Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/f2484d3f90accdf85a23ee1503f481e43ad71b50.roa
File:                     f2484d3f90accdf85a23ee1503f481e43ad71b50.roa (raw, json)
Hash identifier:          2Np5VArBEl02xWFl1IcdrL8f2eGOCjTcIS+RnLgD0iE=
Subject key identifier:   D6:0F:34:7A:E8:70:16:FC:49:0A:D5:61:CC:98:97:09:B6:F3:DB:94
Certificate issuer:       /CN=ae7eed0e816c205684dab13fe261771e26f139b4
Certificate serial:       02041C
Authority key identifier: DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/f2484d3f90accdf85a23ee1503f481e43ad71b50.roa
Signing time:             Sat 27 May 2023 00:17:22 +0000
ROA not before:           Fri 26 May 2023 00:17:22 +0000
ROA not after:            Tue 27 May 2025 00:17:22 +0000
asID:                     265592
IP address blocks:        45.180.8.0/22 maxlen: 24
                          2806:343::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132124 (0x2041c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7eed0e816c205684dab13fe261771e26f139b4
        Validity
            Not Before: May 26 00:17:22 2023 GMT
            Not After : May 27 00:17:22 2025 GMT
        Subject: CN=f2484d3f90accdf85a23ee1503f481e43ad71b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:e8:7b:65:92:d9:67:0b:47:2a:23:2d:53:
                    eb:95:4f:41:7d:15:c1:78:6a:64:71:e4:f3:fe:95:
                    f3:40:e3:2a:ae:29:a1:2b:84:1f:e1:e1:a2:2f:70:
                    87:4d:71:51:e3:3f:f8:93:25:b8:d1:67:32:a4:48:
                    62:96:31:ef:3c:62:f7:a6:07:98:69:a6:ac:54:f4:
                    6a:11:e2:7a:2e:e7:74:60:ba:39:cd:ba:1d:eb:f4:
                    08:07:17:ba:21:52:15:49:e2:01:9a:77:d1:36:81:
                    b3:6c:70:81:56:04:f8:91:b4:6e:46:b7:b2:ba:22:
                    7b:5d:3a:72:cc:be:e1:89:9a:96:84:c0:92:6d:06:
                    60:5e:85:0a:87:96:91:39:32:73:03:57:dd:db:24:
                    8b:dc:e4:99:b5:f7:b1:b7:92:24:92:fe:02:35:c3:
                    e5:9c:a8:5f:25:93:0c:71:28:ba:2f:29:6d:85:d2:
                    71:5f:bd:0f:e0:b9:f4:38:01:d5:91:d9:f7:bd:da:
                    94:15:74:76:3c:66:bf:f0:0c:43:05:9f:3c:70:1f:
                    72:1a:39:5d:2b:8f:da:6a:d6:74:ad:23:bd:13:99:
                    ae:1f:5f:bb:35:78:86:ea:82:27:f1:87:3f:aa:19:
                    6c:01:e1:a2:a3:51:7a:37:db:d7:d1:40:ec:ec:36:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:34:7A:E8:70:16:FC:49:0A:D5:61:CC:98:97:09:B6:F3:DB:94
            X509v3 Authority Key Identifier:
                keyid:DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/f2484d3f90accdf85a23ee1503f481e43ad71b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.8.0/22
                IPv6:
                  2806:343::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:55:3d:13:99:93:25:c9:af:32:89:fb:c3:e1:28:0f:ce:
         cd:cc:f5:d5:7f:c0:11:c0:62:83:f7:dc:52:f2:3e:ae:b6:f7:
         f1:2c:b2:27:fd:57:04:e5:76:a3:c0:71:42:3f:c4:74:07:18:
         87:72:90:0c:0a:cb:d4:73:cf:fe:85:90:e0:e9:1f:2a:33:20:
         d6:3b:40:99:53:b5:1c:19:96:c9:2a:e6:f9:4e:fa:bc:e8:60:
         8f:19:88:de:5f:58:16:13:e8:c6:60:36:51:5e:76:64:c4:7b:
         38:5e:59:ce:81:b5:80:7c:02:14:ad:59:31:12:81:03:c1:07:
         4b:b3:4b:f1:e1:c9:60:f7:2d:a0:7c:7c:81:7d:ae:a8:84:75:
         57:b2:48:16:66:77:d0:eb:2a:48:54:a6:0a:2a:a8:a2:83:3c:
         4a:fe:79:15:29:53:e5:1d:bc:1e:95:5d:bc:0c:0d:d7:2e:2b:
         97:0f:c5:9a:76:5c:cc:b3:12:cf:2c:e0:69:bf:4e:ad:bf:46:
         59:bf:b4:f8:0a:f4:82:c8:73:33:37:6d:19:16:cf:d5:cf:e2:
         d5:53:ce:d2:49:db:57:7b:f9:aa:08:ba:24:6b:6b:ef:dc:bd:
         9d:01:86:5f:56:96:27:19:b6:fa:d6:f5:2b:c0:0e:a3:5d:17:
         66:1b:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----