:54:fa:d8:9a:19:a4:77:92:c1:54:15:
                    99:85:73:e7:03:13:ee:ea:e5:4b:1d:7a:be:ff:a2:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:8A:F5:DC:32:E9:3B:95:18:6C:F1:09:06:F3:CA:A2:68:74:7E
            X509v3 Authority Key Identifier:
                keyid:B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/e55c3dabb011c75367b2ede91d165812b3851823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:43:b4:eb:61:b4:e2:34:e0:10:33:fd:58:e3:40:d6:ad:
         98:4a:35:46:8d:94:7a:6c:a7:a5:13:38:3f:7f:95:1e:40:84:
         99:fd:7d:6b:7b:17:36:a0:5e:15:b2:78:cc:ef:07:0d:32:16:
         32:59:51:23:1e:cf:33:21:e7:d2:60:64:52:4e:f0:6b:e3:55:
         93:1f:a6:7a:33:0d:1e:ad:1d:fb:85:bb:f8:d7:08:e2:12:db:
         e8:a2:a0:82:68:fc:d5:89:4c:2b:29:8b:d7:74:28:7e:77:db:
         d2:c1:1d:5d:67:07:66:8d:6b:f9:23:38:98:25:f8:8c:df:36:
         05:d7:da:a4:1a:91:da:a6:1a:3a:6b:6a:f1:25:a7:5c:b8:12:
         ab:8d:43:23:02:f3:19:fb:39:5a:15:2c:25:0f:29:a1:38:4f:
         67:2e:d5:0e:7a:cd:d1:ec:16:06:2d:57:1f:7a:6f:7a:f7:b9:
         0b:8c:c9:15:1e:81:23:a7:7a:b3:41:c1:5a:84:76:88:b3:02:
         79:85:3c:dd:2c:e3:b7:6f:d8:dd:89:ba:0f:b6:94:16:a8:31:
         92:2c:60:f2:8d:55:91:1d:84:c3:87:3b:9b:b7:16:2d:d9:a6:
         0a:6d:22:df:db:43:f5:9d:5b:9d:8a:8e:44:52:bf:81:9e:8b:
         3f:3d:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----