Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/27490b2aaa2189424394028a87f38d0b72a8e019.roa
File:                     27490b2aaa2189424394028a87f38d0b72a8e019.roa (raw, json)
Hash identifier:          sYIdGsa9b55eEA5RDwynIsh/8s7ag9TZXlp071Eo1d8=
Subject key identifier:   CC:D1:21:96:1A:38:A6:44:B6:BD:A9:24:F4:A2:98:37:D1:DC:E2:0D
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       21760B
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/27490b2aaa2189424394028a87f38d0b72a8e019.roa
Signing time:             Wed 26 Jul 2023 16:27:44 +0000
ROA not before:           Tue 25 Jul 2023 16:27:44 +0000
ROA not after:            Sat 26 Jul 2025 16:27:44 +0000
asID:                     266671
IP address blocks:        45.225.75.0/24 maxlen: 24
                          2803:1920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192907 (0x21760b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Jul 25 16:27:44 2023 GMT
            Not After : Jul 26 16:27:44 2025 GMT
        Subject: CN=27490b2aaa2189424394028a87f38d0b72a8e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:84:75:c9:06:98:26:61:eb:67:05:25:4e:
                    ff:c1:75:90:23:ef:a0:9f:a5:67:35:0b:f8:2d:5c:
                    cf:27:97:ca:82:3e:7e:3e:a3:bd:f8:61:4e:d3:31:
                    0b:df:62:4e:2d:02:1f:a4:04:e1:5e:98:23:f1:b8:
                    7f:61:df:4d:55:a5:63:5a:ee:3c:93:29:3b:08:ac:
                    24:45:90:8e:a6:b9:6f:39:ae:5e:98:ff:1f:23:5a:
                    32:3f:0c:13:ce:61:48:8b:a4:43:e6:bf:42:3c:30:
                    36:cd:1d:3e:d7:f0:2e:90:a3:9e:d6:11:0c:bf:9b:
                    f6:a4:54:bb:4a:98:42:4c:52:00:bd:64:e5:ab:60:
                    01:ac:75:5f:0c:eb:bb:45:17:d1:2c:e2:ef:a6:11:
                    fb:4b:75:13:c6:82:ae:b6:1c:46:32:54:a1:7b:f5:
                    a3:e6:8e:82:ff:43:27:27:1f:6a:92:fb:0e:ce:e8:
                    06:2d:8a:f5:6a:2a:fc:e2:86:4b:8e:07:89:d8:a5:
                    19:49:0b:4f:08:9a:58:ee:6e:90:e6:3a:20:8e:1b:
                    15:b4:f0:99:32:65:c8:35:3b:49:75:1f:ad:20:9c:
                    1e:e5:81:e0:96:aa:d5:8c:82:e5:72:d4:06:47:fe:
                    51:e3:19:44:56:38:33:11:c2:4f:54:68:38:63:7a:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D1:21:96:1A:38:A6:44:B6:BD:A9:24:F4:A2:98:37:D1:DC:E2:0D
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/27490b2aaa2189424394028a87f38d0b72a8e019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:08:3b:a7:7c:2c:c3:17:67:8c:09:75:6c:5a:42:36:e0:b7:
         18:83:b0:73:a0:3d:8f:e7:e5:f0:ac:01:cb:54:95:2a:69:7d:
         9c:4b:7c:8f:3d:9f:20:b4:44:cf:39:88:f9:28:bc:c3:ab:d2:
         2a:f4:2b:57:45:ab:60:53:32:f9:c9:fc:5e:7c:75:40:a6:a6:
         6a:66:ae:ea:15:3b:80:db:ca:71:57:1b:1d:7b:e0:f9:a8:2e:
         36:ee:9a:cd:ef:de:57:44:3e:07:b7:32:b7:dd:cd:e5:d3:06:
         7e:9b:e9:90:3d:c3:21:46:be:31:0e:05:39:28:18:3a:ed:11:
         90:b7:5c:51:3b:0d:31:fe:21:f4:16:e0:ae:d8:9d:b5:69:6e:
         9c:a1:45:8f:3b:ec:f4:26:10:a3:00:00:ef:76:1d:dc:49:a7:
         92:6b:66:6d:e1:ee:7e:06:5c:2b:3c:67:d2:b5:8a:f3:ac:3a:
         57:f5:af:59:6c:c4:b6:d5:e9:25:e0:76:2f:e7:ae:3d:f0:2a:
         01:4c:71:d4:d4:fc:11:c9:26:76:d6:45:09:a3:e5:b6:31:c2:
         c8:40:94:c9:06:1f:1d:bc:bd:c0:19:15:f2:02:8b:1f:63:cc:
         3f:3c:c0:3b:eb:13:df:8f:cc:94:15:8d:2b:e4:0e:d0:62:32:
         68:ff:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----