Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/1dcb85c57017b70ea1241e8cbfbe4e1e3f5035d5.roa
File:                     1dcb85c57017b70ea1241e8cbfbe4e1e3f5035d5.roa (raw, json)
Hash identifier:          80OGKN+3OR9RgaJgFGrMzFn8cNnFGfTGYeMSIvd/qUg=
Subject key identifier:   1A:62:DE:79:95:41:17:01:91:63:0B:DB:84:76:D0:FD:DF:C9:98:37
Certificate issuer:       /CN=7911f89b4ce7d26bfee110119ea06f4c83289f2d
Certificate serial:       246242
Authority key identifier: 4B:38:4E:CE:F1:23:19:67:B3:4A:4E:4F:EF:7F:7A:92:F2:EF:B2:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7911f89b4ce7d26bfee110119ea06f4c83289f2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/1dcb85c57017b70ea1241e8cbfbe4e1e3f5035d5.roa
Signing time:             Tue 12 Dec 2023 23:33:29 +0000
ROA not before:           Tue 12 Dec 2023 23:33:28 +0000
ROA not after:            Tue 12 Dec 2028 23:33:28 +0000
asID:                     266812
IP address blocks:        45.236.148.0/22 maxlen: 24
                          2803:d8a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2384450 (0x246242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7911f89b4ce7d26bfee110119ea06f4c83289f2d
        Validity
            Not Before: Dec 12 23:33:28 2023 GMT
            Not After : Dec 12 23:33:28 2028 GMT
        Subject: CN=1dcb85c57017b70ea1241e8cbfbe4e1e3f5035d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:d0:13:4b:78:22:b6:1e:bb:a2:30:2b:cc:
                    a0:44:a3:2e:bf:3d:27:02:64:70:d7:ce:1b:94:71:
                    b7:dc:d4:bc:b2:5d:1d:a0:3d:49:ec:0c:26:37:c8:
                    3a:85:d5:a2:9b:15:f3:57:75:ba:26:04:45:ce:f8:
                    7f:ec:7c:4e:28:ce:de:09:f1:a1:ff:9a:51:04:f8:
                    ff:f6:34:2a:9c:08:5f:77:9e:4c:32:19:f5:1b:80:
                    25:03:69:f0:00:d7:cf:87:84:1e:18:a1:e2:2a:49:
                    77:2f:b4:f4:e4:04:17:13:cb:e8:aa:85:64:51:f4:
                    a4:b9:76:1b:d6:51:47:1e:d7:bd:7f:ee:25:a7:4f:
                    c5:9d:e3:a3:30:92:56:d3:1b:f2:b0:e2:c8:0f:2b:
                    98:f7:67:10:c8:0a:18:5d:7a:44:38:c7:a5:1d:8e:
                    6a:ad:4b:f3:18:16:47:da:70:fb:20:22:ff:e7:28:
                    f9:60:8b:df:81:31:c7:2b:78:97:72:31:7a:23:6d:
                    4a:c0:34:8b:a2:75:1f:4d:33:aa:ca:98:88:70:7d:
                    59:8f:ef:aa:f6:28:c9:77:05:a9:07:62:fa:24:9e:
                    2d:68:33:96:d5:3d:4d:81:59:9c:e0:2c:75:ed:0e:
                    35:c7:9c:64:36:55:90:60:a9:1d:f8:00:04:b0:41:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:62:DE:79:95:41:17:01:91:63:0B:DB:84:76:D0:FD:DF:C9:98:37
            X509v3 Authority Key Identifier:
                keyid:4B:38:4E:CE:F1:23:19:67:B3:4A:4E:4F:EF:7F:7A:92:F2:EF:B2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7911f89b4ce7d26bfee110119ea06f4c83289f2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/1dcb85c57017b70ea1241e8cbfbe4e1e3f5035d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/7911f89b4ce7d26bfee110119ea06f4c83289f2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.148.0/22
                IPv6:
                  2803:d8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:47:c9:c9:61:ea:6d:71:7c:0e:ba:be:e3:d8:a5:05:1f:
         9b:7c:c3:d7:89:93:39:a4:4a:a6:68:5e:b4:83:2a:28:18:66:
         45:d3:63:97:11:17:02:52:72:69:cb:2b:0e:71:0f:1b:c7:c5:
         96:ed:b7:55:b4:34:8f:19:51:16:ec:e7:16:42:2a:d2:d1:1c:
         d2:b6:a8:32:64:4b:72:7b:17:12:e1:50:a2:28:81:7f:3f:8d:
         40:55:5f:bd:51:d3:14:d7:4c:12:3e:0c:7a:45:7b:6c:00:d5:
         56:f1:f3:e8:9d:28:81:08:a0:f7:b5:0f:00:57:b9:50:d2:6a:
         0b:37:76:2b:53:c2:d0:d7:3e:ba:e6:7c:df:71:5d:d8:f4:90:
         32:11:c3:a8:bd:b1:40:64:e1:64:90:88:1c:e7:3d:ad:56:21:
         57:65:ba:ec:bd:75:69:5a:bc:f8:99:3e:6f:9e:a4:c0:12:7e:
         11:0c:4c:41:e3:ad:19:d2:fb:1a:a4:50:74:16:08:a1:d0:11:
         93:16:65:a9:a3:b1:71:e9:50:b5:16:d9:70:36:89:40:cf:10:
         c5:92:c9:df:98:fe:db:e6:34:66:73:26:d6:9d:4b:7e:fa:3f:
         62:a2:ef:9c:b5:48:b1:29:e1:eb:e5:ea:65:75:8e:cc:70:7e:
         3e:93:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----