Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fe2385be50b2ea4c2d0c369ada2b5a0c83d04464.roa
File:                     fe2385be50b2ea4c2d0c369ada2b5a0c83d04464.roa (raw, json)
Hash identifier:          gWFC/NgaaAf5LYe9lFIPEiu+5ed5cjlM0sTRBbDTvjM=
Subject key identifier:   72:66:BB:4A:DF:5D:91:6F:DD:DE:E5:F2:78:76:07:2E:F0:31:32:FE
Certificate issuer:       /CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
Certificate serial:       219889
Authority key identifier: F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fe2385be50b2ea4c2d0c369ada2b5a0c83d04464.roa
Signing time:             Fri 11 Aug 2023 18:52:26 +0000
ROA not before:           Thu 10 Aug 2023 18:52:26 +0000
ROA not after:            Mon 11 Aug 2025 18:52:26 +0000
asID:                     273039
IP address blocks:        45.185.16.0/22 maxlen: 22
                          2803:5360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201737 (0x219889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Validity
            Not Before: Aug 10 18:52:26 2023 GMT
            Not After : Aug 11 18:52:26 2025 GMT
        Subject: CN=fe2385be50b2ea4c2d0c369ada2b5a0c83d04464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:49:27:9e:6e:5d:55:5a:5d:5e:4a:aa:cd:
                    5f:00:2f:ac:27:73:e5:d8:d9:e2:2b:10:3b:80:25:
                    5f:04:aa:bf:5a:82:00:94:4f:92:0e:50:c2:56:f3:
                    07:9d:69:95:bc:a1:90:cb:95:a8:0b:16:eb:f9:2e:
                    18:e0:31:c0:64:32:9e:dd:e6:41:41:5d:12:84:73:
                    f1:e3:b6:71:28:b7:50:2a:9a:7d:32:e4:03:c3:e3:
                    7e:bf:26:a3:2c:fb:d2:be:66:a8:56:3e:58:d3:5b:
                    99:bd:bf:46:60:3f:da:1c:52:f8:27:52:bc:cd:19:
                    5f:10:4e:48:91:d1:b7:32:92:e9:ff:4b:40:89:2c:
                    35:35:3e:ea:9a:4b:73:5a:cc:52:9f:8c:58:bb:f3:
                    1a:e0:77:94:5d:44:0e:dc:ce:97:ba:a3:87:c5:5b:
                    3f:80:04:68:01:b0:a1:b6:dd:a0:98:90:50:53:27:
                    3c:d1:13:aa:d9:d4:32:d6:26:5b:43:51:b1:37:3e:
                    c6:0b:a8:cc:19:14:57:a8:48:67:6b:8d:d0:a7:36:
                    a2:e7:44:41:d0:22:df:3f:c4:8a:c9:0e:43:10:dc:
                    bd:f1:65:57:3b:b6:6c:67:58:49:42:1d:95:00:de:
                    72:af:95:a8:5d:ea:d2:8c:25:55:05:69:d3:ca:b2:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:66:BB:4A:DF:5D:91:6F:DD:DE:E5:F2:78:76:07:2E:F0:31:32:FE
            X509v3 Authority Key Identifier:
                keyid:F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fe2385be50b2ea4c2d0c369ada2b5a0c83d04464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22
                IPv6:
                  2803:5360::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:b5:43:54:df:3b:78:c3:89:79:2e:fc:7b:d9:88:10:ea:
         46:64:15:48:e3:e8:ac:3a:2c:fe:ca:29:7a:0a:17:d4:e6:83:
         8e:3d:38:9a:fc:c0:13:15:41:44:6c:73:3c:69:c6:0b:e1:44:
         cb:32:82:e1:f4:9e:37:70:f2:b7:f3:a0:ec:18:a1:d3:10:4e:
         41:c1:7b:a9:5f:dd:6a:bc:b4:e0:ab:ec:86:97:8c:c6:ae:4f:
         c2:4e:2e:8f:4a:aa:a5:ce:ff:ef:83:1f:b8:69:3f:45:a4:96:
         a3:ea:76:79:83:68:d9:eb:6e:73:84:99:64:89:d3:9e:0e:8d:
         d9:33:8c:18:9c:33:a3:a5:87:5f:74:ff:2e:2a:dc:40:8c:63:
         42:25:91:21:77:22:11:39:ab:80:89:3e:25:e9:1f:00:1a:ae:
         8c:1b:17:5b:e6:53:65:b8:16:7c:4f:3e:5b:3e:55:45:fe:44:
         4c:11:0a:73:dd:11:de:d4:da:9b:53:45:97:76:fd:6c:6b:f6:
         f9:74:b6:84:c3:45:18:c7:2c:ea:45:57:98:49:8a:01:b6:62:
         2d:61:e1:d5:b2:52:5e:39:ce:65:bd:f2:2c:d5:d5:18:36:69:
         55:06:b5:a4:fa:39:b7:48:17:45:5a:ea:15:cc:51:bb:b0:13:
         74:3c:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----