Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/30ddd2706fead4f7f472088d711ed550717d437b.roa
File:                     30ddd2706fead4f7f472088d711ed550717d437b.roa (raw, json)
Hash identifier:          OgkG1tF5MZXzficJ9OjN5YfKO3I9dfA6ciD/PoVLV80=
Subject key identifier:   C2:33:34:4F:61:F4:15:5D:CF:A1:CA:4E:2E:6B:77:A3:44:2B:8A:0E
Certificate issuer:       /CN=92f99288a81ebe400af2542cf1335efd001a7734
Certificate serial:       1EFF29
Authority key identifier: 48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/30ddd2706fead4f7f472088d711ed550717d437b.roa
Signing time:             Fri 24 Mar 2023 08:30:23 +0000
ROA not before:           Thu 23 Mar 2023 08:30:22 +0000
ROA not after:            Sat 22 Mar 2025 08:30:22 +0000
asID:                     265696
IP address blocks:        45.5.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031401 (0x1eff29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f99288a81ebe400af2542cf1335efd001a7734
        Validity
            Not Before: Mar 23 08:30:22 2023 GMT
            Not After : Mar 22 08:30:22 2025 GMT
        Subject: CN=30ddd2706fead4f7f472088d711ed550717d437b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:4c:e9:52:4e:95:1a:ba:ec:ce:3d:0c:a2:
                    dd:91:b9:54:be:91:5f:8d:88:78:ae:c5:37:b1:a6:
                    6b:76:0f:1b:ee:70:7f:d7:ae:62:0c:5a:e5:19:d4:
                    7b:87:25:bc:08:de:69:5a:d7:15:62:2c:e5:00:b1:
                    b2:33:2c:9c:0e:dd:00:26:b3:ea:f0:a6:3b:be:b9:
                    b0:9b:21:2a:98:c8:cc:2e:73:0a:b8:10:9f:30:e3:
                    b6:ad:b5:00:2c:03:95:98:8e:72:cc:c1:b3:87:28:
                    76:19:e1:4e:a4:af:f2:3b:09:9f:0e:72:0f:76:5b:
                    7c:14:32:13:68:47:bc:13:ba:f4:89:49:af:dd:14:
                    36:cc:55:1f:f2:cd:5d:8f:0c:ed:6c:b9:42:e3:3a:
                    37:87:ba:f7:8a:76:0d:b7:e2:9d:60:99:da:4f:7c:
                    f0:a0:56:66:8b:bd:d4:62:ba:96:ff:55:f2:01:c9:
                    a7:20:c2:0f:69:ad:c3:78:27:27:37:6d:82:90:0a:
                    9f:97:2d:7d:c7:50:69:87:3c:3a:7f:d7:9b:72:67:
                    bd:84:be:49:d3:fa:4e:5c:29:7d:71:80:9a:ae:0d:
                    03:0c:42:3f:85:c2:bc:16:44:80:e0:07:4b:85:dc:
                    ee:c3:3a:45:7a:cc:ce:0c:42:89:99:a0:74:1b:75:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:33:34:4F:61:F4:15:5D:CF:A1:CA:4E:2E:6B:77:A3:44:2B:8A:0E
            X509v3 Authority Key Identifier:
                keyid:48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/30ddd2706fead4f7f472088d711ed550717d437b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:9e:8d:3d:f3:c5:08:aa:1c:e7:aa:e3:de:5f:7f:55:30:
         8b:39:0a:21:5c:8d:92:56:25:8a:36:88:ad:a8:f2:6d:9f:8a:
         ff:a5:8a:d0:27:92:30:8f:5a:91:68:11:4b:2d:c0:0e:09:cf:
         4a:00:77:a3:46:f1:2a:e6:64:03:4b:a3:10:3c:e1:4e:82:d8:
         67:9c:aa:e3:66:ef:e5:68:67:7d:dc:6b:c6:70:aa:3d:58:27:
         37:2c:f8:c9:35:01:a6:11:a3:24:af:ef:74:18:d0:8a:a4:82:
         3e:43:46:d3:48:cb:82:d5:89:7e:eb:7c:30:81:68:59:5c:ae:
         83:0f:58:bb:df:56:30:08:9b:6d:ce:0e:b7:6e:06:9f:25:e5:
         39:a8:ea:9a:b7:ce:b7:ee:cc:88:96:67:8e:25:f8:6e:5d:a9:
         49:87:80:26:a2:f7:7b:8f:12:c9:27:d5:a9:ac:19:a1:31:dc:
         8c:e7:49:ad:ca:6c:8e:f1:3c:d3:19:fc:1e:34:ff:75:0c:47:
         83:3e:3b:e6:03:33:8d:f8:eb:4e:55:34:91:4e:02:6f:61:5b:
         8a:9c:0d:1c:01:cf:02:de:99:d3:5c:f1:32:2c:66:5a:9b:40:
         89:62:f8:dc:0e:c2:88:ef:66:b2:d6:79:51:c6:30:ca:e8:04:
         5d:df:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----