Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/69bf0b48accb81168a228120468e9f0804501d16.roa
File:                     69bf0b48accb81168a228120468e9f0804501d16.roa (raw, json)
Hash identifier:          OER2oLOMSmh2TJbJ/1MJHB68c4GRJapngoIlsbQLOyU=
Subject key identifier:   E1:82:19:34:44:AE:7D:E4:64:F3:2C:87:F9:E1:38:A9:EF:3F:66:A3
Certificate issuer:       /CN=9cd1fa487cf3249dd054f9956489b848d101a711
Certificate serial:       1BD056
Authority key identifier: AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/69bf0b48accb81168a228120468e9f0804501d16.roa
Signing time:             Fri 23 Jun 2023 16:15:06 +0000
ROA not before:           Thu 22 Jun 2023 16:15:06 +0000
ROA not after:            Mon 23 Jun 2025 16:15:06 +0000
asID:                     272995
IP address blocks:        45.173.9.0/24 maxlen: 24
                          45.173.10.0/23 maxlen: 24
                          2803:f860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822806 (0x1bd056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd1fa487cf3249dd054f9956489b848d101a711
        Validity
            Not Before: Jun 22 16:15:06 2023 GMT
            Not After : Jun 23 16:15:06 2025 GMT
        Subject: CN=69bf0b48accb81168a228120468e9f0804501d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:99:02:7b:95:3c:de:5a:7e:d5:e8:44:84:
                    00:cb:d6:4d:7a:d7:c0:b5:39:5e:a7:2e:01:23:30:
                    27:c7:1e:e4:64:14:d2:2d:af:03:0c:6c:95:4c:67:
                    49:57:26:a0:b0:92:d1:0b:e9:9f:b9:3f:b8:b7:a4:
                    99:0e:91:27:5b:68:7c:15:ac:77:e5:6e:40:56:d9:
                    26:22:df:af:78:12:92:c0:a0:91:67:a0:b4:26:2d:
                    38:51:87:48:91:4f:8c:37:e7:8b:15:05:aa:f7:1c:
                    b0:e0:42:0f:2c:6d:b5:45:46:33:2f:40:66:06:58:
                    35:1f:62:76:25:ed:c2:11:07:31:23:2c:df:f2:68:
                    a8:07:1d:c0:6f:f2:4b:9a:db:0b:82:ae:c9:5a:bf:
                    60:de:e2:dd:d5:42:de:16:c0:8c:9d:5a:fe:3c:fa:
                    2a:a2:5c:fb:11:f9:6d:cf:cb:b5:c8:b3:04:c9:1e:
                    25:77:f9:99:2e:31:2e:91:ec:b5:e7:6d:f9:fb:05:
                    cd:45:0a:b7:3b:41:81:2a:22:2f:b4:57:ff:98:87:
                    46:94:e7:9f:4d:92:47:f1:dc:c7:02:02:8d:04:cf:
                    a7:80:27:3b:16:d4:14:1f:9e:31:98:05:8a:3b:4f:
                    e8:fc:cd:2f:12:09:5c:b1:92:d3:60:54:84:72:3d:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:82:19:34:44:AE:7D:E4:64:F3:2C:87:F9:E1:38:A9:EF:3F:66:A3
            X509v3 Authority Key Identifier:
                keyid:AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/69bf0b48accb81168a228120468e9f0804501d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/9cd1fa487cf3249dd054f9956489b848d101a711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.9.0-45.173.11.255
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:e3:cd:95:b6:d5:51:43:82:45:07:e1:06:a4:5b:5b:65:c2:
         43:d7:95:fc:7a:16:c0:d7:c5:66:25:f5:ad:5d:98:01:45:f8:
         ea:ca:43:8a:1c:1f:e9:a6:81:12:b4:e1:c9:cc:ef:ff:13:4f:
         17:fe:f9:63:b2:3b:03:a8:2c:84:59:68:76:c3:a2:22:4a:a8:
         03:aa:bb:66:3d:b1:e4:3d:06:24:d0:fd:ed:4f:8f:3a:b2:40:
         1e:51:b6:2b:77:50:5f:d3:97:8c:55:b0:f0:be:f8:f5:b0:95:
         f1:94:a7:1d:f3:71:16:fc:d4:72:c2:20:ed:1f:4a:61:40:de:
         35:e7:ba:bf:51:58:9e:fa:9a:d1:5c:43:7a:f8:28:b5:ae:d0:
         1d:a6:fa:26:9e:33:55:77:15:c4:26:4f:8c:da:62:4f:c4:9c:
         a8:9f:4b:30:46:c3:4c:53:60:93:e3:d2:b1:71:96:5d:07:97:
         83:c2:05:cb:fb:78:61:28:17:2c:18:86:5a:30:4e:96:2b:87:
         7e:0a:a3:6f:eb:9d:4f:75:81:53:67:b4:a4:20:77:46:d3:99:
         b8:3a:a0:d5:cf:65:b5:3b:35:76:cf:e3:81:a9:42:83:30:70:
         37:38:9d:54:13:08:03:d9:3a:21:96:f7:23:bc:26:22:9f:2a:
         b2:2b:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----