Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/6267699b96ad603c54f8b032523342a9b98b5d8e.roa
File:                     6267699b96ad603c54f8b032523342a9b98b5d8e.roa (raw, json)
Hash identifier:          PGsr8uuoreHFkug0JHwG4Qq2c0tmRC5pLIHsrX4UI5k=
Subject key identifier:   FD:D8:8E:3D:4B:00:0D:63:11:0D:56:37:54:1D:EB:E1:34:29:A2:AA
Certificate issuer:       /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial:       235376
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/6267699b96ad603c54f8b032523342a9b98b5d8e.roa
Signing time:             Thu 12 Oct 2023 17:52:57 +0000
ROA not before:           Wed 11 Oct 2023 17:52:57 +0000
ROA not after:            Sun 12 Oct 2025 17:52:57 +0000
asID:                     264825
IP address blocks:        45.169.144.0/22 maxlen: 24
                          2803:dda0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315126 (0x235376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
        Validity
            Not Before: Oct 11 17:52:57 2023 GMT
            Not After : Oct 12 17:52:57 2025 GMT
        Subject: CN=6267699b96ad603c54f8b032523342a9b98b5d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:6b:63:25:4a:76:86:a9:e7:f5:bd:46:59:
                    1e:e8:41:9b:45:68:a3:21:e7:98:d7:a9:05:c6:4a:
                    ca:c1:3a:1e:0d:13:e4:c2:de:c6:b7:f8:ea:c3:23:
                    cb:29:3c:5b:2b:09:83:84:b5:c6:7e:a4:fc:16:14:
                    dc:f6:78:78:e3:6f:4a:d9:8e:58:12:78:45:a9:b6:
                    03:dc:e3:13:f3:78:79:11:98:77:8d:88:ca:85:b2:
                    73:d4:be:7b:7a:45:e4:b6:71:a6:0e:1d:aa:4a:c6:
                    2e:c9:24:e1:36:5b:60:c3:8d:c3:91:4d:73:9b:5a:
                    ea:dc:7d:2d:74:32:fd:a4:07:97:73:e7:b7:5b:43:
                    bd:39:df:cf:3e:15:05:83:17:31:4f:a5:b6:7c:9e:
                    32:92:4b:ab:ae:b2:34:19:99:04:fc:44:46:78:72:
                    6b:48:7a:6a:19:db:5d:16:1c:6f:72:39:ad:82:13:
                    d7:cd:34:16:6f:83:20:c0:83:b0:50:60:61:ba:77:
                    9b:93:e1:1a:88:f7:65:1d:77:23:39:c8:d5:7f:b0:
                    93:ad:4d:6b:ea:5b:0c:e0:c0:6c:ef:0f:bb:04:16:
                    ff:88:a8:53:d5:75:07:bb:97:4a:ed:c3:70:39:e7:
                    2e:cb:67:7b:d4:71:2f:ff:61:f8:74:8c:dd:0a:97:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D8:8E:3D:4B:00:0D:63:11:0D:56:37:54:1D:EB:E1:34:29:A2:AA
            X509v3 Authority Key Identifier:
                keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/6267699b96ad603c54f8b032523342a9b98b5d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.144.0/22
                IPv6:
                  2803:dda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:3e:0c:ff:06:77:89:dc:f0:c3:f8:79:d5:24:fd:55:b2:
         ff:11:e2:04:12:f0:95:4c:b0:ca:79:3c:6c:fc:4e:a9:b9:b3:
         df:ff:0c:40:82:dd:9f:ba:f8:26:43:1d:73:e1:21:9d:94:3b:
         44:38:8c:69:75:9e:c5:6c:2d:71:65:9c:0c:5e:6a:66:9a:58:
         f3:e3:36:e9:56:1b:b3:3f:7e:0b:e8:77:ae:99:72:e9:17:54:
         96:29:6c:75:85:0c:cf:86:84:cf:3b:85:90:e0:ea:83:19:46:
         e4:59:c9:09:71:b6:9e:97:51:7f:f7:af:17:20:a6:a9:a1:c3:
         50:19:24:92:4f:d0:ef:06:8c:97:46:25:03:30:76:c0:69:c2:
         b9:18:85:1f:ac:48:47:8e:99:fa:85:9a:d8:a0:90:3b:28:32:
         c6:aa:27:d3:f6:75:8c:f7:5e:20:a9:b3:90:79:f1:8b:54:f4:
         cc:54:e5:9f:1e:a3:42:cb:b2:c7:ec:66:82:0c:3b:1e:5a:17:
         30:13:17:0a:f4:b1:95:10:ce:44:46:a8:27:eb:12:6f:d1:08:
         ec:cc:ee:36:a3:65:83:42:01:df:80:d9:04:f7:7d:0f:6c:da:
         3c:a3:5d:43:61:73:39:3c:c3:14:85:a8:8c:20:f4:d6:c2:1b:
         b2:78:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----