Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/23d4dc3da729fdc947c98adf6f5257617aa5c688.roa
File:                     23d4dc3da729fdc947c98adf6f5257617aa5c688.roa (raw, json)
Hash identifier:          DqOn4W2hTIzs+SqVcoQOK6l0CfpQ3rRdreXQ/qPmKD4=
Subject key identifier:   F0:3E:4C:3D:F3:27:8F:B4:CF:F3:F7:1A:05:E4:18:E2:10:90:A7:61
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       24E535
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/23d4dc3da729fdc947c98adf6f5257617aa5c688.roa
Signing time:             Thu 16 Nov 2023 20:19:54 +0000
ROA not before:           Thu 16 Nov 2023 20:19:54 +0000
ROA not after:            Sun 16 Nov 2025 20:19:54 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 24
                          2803:60a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417973 (0x24e535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Nov 16 20:19:54 2023 GMT
            Not After : Nov 16 20:19:54 2025 GMT
        Subject: CN=23d4dc3da729fdc947c98adf6f5257617aa5c688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:66:97:bd:c3:26:be:85:5f:d2:d8:7c:08:
                    20:91:91:c7:49:58:0c:f8:ca:0b:b3:3a:15:8c:d1:
                    c7:e2:33:1e:5e:bc:fc:f0:38:f8:a3:64:5c:79:c9:
                    4f:a9:6a:cf:d8:bf:73:1d:e3:20:82:ac:f4:9e:fb:
                    51:5e:85:68:76:db:9a:c1:8b:5a:1d:4b:06:df:ec:
                    8a:23:f4:9f:16:58:02:94:b3:17:2d:75:00:87:85:
                    b6:6c:ec:12:20:20:16:40:e9:a1:6c:8b:16:f8:48:
                    10:97:45:e1:3e:38:a4:17:da:fb:90:51:18:1f:11:
                    1a:74:6f:89:c6:8a:6a:50:6d:1d:d8:a3:fd:91:89:
                    c8:72:90:ae:bc:be:74:c3:11:63:59:cb:99:2f:6a:
                    c5:15:ed:a5:ed:22:d4:79:20:d4:e6:2d:37:aa:a7:
                    57:8c:56:e6:8c:d8:9f:d1:c4:b4:97:8d:04:83:3f:
                    35:23:cf:a4:6d:b5:52:1b:93:ec:a9:02:f0:cf:78:
                    7f:92:e9:a8:26:96:4b:55:76:61:c4:c4:bb:be:6a:
                    01:5f:40:a4:8e:7a:b1:b3:69:f4:20:eb:7f:91:52:
                    9f:b7:29:92:cd:6c:0c:62:d6:1c:5a:e7:58:a3:99:
                    c5:3c:bb:b2:c8:87:49:b9:5a:f4:e4:86:99:5e:0e:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:4C:3D:F3:27:8F:B4:CF:F3:F7:1A:05:E4:18:E2:10:90:A7:61
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/23d4dc3da729fdc947c98adf6f5257617aa5c688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22
                IPv6:
                  2803:60a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:01:42:9b:3d:5e:08:86:e4:e8:e1:4a:bc:82:01:f2:f7:
         f6:4e:ce:6b:c6:1f:10:b2:09:f3:f5:01:bd:8f:dc:31:de:3f:
         e4:e1:d0:29:12:e6:b7:0d:14:6c:e1:50:a0:71:c6:13:ed:c2:
         d7:8c:fd:a9:34:a9:27:d0:a9:39:39:c5:f5:ba:d3:c2:b2:5d:
         e8:d9:a3:11:66:70:f2:8e:32:a2:bd:b9:47:f9:04:9e:7f:5a:
         af:17:a7:32:74:b1:98:d2:31:21:b5:89:89:24:a3:a4:be:12:
         ed:80:d9:48:4a:73:ba:a6:c9:d9:86:fb:d8:43:1d:b5:34:53:
         9c:dc:7c:b7:4b:33:ca:11:0a:55:01:b5:a4:99:49:1b:5f:14:
         de:50:4f:44:bf:bd:26:eb:d8:9d:6e:1a:c9:5f:61:e3:b7:e0:
         4c:67:66:2d:73:bf:24:a5:9f:8c:7b:63:89:e1:bf:32:e2:cf:
         92:bf:49:2e:63:bd:14:ff:2e:39:cc:1a:92:cc:1b:e7:22:9c:
         7d:a3:d8:97:7e:e6:b0:ea:20:82:b4:89:d9:0c:d7:df:c6:3b:
         37:cd:a9:d1:4a:6e:23:22:50:06:77:c0:a7:f2:69:d3:71:b0:
         db:e8:cf:42:52:b1:7d:3d:37:a8:7d:d6:7b:d4:c5:fe:43:60:
         7d:9a:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----