Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/28482f49e1c471bf45328a55630eaafdc862275f.roa
File:                     28482f49e1c471bf45328a55630eaafdc862275f.roa (raw, json)
Hash identifier:          0Hr8pnRjetuszSNfps1Cfdz3az59ZzQq6/iIHVUpNxk=
Subject key identifier:   1C:1B:09:69:15:FF:6D:E5:03:F1:5A:B0:3F:97:30:34:B9:17:69:11
Certificate issuer:       /CN=83a2fa724a7b279c34deab04bfa5acdb5616a7d4
Certificate serial:       15A9AF
Authority key identifier: 83:92:73:34:A1:D8:11:39:56:F7:34:6D:15:90:E0:29:A1:17:79:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83a2fa724a7b279c34deab04bfa5acdb5616a7d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/28482f49e1c471bf45328a55630eaafdc862275f.roa
Signing time:             Sat 17 Jun 2023 08:30:05 +0000
ROA not before:           Fri 16 Jun 2023 08:30:05 +0000
ROA not after:            Sun 15 Jun 2025 08:30:05 +0000
asID:                     266732
IP address blocks:        45.231.72.0/22 maxlen: 24
                          2803:b320::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419695 (0x15a9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a2fa724a7b279c34deab04bfa5acdb5616a7d4
        Validity
            Not Before: Jun 16 08:30:05 2023 GMT
            Not After : Jun 15 08:30:05 2025 GMT
        Subject: CN=28482f49e1c471bf45328a55630eaafdc862275f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:0a:b2:f9:72:3e:91:f5:a8:fd:b5:4d:78:
                    4f:1e:31:ac:3f:5f:d6:e1:84:7b:d8:0a:1a:28:a7:
                    7a:37:5f:76:24:4e:c3:45:43:c0:9e:bd:e9:71:08:
                    1a:ab:4d:d6:cf:7a:57:35:aa:4f:bc:0f:69:ab:fc:
                    da:a1:60:84:24:73:d3:d3:bb:6b:69:2a:e3:4e:dd:
                    49:af:4f:7c:a0:e4:a9:22:82:ff:f9:b5:3d:09:65:
                    5e:1f:9f:98:c2:34:ac:04:c8:c2:39:ca:0c:1c:13:
                    45:e4:24:29:a9:d4:07:db:3d:7a:6e:24:2c:21:69:
                    57:70:1b:fd:97:0b:fa:42:07:3e:6f:3f:72:ad:80:
                    c4:fd:c6:05:a6:67:d7:f7:fa:ae:a6:7f:f9:a6:0c:
                    38:41:50:8c:4c:58:4b:cf:71:9a:4d:af:ee:64:df:
                    ea:72:ce:9a:20:79:32:c4:d1:c0:2e:80:a6:be:1e:
                    92:3b:e5:3b:d0:dc:85:6b:77:51:1e:fb:6e:75:02:
                    c8:69:26:c1:53:00:55:e4:10:41:64:fd:49:59:6f:
                    84:07:74:52:01:ba:94:de:5c:25:ad:9a:00:f9:2e:
                    3e:b1:74:a3:80:32:41:82:61:a5:cc:aa:f9:52:55:
                    f5:a3:cb:a4:b7:9f:40:73:bd:12:83:dc:bc:d0:12:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1B:09:69:15:FF:6D:E5:03:F1:5A:B0:3F:97:30:34:B9:17:69:11
            X509v3 Authority Key Identifier:
                keyid:83:92:73:34:A1:D8:11:39:56:F7:34:6D:15:90:E0:29:A1:17:79:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83a2fa724a7b279c34deab04bfa5acdb5616a7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/28482f49e1c471bf45328a55630eaafdc862275f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/83a2fa724a7b279c34deab04bfa5acdb5616a7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.72.0/22
                IPv6:
                  2803:b320::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:bf:cf:7d:5a:0d:66:63:fa:b7:2d:91:5d:b7:8c:c7:0b:
         32:07:c8:af:d4:72:d7:b6:ba:70:b0:e1:2c:2a:7c:e6:bd:5e:
         98:fe:47:21:83:7a:a4:9f:3c:c8:60:80:f5:b0:e3:5c:ec:93:
         70:d0:73:76:58:50:89:49:a4:2a:7e:14:87:f2:c0:24:ba:48:
         52:1a:52:d5:92:52:84:34:35:ed:19:f0:1b:d3:04:16:ed:ad:
         9a:f4:aa:d3:78:27:e7:46:31:13:9c:be:62:a9:53:1e:5c:c7:
         41:f6:df:ab:81:22:f2:58:69:53:91:2e:3f:12:13:0d:ce:dc:
         58:83:20:04:47:ce:54:50:0b:c2:d9:e0:53:d8:ac:67:2f:e4:
         d9:3e:dd:e4:02:9f:54:92:a7:00:19:5a:86:c3:30:aa:ad:5f:
         c0:73:02:c3:43:ac:83:e9:eb:0a:a3:a8:8f:3c:5a:a0:a1:d8:
         37:08:33:6f:b8:1b:fe:c8:d3:46:2f:25:a7:eb:39:11:09:44:
         c2:88:e8:d8:5e:ec:4c:25:c8:8f:2a:b2:73:b9:b3:39:97:ca:
         c4:a8:6f:75:23:13:12:96:93:f2:58:9f:d1:b3:bb:51:4f:03:
         2f:3f:91:c9:fc:ef:62:7d:a3:e3:27:3c:f7:35:48:69:4b:c0:
         6f:9e:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----