Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/69089f592a025b68c61727161199c9ec6fa7e52c.roa
File:                     69089f592a025b68c61727161199c9ec6fa7e52c.roa (raw, json)
Hash identifier:          98YDL6dPtMOX2EG9vAIWG4bS9hQ2IEx29B+e8g571H8=
Subject key identifier:   12:CC:30:86:8D:F4:FC:D1:74:DF:4F:5B:9B:D7:8A:9B:D9:5F:A4:C1
Certificate issuer:       /CN=2fa4b13a4a672f37db0f6810d1b58a155fed879a
Certificate serial:       2794D2
Authority key identifier: 01:BB:29:6E:17:B7:02:9E:A8:C5:A6:02:39:9F:2A:96:28:39:D3:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fa4b13a4a672f37db0f6810d1b58a155fed879a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/69089f592a025b68c61727161199c9ec6fa7e52c.roa
Signing time:             Wed 10 Apr 2024 03:31:16 +0000
ROA not before:           Wed 10 Apr 2024 03:31:16 +0000
ROA not after:            Fri 10 Apr 2026 03:31:16 +0000
asID:                     267888
IP address blocks:        45.178.164.0/22 maxlen: 25
                          2803:fa60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594002 (0x2794d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4b13a4a672f37db0f6810d1b58a155fed879a
        Validity
            Not Before: Apr 10 03:31:16 2024 GMT
            Not After : Apr 10 03:31:16 2026 GMT
        Subject: CN=69089f592a025b68c61727161199c9ec6fa7e52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:87:ee:62:ba:ec:53:50:25:48:a8:ef:23:
                    20:40:2d:5d:2d:b3:ba:1f:16:77:14:73:84:25:9c:
                    8e:3b:1a:86:cd:94:6b:f3:e3:26:05:12:38:34:a5:
                    31:53:25:ad:fd:0e:89:7f:69:57:f4:b1:17:3a:aa:
                    1e:37:fd:1c:6b:e6:97:bd:8e:e5:e9:50:75:9b:90:
                    1d:13:93:1f:e6:3e:8e:9f:27:cf:d2:2d:bc:f9:7e:
                    0a:03:21:30:c5:da:67:41:e5:d6:16:52:04:36:5c:
                    64:75:7d:c0:d5:23:85:f6:e0:3c:f4:75:0c:a8:34:
                    94:51:06:d3:f5:bc:db:e0:21:6c:3e:f6:ee:57:61:
                    92:75:b1:1a:6c:68:b2:ea:32:d0:65:aa:c7:bd:30:
                    20:35:28:e2:39:92:30:7c:1c:cf:f9:f0:6a:72:9c:
                    a8:f9:3f:b5:d0:75:f6:e1:78:b1:f0:3f:5d:ae:39:
                    8c:07:71:7d:ad:7b:5a:3e:b1:71:5c:d2:c6:05:92:
                    fa:ee:75:98:e4:43:87:65:1a:cc:64:54:16:89:e5:
                    ab:e7:db:9d:eb:02:8d:b0:56:f8:b6:74:cb:b0:0d:
                    4e:b8:ac:fa:9b:25:d9:68:2e:e1:ab:1c:a7:02:c7:
                    2d:2e:57:ad:25:0c:d0:e3:a2:ac:3c:b8:50:ee:a5:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:30:86:8D:F4:FC:D1:74:DF:4F:5B:9B:D7:8A:9B:D9:5F:A4:C1
            X509v3 Authority Key Identifier:
                keyid:01:BB:29:6E:17:B7:02:9E:A8:C5:A6:02:39:9F:2A:96:28:39:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fa4b13a4a672f37db0f6810d1b58a155fed879a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/69089f592a025b68c61727161199c9ec6fa7e52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/2fa4b13a4a672f37db0f6810d1b58a155fed879a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.164.0/22
                IPv6:
                  2803:fa60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:ff:a3:17:6b:08:8c:25:84:b8:32:b3:94:74:3c:66:e6:1e:
         c7:41:76:56:8a:71:7c:ec:4b:09:80:5f:ce:23:c4:cc:7d:e2:
         2b:bb:40:c1:54:ab:e4:39:5f:6c:64:70:e8:44:ee:69:d1:e6:
         f5:d2:e1:f5:68:f3:0a:36:8a:72:49:27:b1:4b:0e:ae:ce:1f:
         90:e1:41:20:f1:ed:f7:6a:bb:9e:5b:d7:96:df:a5:2a:7a:92:
         66:64:79:fd:e3:61:bf:b6:f1:c7:e7:30:e4:5f:70:08:c2:e7:
         f0:d6:ea:ab:ed:4d:49:dc:49:e2:90:57:7b:fc:0d:9e:53:a0:
         6a:31:32:01:6b:0a:e6:83:2d:fd:31:2f:a0:6f:98:ae:91:1e:
         50:15:7b:41:d5:ba:9d:fb:91:aa:cc:bc:ca:08:b0:ed:d0:04:
         70:3a:38:7a:06:83:b2:92:25:6d:c4:0c:f0:83:20:4c:04:2d:
         83:9e:a6:0c:b8:d0:08:a2:f7:fb:f1:02:b3:e6:bf:18:82:9d:
         4a:1e:8d:39:94:05:dd:a6:c3:fa:00:56:57:2c:88:5f:d9:b5:
         87:b4:4d:89:0b:24:2b:40:85:f7:0c:2b:3d:c1:24:b8:62:17:
         68:0d:85:07:9a:c7:5a:9b:2d:c1:7d:22:3c:c6:86:d5:a2:09:
         6a:38:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----