Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa
File:                     4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa (raw, json)
Hash identifier:          AabuI3mC0qhb35bRpjxDJKWtQ/RQL6DVK9MhkVBM/eQ=
Subject key identifier:   BB:37:D4:08:84:31:E0:32:4D:75:FD:F2:33:9C:5C:FA:61:5D:BC:0D
Certificate issuer:       /CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Certificate serial:       259A18
Authority key identifier: 4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa
Signing time:             Fri 02 Feb 2024 16:41:15 +0000
ROA not before:           Fri 02 Feb 2024 16:41:13 +0000
ROA not after:            Mon 02 Feb 2026 16:41:13 +0000
asID:                     264668
IP address blocks:        45.238.56.0/22 maxlen: 24
                          2803:4ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464280 (0x259a18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
        Validity
            Not Before: Feb  2 16:41:13 2024 GMT
            Not After : Feb  2 16:41:13 2026 GMT
        Subject: CN=4190cb2c5ed34614c9bacb8d4b364f4eef635fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:88:19:14:ef:6d:1a:da:4d:3a:f7:6a:3d:
                    01:d4:11:35:86:fa:f5:30:35:74:84:9e:7f:fd:d1:
                    b4:ad:0c:24:39:d1:2c:ad:4c:c5:3d:ff:b4:c4:14:
                    bf:dc:cb:16:d9:7f:93:75:57:e6:ff:3a:1a:81:18:
                    01:bd:d5:56:d7:a5:1b:5d:c3:e1:6f:16:69:0f:82:
                    bc:79:78:af:b4:b2:d7:29:24:2e:41:14:06:cc:7f:
                    4a:30:33:67:fc:79:a1:9d:f2:8e:9e:af:37:9b:f9:
                    ed:e2:bf:4a:e4:22:ba:ce:a6:20:12:67:cb:17:ee:
                    e7:4c:08:ba:45:68:45:8e:f9:9b:9f:b0:b5:b3:63:
                    82:d0:d3:ba:98:84:31:0c:02:2f:95:02:26:f9:ab:
                    84:a7:18:6f:00:72:4a:95:0d:de:53:0c:d8:5a:1f:
                    bb:00:f4:cd:45:42:51:4d:7c:af:57:9e:81:2e:cf:
                    d9:2a:47:bf:95:9b:4d:be:8f:d9:bf:f1:44:f8:49:
                    b0:0a:d6:4b:cf:4c:1d:9a:0a:9e:f5:ec:4b:e6:ec:
                    b4:38:49:64:38:7c:0b:d7:5a:a2:8a:d2:93:45:c5:
                    8b:52:20:44:3b:23:32:50:b6:19:08:d5:49:2c:1d:
                    c1:94:d4:b1:6b:36:9d:0c:60:73:fb:cf:19:98:e0:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:37:D4:08:84:31:E0:32:4D:75:FD:F2:33:9C:5C:FA:61:5D:BC:0D
            X509v3 Authority Key Identifier:
                keyid:4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4190cb2c5ed34614c9bacb8d4b364f4eef635fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:62:b2:c4:26:f5:c6:97:20:76:e4:06:1e:87:cd:0f:f1:13:
         bb:e1:75:58:17:13:99:75:fd:5f:62:70:e1:35:63:aa:88:c0:
         85:9c:80:4f:22:2f:4b:e1:1c:ba:75:fa:09:ce:45:dd:53:1c:
         13:b5:b2:c6:55:66:d2:25:88:05:cd:29:8f:2a:ab:a6:9a:28:
         7e:b1:b9:09:01:2b:45:64:fc:be:10:7a:be:32:d6:14:9f:54:
         54:18:45:dd:2a:12:9d:e3:a1:14:92:aa:3e:7c:c8:a5:a5:78:
         4e:02:ca:5d:aa:4f:80:5f:0b:6a:bf:6d:d7:60:07:3e:68:db:
         36:7a:c5:af:00:d3:f2:ec:df:48:e2:02:d7:4c:05:d3:ac:fc:
         35:38:d7:ec:51:1b:a0:a9:c3:b2:e1:06:3a:7a:dc:08:11:ff:
         19:72:d7:a6:06:aa:b9:53:42:21:04:d5:b5:f6:40:52:51:b7:
         2e:88:34:d1:cb:d2:30:85:8c:58:88:fa:2c:d9:ab:76:25:bc:
         a5:79:6d:d5:d7:1f:d3:4d:3a:ac:c2:57:27:af:37:5b:9a:47:
         53:46:34:ab:cd:26:09:5a:96:4f:6d:e6:a3:fc:a7:41:d1:c5:
         48:9d:5d:2d:4b:c9:cf:af:cc:57:56:90:44:3a:00:b7:18:d0:
         64:dc:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----