Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/5d9eca804bcc7d3ed49f827bd119770924cba2a1.roa
File:                     5d9eca804bcc7d3ed49f827bd119770924cba2a1.roa (raw, json)
Hash identifier:          kQkF+daR1op3MEsHg3FZj3QTZIz0ankLt1Lhf/TmFzw=
Subject key identifier:   36:BD:4E:D3:20:E1:00:85:58:AE:DC:C0:BB:CD:41:FD:45:A2:9B:6B
Certificate issuer:       /CN=7d4b649384481a70163fa549e8ceb813fed96d9d
Certificate serial:       249DF6
Authority key identifier: 62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/5d9eca804bcc7d3ed49f827bd119770924cba2a1.roa
Signing time:             Thu 14 Dec 2023 22:30:44 +0000
ROA not before:           Thu 14 Dec 2023 22:30:43 +0000
ROA not after:            Sun 14 Dec 2025 22:30:43 +0000
asID:                     2667733
IP address blocks:        45.167.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399734 (0x249df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4b649384481a70163fa549e8ceb813fed96d9d
        Validity
            Not Before: Dec 14 22:30:43 2023 GMT
            Not After : Dec 14 22:30:43 2025 GMT
        Subject: CN=5d9eca804bcc7d3ed49f827bd119770924cba2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:ed:e5:09:db:07:e1:98:d6:e5:a6:1a:f4:
                    42:b4:d5:62:96:c7:d3:82:cc:97:88:b5:ac:8a:6e:
                    9b:fe:74:41:e3:4a:ee:fc:00:c7:1e:73:cc:77:45:
                    f8:26:d2:08:bc:8c:f1:03:88:5f:a5:12:22:90:80:
                    3c:24:c7:dd:33:89:a4:8b:fb:13:fa:5e:db:f6:79:
                    b2:81:49:22:fa:5e:cd:e3:a5:28:a9:22:0c:be:0a:
                    dd:4d:78:50:ea:59:e8:5b:c9:0e:2a:e2:8f:a1:82:
                    89:91:48:57:53:07:6c:c0:70:b8:80:2c:df:1e:6e:
                    ee:a7:50:43:35:eb:08:33:2d:1e:f8:5b:56:f2:97:
                    b8:bf:89:44:3a:31:f0:19:d9:88:b9:06:c8:35:99:
                    84:d4:70:d0:7a:4b:98:bb:85:3e:d6:b9:59:b3:ea:
                    26:28:8f:9f:c0:8c:07:99:b8:09:39:6a:c6:aa:6a:
                    ab:f6:b6:3f:ba:8a:39:26:e4:67:7c:92:f3:18:10:
                    73:17:24:96:c7:7d:5a:59:6f:a0:8e:50:a3:95:6f:
                    8c:50:e1:62:ee:20:21:e7:c7:35:00:90:ed:61:cb:
                    58:80:04:1d:51:6d:e5:df:90:7a:d9:f9:01:bc:df:
                    b0:4c:20:72:73:64:33:03:f1:a5:69:a5:e6:64:f2:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BD:4E:D3:20:E1:00:85:58:AE:DC:C0:BB:CD:41:FD:45:A2:9B:6B
            X509v3 Authority Key Identifier:
                keyid:62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/5d9eca804bcc7d3ed49f827bd119770924cba2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/7d4b649384481a70163fa549e8ceb813fed96d9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:ed:09:41:c5:c1:85:e0:f3:21:4e:b8:ee:85:12:24:41:
         78:88:c7:92:2d:bb:59:59:d1:76:19:f6:53:9e:98:cd:32:be:
         97:0f:81:79:be:c4:56:e4:09:01:ba:b8:69:c4:db:85:ab:6a:
         c7:3e:c1:88:7e:ba:fb:9d:54:35:ad:04:6e:f3:cd:e6:b7:ad:
         50:b2:b8:b0:6a:7a:b3:6f:8c:74:94:74:c6:b0:28:28:71:73:
         32:ed:57:bc:7a:74:06:8d:de:39:79:ff:d3:a4:f2:b2:c5:a9:
         c8:86:f0:e1:8b:71:98:20:11:3c:3a:93:a3:35:55:d0:eb:91:
         06:34:6b:29:33:f1:2a:b9:fd:89:df:be:ba:72:f8:72:f2:87:
         07:b2:3f:3d:33:01:50:27:52:f1:0b:f4:60:c2:ec:04:26:a2:
         13:4b:a7:2b:ed:f7:46:e7:59:b5:13:a0:e8:6a:fd:c5:3b:36:
         df:fc:d4:66:49:58:b5:39:62:85:f1:41:ac:d6:b5:3a:b9:c0:
         ae:b7:00:b2:39:23:c7:41:d0:70:00:50:95:f5:6e:71:97:87:
         3f:16:7e:54:fb:b3:ab:d1:e6:d2:46:7a:bd:b9:97:3d:0b:a0:
         d1:76:27:b9:ed:19:9e:c7:fe:7e:2a:ba:26:46:de:c3:05:73:
         f0:17:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----