Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/91bcd4794c7464214aa997e3e80cc7180b1737a1.roa
File:                     91bcd4794c7464214aa997e3e80cc7180b1737a1.roa (raw, json)
Hash identifier:          glgfYKrKAA4z/QNWdnfhONkrD+UXPsJeHDxd1HITMnI=
Subject key identifier:   55:6C:7E:8B:A4:0D:94:1A:1D:54:CB:88:7E:A1:6E:7A:65:4E:44:BE
Certificate issuer:       /CN=1998f88abc544e5ad7050b1cad9f108a3af37680
Certificate serial:       20F2C8
Authority key identifier: 71:68:69:D1:58:4E:C4:4C:10:3A:A5:BA:8E:B0:F3:FA:6E:6E:7F:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1998f88abc544e5ad7050b1cad9f108a3af37680.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/91bcd4794c7464214aa997e3e80cc7180b1737a1.roa
Signing time:             Thu 29 Jun 2023 20:28:58 +0000
ROA not before:           Wed 28 Jun 2023 20:28:58 +0000
ROA not after:            Sun 29 Jun 2025 20:28:58 +0000
asID:                     52468
IP address blocks:        45.167.0.0/22 maxlen: 24
                          2803:59a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159304 (0x20f2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1998f88abc544e5ad7050b1cad9f108a3af37680
        Validity
            Not Before: Jun 28 20:28:58 2023 GMT
            Not After : Jun 29 20:28:58 2025 GMT
        Subject: CN=91bcd4794c7464214aa997e3e80cc7180b1737a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:ba:53:6b:2b:5c:f7:0a:57:11:5f:03:40:
                    05:07:23:65:ed:63:76:b5:6f:60:0a:a4:cd:d1:dc:
                    72:df:ca:e0:d8:11:70:9e:a7:cc:35:ac:fc:31:a7:
                    a2:a2:d3:fd:aa:b7:f0:02:cc:de:3b:b2:6a:e9:d8:
                    35:34:f8:ef:a5:2f:c1:59:69:72:b5:2d:36:7d:a3:
                    50:09:bf:f0:e6:b6:a6:99:58:58:0c:95:4d:d1:99:
                    7d:1a:c6:42:5a:a2:71:49:10:d1:f5:c3:23:c5:0c:
                    73:9e:27:55:bd:2b:0c:fe:e5:af:23:49:06:c7:81:
                    0c:38:1f:6f:72:6e:c0:43:80:40:19:d4:7d:53:f1:
                    9c:47:9a:07:fb:b8:0f:5d:ec:0a:08:0f:26:5f:b2:
                    df:b8:3f:80:e3:c7:94:0d:22:06:1f:b0:70:9b:76:
                    81:03:74:46:19:d3:f6:cb:7b:a9:a7:aa:8d:da:6b:
                    28:cd:0a:df:05:29:1c:50:2b:9a:ca:be:f9:4d:bc:
                    d9:f0:08:75:77:ac:ad:b1:43:89:6a:41:de:49:94:
                    8e:7d:fb:44:e6:af:ee:12:10:f9:2d:67:43:8c:56:
                    5d:13:a4:fe:08:88:2d:13:96:28:49:93:61:1d:90:
                    1c:1d:80:0a:5a:d5:11:70:11:38:f6:70:31:24:82:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6C:7E:8B:A4:0D:94:1A:1D:54:CB:88:7E:A1:6E:7A:65:4E:44:BE
            X509v3 Authority Key Identifier:
                keyid:71:68:69:D1:58:4E:C4:4C:10:3A:A5:BA:8E:B0:F3:FA:6E:6E:7F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1998f88abc544e5ad7050b1cad9f108a3af37680.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/91bcd4794c7464214aa997e3e80cc7180b1737a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3a466c4-3ab1-4604-922f-7851f6d320db/1998f88abc544e5ad7050b1cad9f108a3af37680.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.0.0/22
                IPv6:
                  2803:59a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:f0:6d:f8:dd:c1:d9:34:54:35:a2:95:5b:a4:e6:20:80:9d:
         eb:66:9f:26:8d:0c:8b:c9:db:cc:e1:4f:97:82:81:21:45:27:
         52:ee:82:42:10:ca:5e:97:93:b4:e8:45:12:f7:25:36:5a:be:
         bf:82:3c:5d:55:ed:db:96:36:75:0d:3f:d3:fa:a4:22:fa:50:
         d1:de:fc:4e:21:cf:b0:4c:2e:53:98:50:bc:6d:7f:d2:0d:b5:
         f6:64:1d:05:9f:de:f1:44:a0:6c:69:73:c6:d5:7a:32:0a:38:
         89:fe:9e:de:27:ba:ec:63:28:be:83:16:15:4e:88:01:ca:25:
         72:87:39:31:c0:dc:41:88:45:fe:b3:06:03:53:35:ab:fe:1c:
         a0:12:52:84:53:2c:05:e3:a4:5b:26:7c:85:c1:5d:44:b7:76:
         65:d9:dc:43:f7:bd:97:ea:76:9e:81:24:a3:ab:cf:28:e2:47:
         a1:08:5f:c0:ad:ae:6e:67:d6:7d:68:b5:70:41:ae:17:2d:1d:
         4c:d8:5b:7e:a9:5a:1a:dc:7e:c3:61:2b:67:c4:70:54:74:b8:
         d3:53:51:60:ff:03:c7:b3:bf:9e:39:00:d3:c4:12:03:96:17:
         7e:43:80:5c:66:b9:67:10:a3:0c:76:7a:05:14:36:d7:08:5a:
         84:0c:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----