Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/f99e54b31af48d5c1d49c3ce9f3e9d9bf0668ded.roa
File:                     f99e54b31af48d5c1d49c3ce9f3e9d9bf0668ded.roa (raw, json)
Hash identifier:          iCKjCRKTixycrPTC9pBp9qKzw4v88RzW40NOYqrXXBo=
Subject key identifier:   C1:24:20:AB:CF:9B:69:3D:1D:13:6F:76:BD:39:A1:E4:A6:F0:33:F0
Certificate issuer:       /CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
Certificate serial:       1AEB20
Authority key identifier: 7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/f99e54b31af48d5c1d49c3ce9f3e9d9bf0668ded.roa
Signing time:             Fri 16 Feb 2024 07:30:11 +0000
ROA not before:           Fri 16 Feb 2024 07:30:11 +0000
ROA not after:            Sun 15 Feb 2026 07:30:11 +0000
asID:                     271843
IP address blocks:        45.162.132.0/24 maxlen: 24
                          45.162.133.0/24 maxlen: 24
                          45.162.134.0/24 maxlen: 24
                          2803:f810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764128 (0x1aeb20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
        Validity
            Not Before: Feb 16 07:30:11 2024 GMT
            Not After : Feb 15 07:30:11 2026 GMT
        Subject: CN=f99e54b31af48d5c1d49c3ce9f3e9d9bf0668ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:bb:bc:8d:16:c7:b6:ae:90:1b:d0:59:15:
                    4f:27:b3:1c:a6:41:e5:c7:1a:b2:28:e7:5e:eb:ce:
                    94:79:c2:9e:23:8a:08:1d:59:44:1d:98:18:48:3f:
                    0e:7c:4d:95:21:f2:5c:90:d5:1f:6c:01:cb:3a:49:
                    56:3c:6a:fe:67:49:56:c8:13:85:00:53:f0:51:33:
                    d9:a4:37:f1:d9:5e:5c:6f:9f:b6:70:d1:46:80:a5:
                    c4:ae:52:e6:82:4b:7d:5b:b5:4b:e9:c6:55:f0:53:
                    da:7b:35:f4:6f:1d:cf:1c:3d:48:1c:2a:9d:4f:46:
                    7f:fa:70:c6:13:ed:20:fd:f8:9e:dd:67:95:94:6c:
                    73:9b:a6:2a:85:85:36:d5:3b:2e:cd:81:0e:2e:23:
                    8e:5b:ba:99:8a:76:6a:3c:f5:1b:b5:20:15:87:01:
                    5c:49:1f:18:5d:f6:82:d8:4e:37:0c:d6:ff:6b:88:
                    51:d6:25:0c:66:3b:1e:3a:47:89:71:63:45:53:9d:
                    f6:60:0a:cb:ad:c7:1b:18:9b:57:b4:1c:f3:bd:13:
                    30:0f:2d:81:d6:b3:47:99:30:12:23:d3:09:f8:4d:
                    a9:e2:60:1f:91:12:f3:68:12:0a:ba:23:0c:2e:0e:
                    53:d4:09:41:fa:87:61:c7:8f:ec:30:83:ec:82:de:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:24:20:AB:CF:9B:69:3D:1D:13:6F:76:BD:39:A1:E4:A6:F0:33:F0
            X509v3 Authority Key Identifier:
                keyid:7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/f99e54b31af48d5c1d49c3ce9f3e9d9bf0668ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0-45.162.134.255
                IPv6:
                  2803:f810::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:94:06:dd:e2:54:4b:5e:ab:6c:b8:a3:7c:ea:ba:60:0a:2f:
         1a:c5:3c:77:3e:cf:f8:8c:23:2c:93:d2:ee:9e:fe:74:f5:f3:
         62:92:f8:82:a5:04:61:b9:26:4c:a4:ca:c2:16:e0:56:e9:fd:
         0a:53:cc:b6:94:54:e2:d7:a8:3b:b6:66:78:8a:54:33:fb:77:
         4b:6e:46:ab:03:0a:34:7d:db:c3:56:d4:66:48:ad:7b:d6:39:
         86:a3:53:3c:8e:8d:99:70:f3:32:6e:65:11:1b:44:5c:58:c4:
         9d:13:c4:16:f8:c4:fe:30:e4:8a:bd:9e:b5:a7:83:4f:3e:58:
         d9:38:88:a4:82:37:03:dd:f9:d3:d3:cd:62:87:cb:c6:9d:6a:
         0e:88:2f:1c:c4:35:02:e1:45:b6:7c:32:88:9f:9b:db:6f:21:
         b9:ca:5d:a9:fe:d1:d4:b3:8a:4e:46:73:9e:15:b4:7d:f7:e5:
         d7:77:97:40:df:75:79:cf:ae:55:79:e8:27:0a:1b:ee:40:db:
         89:e9:10:d7:15:69:8a:8a:ee:18:a1:95:e7:e5:27:d0:f0:15:
         38:17:47:3f:9b:19:50:e0:bf:e1:76:20:01:da:fe:a3:51:f9:
         a2:dd:67:e3:bb:ff:fd:29:b4:90:6c:9e:8d:4a:0a:9f:3c:7a:
         99:e2:67:21
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDGusgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
YzA4OWMyMjFkMGRiYzg3MGY4OTIxN2M0NmM2YThmNWEzNTc5MTAwHhcNMjQwMjE2
MDczMDExWhcNMjYwMjE1MDczMDExWjAzMTEwLwYDVQQDEyhmOTllNTRiMzFhZjQ4
ZDVjMWQ0OWMzY2U5ZjNlOWQ5YmYwNjY4ZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqpS7vI0Wx7aukBvQWRVPJ7McpkHlxxqyKOde686UecKeI4oI
HVlEHZgYSD8OfE2VIfJckNUfbAHLOklWPGr+Z0lWyBOFAFPwUTPZpDfx2V5cb5+2
cNFGgKXErlLmgkt9W7VL6cZV8FPaezX0bx3PHD1IHCqdT0Z/+nDGE+0g/fie3WeV
lGxzm6YqhYU21TsuzYEOLiOOW7qZinZqPPUbtSAVhwFcSR8YXfaC2E43DNb/a4hR
1iUMZjseOkeJcWNFU532YArLrccbGJtXtBzzvRMwDy2B1rNHmTASI9MJ+E2p4mAf
kRLzaBIKuiMMLg5T1AlB+odhx4/sMIPsgt7nzQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFMEkIKvPm2k9HRNvdr05oeSm8DPwMB8GA1UdIwQYMBaAFH5Jecan8oje7Cev
+/uhKFqPfhsRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2FjMDg5
YzIyMWQwZGJjODcwZjg5MjE3YzQ2YzZhOGY1YTM1NzkxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODA2OGZhMTMtODg2MC00OTczLThhMmMtYmE4YTZh
NWNkYzg0L2Y5OWU1NGIzMWFmNDhkNWMxZDQ5YzNjZTlmM2U5ZDliZjA2NjhkZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MDY4ZmExMy04ODYwLTQ5NzMtOGEyYy1iYThh
NmE1Y2RjODQvM2FjMDg5YzIyMWQwZGJjODcwZjg5MjE3YzQ2YzZhOGY1YTM1Nzkx
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQCLaKEAwQALaKGMA0EAgACMAcDBQAoA/gQMA0GCSqGSIb3
DQEBCwUAA4IBAQBTlAbd4lRLXqtsuKN86rpgCi8axTx3Ps/4jCMsk9Lunv509fNi
kviCpQRhuSZMpMrCFuBW6f0KU8y2lFTi16g7tmZ4ilQz+3dLbkarAwo0fdvDVtRm
SK171jmGo1M8jo2ZcPMybmURG0RcWMSdE8QW+MT+MOSKvZ61p4NPPljZOIikgjcD
3fnT081ih8vGnWoOiC8cxDUC4UW2fDKIn5vbbyG5yl2p/tHUs4pORnOeFbR99+XX
d5dA33V5z65VeegnChvuQNuJ6RDXFWmKiu4YoZXn5SfQ8BU4F0c/mxlQ4L/hdiAB
2v6jUfmi3Wfju//9KbSQbJ6NSgqfPHqZ4mch
-----END CERTIFICATE-----