Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/4d484fec46d775d5a56557441b365b6c221df177.roa
File:                     4d484fec46d775d5a56557441b365b6c221df177.roa (raw, json)
Hash identifier:          tYZi5Q8gPtJAJ6sCzx6vj3mIeqrqoiqRrVjlnVbWwQo=
Subject key identifier:   3E:97:51:76:33:55:12:7E:9F:79:47:3E:B5:D2:F5:DC:18:8A:5F:84
Certificate issuer:       /CN=451e0833b865e00364f8158e841786790d21e50c
Certificate serial:       245777
Authority key identifier: 50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/4d484fec46d775d5a56557441b365b6c221df177.roa
Signing time:             Sat 30 Dec 2023 17:31:38 +0000
ROA not before:           Sat 30 Dec 2023 17:31:37 +0000
ROA not after:            Tue 30 Dec 2025 17:31:37 +0000
asID:                     269844
IP address blocks:        45.188.219.0/24 maxlen: 24
                          2801:1b:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381687 (0x245777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e0833b865e00364f8158e841786790d21e50c
        Validity
            Not Before: Dec 30 17:31:37 2023 GMT
            Not After : Dec 30 17:31:37 2025 GMT
        Subject: CN=4d484fec46d775d5a56557441b365b6c221df177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:97:e6:b7:3d:2b:59:f3:97:89:df:9c:ec:
                    39:60:03:2e:53:52:aa:09:ac:89:af:33:ff:8f:81:
                    3e:f8:3a:b0:2b:b6:cb:dc:57:43:00:1a:9a:27:2a:
                    d6:48:cd:ba:fb:0a:de:4b:97:db:de:de:ce:7e:25:
                    bb:2d:70:10:fe:81:d6:ff:f8:e9:f5:ba:5d:c6:61:
                    15:36:cf:89:ff:08:fe:d9:31:32:9b:38:43:75:09:
                    d4:1a:ec:72:8b:da:86:be:35:b8:26:5e:92:ac:77:
                    b4:16:d5:e8:62:d3:16:31:a7:17:68:bb:c4:1c:12:
                    28:3f:7d:b1:ec:25:c5:f2:c1:9a:36:e6:28:cb:e2:
                    e3:c6:86:da:ae:c0:b3:a5:77:7a:11:ad:e7:c2:fd:
                    18:0e:ab:6e:80:43:fc:a8:4e:43:b6:d7:6f:8a:54:
                    96:6b:44:9f:16:75:ac:e8:7e:16:b2:28:bb:11:30:
                    90:50:1b:b2:a1:87:af:ea:0d:e0:77:ac:47:37:4e:
                    ba:49:f5:04:ff:38:52:28:bc:07:e8:ad:89:c3:82:
                    44:b6:40:95:a9:76:7f:ec:27:47:b3:9c:b4:e3:43:
                    d0:90:91:03:e8:c4:c2:90:54:e9:93:ff:43:4f:7e:
                    85:b5:73:fd:1a:a7:57:97:f4:98:38:e4:30:21:f1:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:51:76:33:55:12:7E:9F:79:47:3E:B5:D2:F5:DC:18:8A:5F:84
            X509v3 Authority Key Identifier:
                keyid:50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/4d484fec46d775d5a56557441b365b6c221df177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/451e0833b865e00364f8158e841786790d21e50c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.219.0/24
                IPv6:
                  2801:1b:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:47:a5:e6:97:ca:4a:75:49:18:60:57:b1:64:45:58:52:
         0e:5f:54:28:b0:8a:58:c8:a5:fb:d5:f2:38:01:b2:ca:05:49:
         f8:e5:1b:dd:17:10:a9:3a:9e:89:04:a9:f0:15:db:88:a9:ee:
         a1:c7:e7:18:34:19:ff:4f:12:8d:fe:c2:09:f6:fa:c3:61:5f:
         6b:d8:cc:11:1c:c3:2a:f5:49:22:85:e6:b2:ae:3b:6c:03:f0:
         5f:b8:d4:f5:22:b4:87:c6:09:84:b1:55:e7:8e:98:8b:e9:1e:
         5f:5e:93:df:88:fc:b2:ee:2f:2d:a5:a5:b9:64:92:43:80:f3:
         26:10:9d:d7:52:bd:a4:84:4a:8a:e0:6c:8c:b0:4f:d7:23:26:
         8b:c5:7c:12:71:6c:1d:bc:79:76:93:83:5c:df:1d:97:4a:28:
         e3:32:45:00:13:e4:25:9a:b7:67:bc:dc:9c:2d:1f:de:56:e1:
         aa:66:8f:0c:99:1e:97:32:7b:2c:c2:ce:9f:19:d0:89:89:be:
         98:f9:6d:28:f8:d6:76:29:ae:84:ed:c7:8f:69:e0:14:37:1c:
         4f:59:8b:ce:84:d1:c5:f9:08:b1:97:ef:40:01:a5:44:67:69:
         9b:77:3c:20:4d:89:3c:ce:76:5d:d5:5c:00:15:0a:e8:f2:f3:
         b9:6e:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----