Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1244c3118865d1b9ac17c9752d2ae3858fecdf55.roa
File:                     1244c3118865d1b9ac17c9752d2ae3858fecdf55.roa (raw, json)
Hash identifier:          MDI24dIkk2FnQ+UcAbiRyLFEohLEbaGcBnT4sAqV92I=
Subject key identifier:   6E:91:4E:30:76:2C:35:E7:21:D6:06:22:1E:E2:D2:81:AD:77:B9:AC
Certificate issuer:       /CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
Certificate serial:       254CF7
Authority key identifier: 62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1244c3118865d1b9ac17c9752d2ae3858fecdf55.roa
Signing time:             Fri 05 Jan 2024 22:34:21 +0000
ROA not before:           Fri 05 Jan 2024 22:34:21 +0000
ROA not after:            Mon 05 Jan 2026 22:34:21 +0000
asID:                     48252
IP address blocks:        45.169.164.0/22 maxlen: 24
                          2803:3a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444535 (0x254cf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
        Validity
            Not Before: Jan  5 22:34:21 2024 GMT
            Not After : Jan  5 22:34:21 2026 GMT
        Subject: CN=1244c3118865d1b9ac17c9752d2ae3858fecdf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:1c:3e:5f:cb:98:18:72:20:c6:e1:ed:1e:
                    1b:ac:cd:58:6e:43:9b:52:d9:d4:33:51:7e:83:46:
                    43:cc:78:a1:1c:fb:5a:76:30:19:9f:6b:30:3f:90:
                    27:63:c9:83:a1:e6:f0:80:d0:f6:ba:74:51:61:8f:
                    0b:24:f9:d7:d0:2f:63:d7:7e:b5:e5:70:31:04:04:
                    20:86:0d:f6:ea:a9:7d:81:0c:51:99:ea:91:7c:7f:
                    a9:ef:a1:ef:a4:3b:0d:76:fb:af:df:b6:79:80:8a:
                    42:fb:53:5c:74:fe:2f:ad:13:49:72:1a:07:b9:82:
                    14:e4:34:5c:8c:e7:98:d7:32:a6:d2:1a:05:6d:ca:
                    39:11:90:ab:17:92:bf:ef:c4:27:9e:0c:73:83:f1:
                    b8:b5:28:58:84:03:ff:7f:90:11:e3:0b:9d:a3:a8:
                    6e:99:2b:5e:26:0b:75:ee:46:b3:9b:7c:d0:46:c2:
                    67:a6:57:3c:4f:8b:de:8e:13:bd:b4:9a:9b:e3:4e:
                    41:8e:be:b2:dd:4a:0f:01:59:62:ce:9e:c5:52:ef:
                    f0:50:ae:15:73:cf:b4:ba:f4:40:e8:7c:83:a6:bb:
                    05:12:b4:92:27:32:43:ae:5b:b1:c0:e0:85:82:34:
                    f4:88:80:d4:2e:26:44:9a:ad:9d:ee:80:df:9f:f5:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:4E:30:76:2C:35:E7:21:D6:06:22:1E:E2:D2:81:AD:77:B9:AC
            X509v3 Authority Key Identifier:
                keyid:62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1244c3118865d1b9ac17c9752d2ae3858fecdf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.164.0/22
                IPv6:
                  2803:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:42:78:93:63:51:9b:17:9a:8f:03:e9:b6:16:5d:a8:0e:
         cd:fd:40:07:ad:f9:5f:30:64:9b:a0:ea:7f:77:e7:94:a6:43:
         6c:cb:cc:f6:65:4e:6e:e0:4b:69:93:81:66:bb:08:9b:4c:9d:
         17:dc:10:c7:37:de:90:8f:50:cd:c8:3a:d6:e8:ed:b0:72:5c:
         a0:0c:0e:f2:c5:35:bb:21:6b:38:f6:44:c9:61:7e:22:01:57:
         af:8b:e3:eb:ee:13:d7:b4:da:a5:8c:b6:7d:6c:69:6e:ff:50:
         c4:7b:7d:85:af:d6:f5:b7:00:11:f2:04:ec:1c:a6:55:5b:27:
         94:d8:04:d1:c0:c9:ef:1f:48:2e:a4:d2:5c:bd:3c:af:ed:fd:
         73:62:92:c7:d8:14:9d:19:45:58:6a:7e:ee:74:1e:22:86:fc:
         41:75:69:b1:6a:23:50:56:bc:1d:00:fb:ad:3c:e7:59:ab:65:
         c0:c2:a2:82:13:09:fb:ce:db:1f:89:f2:07:37:d8:cd:09:62:
         d5:10:36:d9:8f:5f:51:b5:a7:a9:02:80:94:af:44:f9:8e:87:
         22:0a:7b:29:52:2d:eb:4b:64:cf:e7:f5:c0:5f:7a:ec:8a:7d:
         f0:60:61:8d:17:b1:56:73:37:06:35:ea:5b:cd:52:92:45:d6:
         8d:4f:d7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----