Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/1605f1ecd03f340f24d3d84d7ea65a533fc22104.roa
File:                     1605f1ecd03f340f24d3d84d7ea65a533fc22104.roa (raw, json)
Hash identifier:          YQdmpgKrhib2979nW2IDJDUViyebYDfmejTEKOXAeZ4=
Subject key identifier:   ED:36:24:61:4B:70:4F:31:75:82:81:1B:16:DB:FD:1F:54:E5:7F:A4
Certificate issuer:       /CN=2fb556622985526f071e39da340bb282a107986e
Certificate serial:       124C3B
Authority key identifier: A3:38:C6:1B:95:60:5A:C9:08:B7:81:80:63:5D:64:25:62:BD:3D:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fb556622985526f071e39da340bb282a107986e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/1605f1ecd03f340f24d3d84d7ea65a533fc22104.roa
Signing time:             Thu 14 Mar 2024 19:30:44 +0000
ROA not before:           Thu 14 Mar 2024 19:30:43 +0000
ROA not after:            Wed 14 Mar 2029 19:30:43 +0000
asID:                     64117
IP address blocks:        45.185.220.0/22 maxlen: 24
                          2803:d360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199163 (0x124c3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb556622985526f071e39da340bb282a107986e
        Validity
            Not Before: Mar 14 19:30:43 2024 GMT
            Not After : Mar 14 19:30:43 2029 GMT
        Subject: CN=1605f1ecd03f340f24d3d84d7ea65a533fc22104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:30:2a:d5:e5:43:90:ee:18:77:27:1a:f1:
                    e8:c7:ab:f2:0a:7e:cb:f6:b7:44:19:74:1c:d0:c1:
                    4c:c5:8a:fa:75:62:c8:80:4f:f2:0a:ad:9b:c4:82:
                    20:a5:5d:74:1e:c3:3b:28:9d:6a:86:19:4d:24:4e:
                    7b:c5:ee:75:16:95:64:f0:82:cc:4e:b2:ee:a9:ec:
                    26:2c:57:04:7e:d7:de:c5:77:a5:28:a5:fd:25:a4:
                    8e:b9:6a:c6:e5:f5:c2:ba:78:64:eb:12:4b:4a:c1:
                    e8:c8:da:9b:31:51:37:21:79:f8:3a:60:2b:0f:41:
                    93:c1:29:e6:29:1e:be:14:50:0c:33:3b:96:9c:bf:
                    06:63:13:0c:4d:98:86:25:49:d7:10:c7:0b:6b:5e:
                    66:9c:63:56:f0:ca:4c:ce:82:cc:46:1e:15:1a:5b:
                    40:d1:e4:22:e2:7f:2f:30:6c:62:14:d6:b3:1e:c8:
                    9b:2c:73:97:d3:ea:70:e4:64:64:25:90:39:01:d7:
                    f3:34:9b:0d:0e:4d:1e:e7:96:da:ed:49:8e:fc:7a:
                    d6:8c:fe:f3:45:e9:dc:a2:92:ed:f9:e6:63:e9:74:
                    eb:75:f6:ff:52:d1:43:21:0c:f9:10:ce:c7:c4:fb:
                    78:25:67:35:20:43:cb:b4:e0:1a:a7:8e:f1:b4:10:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:24:61:4B:70:4F:31:75:82:81:1B:16:DB:FD:1F:54:E5:7F:A4
            X509v3 Authority Key Identifier:
                keyid:A3:38:C6:1B:95:60:5A:C9:08:B7:81:80:63:5D:64:25:62:BD:3D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fb556622985526f071e39da340bb282a107986e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/1605f1ecd03f340f24d3d84d7ea65a533fc22104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22
                IPv6:
                  2803:d360::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:46:5c:5e:02:c0:76:64:63:60:9d:f2:30:ab:bc:dd:cf:
         05:55:24:0c:6a:87:0c:8d:68:ac:3b:3d:10:5f:f7:74:16:fd:
         31:07:ca:96:21:8c:13:c9:50:25:cb:98:aa:ba:93:07:e2:3d:
         40:a6:ba:09:83:c6:f3:67:63:85:50:44:50:06:05:30:e3:2b:
         63:e1:c6:69:aa:fd:ea:e6:f7:29:fa:0b:5c:cb:63:50:ed:e8:
         ef:1a:5c:42:35:fd:12:70:b0:4b:60:01:4d:f1:29:3b:35:d7:
         6b:e3:b3:60:8c:17:e2:fc:c7:1c:d0:8d:51:30:2b:c8:61:41:
         a4:cb:72:96:48:42:95:eb:e4:6d:15:c6:f2:ce:85:82:c9:d0:
         4d:8d:c9:f5:e1:c3:b6:0c:c8:80:c9:8d:32:53:f7:7a:34:e0:
         ce:6e:64:c3:9e:d9:a4:fd:75:fd:64:19:3f:d9:68:ad:87:f0:
         7b:ec:77:21:6e:f2:ae:c5:ef:03:55:80:20:95:98:89:a0:db:
         ae:d0:9f:1a:a3:bf:63:9e:cf:a3:91:7e:c4:cd:13:d4:80:b1:
         c2:85:92:4a:0c:07:78:77:a9:c0:73:54:41:32:ef:43:ba:36:
         bc:79:7f:39:ca:ab:30:1f:a8:c3:48:7e:ff:6f:78:87:00:d8:
         68:4d:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----