Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/3ae38c7183586d2b51266ce8f3d742b71dfee7a0.roa
File:                     3ae38c7183586d2b51266ce8f3d742b71dfee7a0.roa (raw, json)
Hash identifier:          TEnO+HnyV6qNldPfnTBR2zInHURsYPyZf08FR1QAmYQ=
Subject key identifier:   84:57:26:42:4A:2D:6B:32:57:15:F3:74:2A:4E:0A:12:80:8F:D5:9F
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       19663B
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/3ae38c7183586d2b51266ce8f3d742b71dfee7a0.roa
Signing time:             Thu 18 May 2023 16:07:59 +0000
ROA not before:           Wed 17 May 2023 16:07:58 +0000
ROA not after:            Sun 18 May 2025 16:07:58 +0000
asID:                     267678
IP address blocks:        45.162.76.0/22 maxlen: 24
                          2803:aea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664571 (0x19663b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: May 17 16:07:58 2023 GMT
            Not After : May 18 16:07:58 2025 GMT
        Subject: CN=3ae38c7183586d2b51266ce8f3d742b71dfee7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:1b:7e:17:31:a5:b2:8f:8b:a3:7c:5b:9b:
                    d1:ad:8c:15:d9:08:b4:74:81:56:a1:c4:de:b4:b9:
                    0f:93:ab:87:1a:bd:9c:52:5d:b7:73:5a:c4:2d:47:
                    29:5b:44:74:88:2f:2b:65:f2:a1:1f:b8:bc:18:30:
                    13:29:39:c8:d2:fd:50:85:76:92:93:92:36:ce:bb:
                    04:7d:a4:3e:ec:b9:b1:64:2e:71:cd:4c:b9:a0:a7:
                    c5:2d:ac:37:6e:95:fc:cd:01:05:d9:0e:89:78:45:
                    34:a9:6b:3e:97:12:b0:0d:89:85:d3:ef:c7:09:3e:
                    5c:1e:35:f4:34:27:b0:1e:60:3f:8a:93:19:dd:72:
                    c6:07:13:74:73:c3:2b:6b:8a:ae:0f:bd:f1:66:e9:
                    33:89:dc:c2:7f:45:47:54:bc:4e:2c:d0:b6:03:42:
                    68:cd:aa:93:f6:69:8b:d9:94:49:fd:e0:3f:9c:dd:
                    1d:4e:42:94:72:0c:55:c4:b3:c8:a9:b8:0b:71:81:
                    5f:b1:be:43:b9:7d:7b:7a:51:9d:1e:8f:c3:f6:68:
                    3d:d1:8d:ef:b3:cd:e0:a8:64:80:a5:86:72:04:7c:
                    bc:ec:1d:8c:89:82:a8:6e:22:04:c1:bb:42:72:37:
                    ce:56:ed:2a:8a:77:fd:8f:18:96:b2:93:62:0c:3b:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:57:26:42:4A:2D:6B:32:57:15:F3:74:2A:4E:0A:12:80:8F:D5:9F
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/3ae38c7183586d2b51266ce8f3d742b71dfee7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:b6:85:ae:8b:81:9e:50:f5:e0:7d:e3:9b:51:c3:75:3c:
         fe:c3:3b:8b:c2:15:1c:83:96:b6:b3:55:3e:11:cb:f3:96:1e:
         e4:52:0b:f2:bf:c6:60:9b:08:65:61:3a:a6:ec:d2:3e:8c:3a:
         1d:70:a6:74:e3:c2:37:b7:94:ca:32:5a:e5:34:f7:92:de:48:
         77:6d:9a:a8:e0:c6:0a:c2:e8:c7:09:b0:51:f0:05:14:ba:0b:
         12:94:63:a2:60:46:fb:1b:18:c2:e5:f4:25:5e:45:13:b5:06:
         04:c6:24:ee:29:b0:d0:36:ab:b8:26:62:07:68:a0:5f:19:69:
         83:b2:65:e3:5d:4d:d1:d0:b0:30:3a:fa:ec:7a:04:95:bc:07:
         fd:23:c2:6e:90:46:b9:10:a3:e7:78:d6:84:61:cf:8a:da:d1:
         a5:2d:b0:76:42:32:b4:0e:17:64:23:ee:e4:12:6a:e7:c8:bf:
         35:eb:7a:b9:e5:07:b4:49:77:78:c8:3d:83:59:d6:35:49:33:
         68:35:cb:fd:e8:60:39:7d:b6:f0:b6:6d:47:4c:b3:58:8f:0c:
         2e:f6:b9:ca:14:fa:73:47:19:a9:fa:7f:a4:f1:e4:86:3f:5b:
         3e:8c:47:e4:b4:5a:1b:cf:58:fd:d7:b3:90:db:e3:d2:e1:13:
         5d:fd:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----