Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/39a1ccd11e0ed5aaf0be47090916af4d6999042e.roa
File:                     39a1ccd11e0ed5aaf0be47090916af4d6999042e.roa (raw, json)
Hash identifier:          kijbsoLDPN2v0PprMVNU1p55R1vhFfGJGTrlFAMF6+w=
Subject key identifier:   01:3D:EB:33:14:CD:6C:38:C0:77:48:B7:2A:E4:5D:C4:21:4B:73:67
Certificate issuer:       /CN=e5542707278f94f915cf6c50f07f27b7ca4d3a19
Certificate serial:       209199
Authority key identifier: E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/39a1ccd11e0ed5aaf0be47090916af4d6999042e.roa
Signing time:             Thu 27 Jul 2023 20:13:29 +0000
ROA not before:           Wed 26 Jul 2023 20:13:29 +0000
ROA not after:            Sun 27 Jul 2025 20:13:29 +0000
asID:                     267791
IP address blocks:        45.172.176.0/23 maxlen: 23
                          2803:afa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134425 (0x209199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5542707278f94f915cf6c50f07f27b7ca4d3a19
        Validity
            Not Before: Jul 26 20:13:29 2023 GMT
            Not After : Jul 27 20:13:29 2025 GMT
        Subject: CN=39a1ccd11e0ed5aaf0be47090916af4d6999042e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:3a:ec:22:d3:b9:14:96:44:62:ce:a0:1e:
                    f4:ca:20:57:a5:fa:99:48:f5:2e:e6:a3:32:7d:b6:
                    26:c7:3d:ee:39:6f:ec:ae:e3:ec:9f:49:54:a5:f8:
                    63:24:93:d7:e8:7e:7f:f1:ba:54:6c:87:0f:ff:e1:
                    43:54:f8:4e:4c:8d:6f:94:fb:a3:7f:b7:a9:ad:33:
                    89:07:ae:6a:7e:90:55:ae:25:62:63:e5:44:f4:7e:
                    22:6a:b0:df:56:6d:63:cf:03:87:e1:f3:e2:5c:94:
                    07:a7:5b:0d:fd:f8:7e:89:45:6e:71:53:3d:3d:5d:
                    5c:3d:e0:5e:ea:e8:1a:9c:d1:25:2e:ac:98:64:68:
                    76:cc:0e:bf:ea:b8:0b:56:92:ea:96:85:2b:52:8d:
                    9d:e7:2c:d9:8c:19:2c:76:bc:42:54:92:d7:ae:a0:
                    b4:33:bf:8c:e8:bf:c6:44:94:1c:dc:29:76:91:32:
                    f0:6d:49:4c:19:ad:e9:b9:3c:a3:04:6a:a1:fd:a0:
                    ba:0c:e1:18:a7:bd:64:f5:7d:b7:13:04:84:32:96:
                    ca:62:5e:e8:cd:11:16:e0:7d:58:1e:17:8d:3b:b9:
                    84:ca:15:1d:b9:9d:f5:18:de:2a:f7:d0:7f:aa:93:
                    29:4f:95:3a:c6:f0:0c:3c:af:d6:99:93:f5:f5:f0:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:EB:33:14:CD:6C:38:C0:77:48:B7:2A:E4:5D:C4:21:4B:73:67
            X509v3 Authority Key Identifier:
                keyid:E9:DC:64:74:86:54:FE:AF:B5:83:A9:C0:A2:56:85:59:86:FD:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5542707278f94f915cf6c50f07f27b7ca4d3a19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/39a1ccd11e0ed5aaf0be47090916af4d6999042e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/998519c7-dcde-4cdc-9121-e4ede1f8bf4e/e5542707278f94f915cf6c50f07f27b7ca4d3a19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.176.0/23
                IPv6:
                  2803:afa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:ac:16:69:23:34:08:29:36:64:c3:49:b5:4e:54:74:3d:71:
         8e:7d:90:c4:6e:5d:bd:1d:bd:91:a2:76:e9:43:19:a2:6d:d4:
         7f:5a:a5:bd:73:89:0f:0d:3e:66:be:0c:c9:ee:c6:c7:a8:49:
         73:b2:00:97:df:05:31:84:48:92:b0:f5:c6:b3:83:34:19:a8:
         ce:e1:33:7c:17:11:02:31:dd:89:3c:21:6d:68:80:61:4f:32:
         1d:a4:88:93:79:b5:a6:87:5d:7c:44:69:4b:46:ec:04:3f:3b:
         74:47:b1:b4:77:28:bd:96:76:d6:9f:a5:24:b9:31:72:7f:8b:
         f1:75:dd:7b:6c:08:f8:e8:ac:06:02:c4:21:2f:0a:ee:54:a9:
         0a:d0:e0:9c:f0:a0:08:c2:d3:44:f2:9e:f0:34:51:78:54:e9:
         15:da:8d:97:be:89:df:8b:8e:ed:ba:0c:6a:72:c0:95:f7:2c:
         f5:09:39:82:8f:b3:c7:f0:b5:8a:81:80:56:19:00:b3:1f:bc:
         8a:53:9e:62:42:7b:07:07:3a:ab:9c:54:c4:61:66:56:b5:68:
         28:c7:4c:08:70:49:34:51:e2:dd:70:75:15:73:81:d2:b2:13:
         ee:60:1c:b5:6a:23:f5:53:09:70:b1:8c:ba:9f:22:85:e7:18:
         28:c0:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----