Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/0d553d34c5ff3668a9b7c1fc47fd74323c24114d.roa
File:                     0d553d34c5ff3668a9b7c1fc47fd74323c24114d.roa (raw, json)
Hash identifier:          D0biCFEcEg9w4nlmL8gyhpLenri4KEXZvc3y3AFNS5k=
Subject key identifier:   E2:4B:F9:BE:E6:A9:33:A2:05:E1:88:B3:5A:61:EF:81:74:7B:F6:3E
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       26EA36
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/0d553d34c5ff3668a9b7c1fc47fd74323c24114d.roa
Signing time:             Thu 08 Feb 2024 15:08:35 +0000
ROA not before:           Thu 08 Feb 2024 15:08:35 +0000
ROA not after:            Sun 08 Feb 2026 15:08:35 +0000
asID:                     266706
IP address blocks:        45.229.190.0/24 maxlen: 24
                          2803:bd20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2550326 (0x26ea36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Feb  8 15:08:35 2024 GMT
            Not After : Feb  8 15:08:35 2026 GMT
        Subject: CN=0d553d34c5ff3668a9b7c1fc47fd74323c24114d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:34:7a:fa:91:47:87:1d:21:08:24:75:bc:
                    c6:22:ec:d6:18:d3:47:ae:1f:17:2d:5a:3a:36:4d:
                    48:4b:e8:49:4c:cc:e5:17:3a:a7:38:dd:e1:fc:1a:
                    88:c4:0d:4e:15:e1:73:60:b2:14:c4:f5:cf:5d:b2:
                    87:81:05:67:45:f9:a7:ac:e5:e1:44:28:b7:a3:b9:
                    ae:33:01:4e:7b:ed:f6:b7:7b:b0:d1:0a:ab:8a:7a:
                    69:84:05:f4:5f:8f:10:c9:ca:77:71:7b:24:8a:38:
                    54:77:2d:1b:1c:75:06:95:85:54:e6:78:90:f7:ae:
                    fc:d5:60:1d:29:54:39:e9:82:b2:06:9a:70:4c:8d:
                    b3:8b:bd:fa:d6:fb:bf:09:0b:dd:35:50:da:31:c4:
                    af:84:cf:a0:25:d7:e0:54:02:93:78:a7:8b:8e:c3:
                    1d:08:d2:e2:3d:1e:a5:c4:04:81:b9:59:3d:93:b6:
                    e4:63:11:63:02:99:5f:2f:d3:d7:fc:07:8f:5c:8d:
                    0a:39:88:90:7d:8a:fb:02:4d:d3:f3:e3:c7:ae:0e:
                    ac:e2:9f:78:08:f5:cf:a3:a3:64:4e:32:ce:c6:81:
                    9a:94:0c:68:c2:73:1f:ba:13:ad:41:4b:8f:49:9a:
                    5b:a1:86:4a:68:e8:6d:6f:fd:bf:8b:31:e9:5c:f3:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4B:F9:BE:E6:A9:33:A2:05:E1:88:B3:5A:61:EF:81:74:7B:F6:3E
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/0d553d34c5ff3668a9b7c1fc47fd74323c24114d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.190.0/24
                IPv6:
                  2803:bd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:3c:21:1d:df:b0:4c:b7:27:7b:28:6f:b3:d7:9d:da:39:
         00:c6:84:8f:ff:26:5b:46:2a:c6:cf:da:a2:89:c9:5d:c9:de:
         30:51:75:64:5d:85:78:b0:cd:43:52:fa:65:32:b1:64:e4:c8:
         7d:ab:12:90:b3:df:8f:0b:fc:7e:e2:a3:d2:79:e6:b4:9c:8e:
         3f:07:32:d6:2f:7b:87:1d:ee:83:84:3f:2f:7e:5a:08:da:f5:
         b4:96:18:86:54:d0:ae:20:30:cc:fd:00:30:f8:b1:32:80:51:
         d7:81:98:43:4c:9d:a6:b3:a4:21:c7:4a:e4:b8:6f:20:36:fa:
         f0:23:b7:c4:50:6e:64:b7:c9:b8:06:34:00:5e:58:78:d1:3f:
         c5:a6:0d:3e:d5:49:1f:ac:1f:e8:cf:d0:d7:69:59:b3:ce:39:
         01:da:7d:3a:02:ef:94:ef:37:31:90:3d:75:83:cc:d4:b0:1a:
         08:b7:48:03:0f:19:7b:29:0c:49:3d:b0:2f:1c:3f:ea:04:0c:
         26:da:dc:72:2e:a0:5b:27:9e:2b:10:b4:bd:97:ce:df:8c:9f:
         4e:04:50:31:bc:6c:14:8a:6b:f1:46:94:93:1c:00:ca:a1:59:
         08:35:ec:15:82:1b:01:cb:32:35:46:ec:65:49:33:81:f6:f0:
         23:ae:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----