Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/b83766f0b1a1ef35d1a83b888100dfec04a67d70.roa
File:                     b83766f0b1a1ef35d1a83b888100dfec04a67d70.roa (raw, json)
Hash identifier:          3BOV6NBP5fS3gtHqFpHlVE8yvU2c5bKk8GOoktLCAxU=
Subject key identifier:   BA:ED:57:5B:D3:01:24:8F:85:F2:53:42:BC:3A:30:33:AD:25:7B:32
Certificate issuer:       /CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
Certificate serial:       21C078
Authority key identifier: F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/b83766f0b1a1ef35d1a83b888100dfec04a67d70.roa
Signing time:             Tue 15 Aug 2023 17:01:39 +0000
ROA not before:           Mon 14 Aug 2023 17:01:39 +0000
ROA not after:            Fri 15 Aug 2025 17:01:39 +0000
asID:                     273039
IP address blocks:        45.185.16.0/22 maxlen: 22
                          2803:5360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211960 (0x21c078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Validity
            Not Before: Aug 14 17:01:39 2023 GMT
            Not After : Aug 15 17:01:39 2025 GMT
        Subject: CN=b83766f0b1a1ef35d1a83b888100dfec04a67d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:dc:8f:43:7c:c0:64:e9:25:79:eb:52:a3:
                    95:b1:85:7a:56:2a:0b:19:80:68:2c:10:b0:05:ee:
                    c0:45:0b:89:b1:1d:b2:34:83:ba:c3:8f:a3:15:8c:
                    9b:87:87:d9:9e:35:bf:40:b8:fc:35:7b:fd:22:1d:
                    86:3f:5b:19:ad:ab:3b:b1:0d:36:d5:f3:2f:3a:d4:
                    4b:0a:72:73:78:d6:88:1f:80:aa:22:fd:db:ff:56:
                    b4:99:bf:f8:ed:ac:7f:ab:62:85:4c:00:74:4d:87:
                    dc:ff:39:4b:de:00:e2:c9:f5:bf:e8:64:53:18:87:
                    a2:d5:b7:a0:d2:8d:4e:4b:fc:16:c1:90:3f:26:6a:
                    11:59:1a:0d:e2:81:76:8a:69:05:bd:82:d6:b3:5d:
                    d0:f3:8f:2d:c7:24:3f:f9:e3:64:4b:9c:1d:48:ee:
                    7b:95:4f:e4:8c:81:25:d5:58:88:87:c9:f7:22:4d:
                    c0:41:a5:58:36:45:de:f1:25:b5:91:8c:51:12:50:
                    14:64:f6:4e:0e:5a:45:78:45:6b:44:b2:79:fc:0c:
                    3e:ca:7b:84:5c:96:b7:79:31:3e:60:e6:c0:8a:48:
                    47:f0:75:1a:c5:a4:be:f7:81:54:dd:a9:b9:ac:df:
                    5e:51:6e:5d:d3:76:47:ca:2d:b7:16:6b:7a:9d:8b:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:ED:57:5B:D3:01:24:8F:85:F2:53:42:BC:3A:30:33:AD:25:7B:32
            X509v3 Authority Key Identifier:
                keyid:F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/b83766f0b1a1ef35d1a83b888100dfec04a67d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22
                IPv6:
                  2803:5360::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:b2:e5:71:9c:c3:50:cc:f9:bd:e3:8a:2c:f8:c3:14:02:
         67:9b:c9:c7:96:89:3f:d3:07:59:f2:4e:b8:05:4e:51:d2:44:
         a7:1e:27:44:b7:17:37:57:b3:27:88:e2:2a:37:e4:86:5a:2f:
         94:54:8f:39:6f:c2:cf:25:c3:4b:3c:75:ad:2a:3f:a2:51:7d:
         98:d8:c7:61:b1:0b:55:d4:91:e6:43:57:91:28:6f:b3:2b:94:
         26:18:74:f5:35:07:d8:7e:c0:71:0c:a1:61:d4:1c:a5:69:1f:
         09:d8:6e:7e:78:72:2a:eb:24:dd:3a:3d:23:55:d0:4e:54:93:
         6c:77:1b:5a:44:9f:ed:ad:de:21:83:90:0b:51:a5:bb:a8:28:
         58:0f:cd:7a:00:ca:6a:8e:bb:29:ab:7c:01:64:90:b4:b4:1e:
         f5:a2:85:4f:6a:06:11:80:d6:1a:ca:25:77:21:f2:9e:84:e1:
         61:a2:b6:1a:8c:57:93:4f:20:9d:78:2e:60:e2:18:60:39:a1:
         3d:75:e8:d9:47:60:89:dc:78:20:c2:a6:06:f6:e2:3b:ab:7b:
         db:ea:cb:fd:d4:3c:75:0a:a2:4e:60:6a:13:7e:f8:93:32:d7:
         ac:5d:fc:54:2a:21:1f:03:c6:41:3b:5c:fc:3a:ae:64:dc:45:
         bb:bc:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----