Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/8045bbe4aac8cf32cea6b0a5d750728e3dc2d82e.roa
File:                     8045bbe4aac8cf32cea6b0a5d750728e3dc2d82e.roa (raw, json)
Hash identifier:          kqKIuZIYXxvqQIFJPdYWQEsJBKVgfh26mFUK9Comti4=
Subject key identifier:   F8:17:27:5A:E8:84:2D:E3:BE:8D:2A:76:45:88:27:AF:1A:6B:38:3A
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       1FB9CA
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/8045bbe4aac8cf32cea6b0a5d750728e3dc2d82e.roa
Signing time:             Mon 08 May 2023 18:16:28 +0000
ROA not before:           Sun 07 May 2023 18:16:28 +0000
ROA not after:            Thu 08 May 2025 18:16:28 +0000
asID:                     266742
IP address blocks:        45.230.168.0/22 maxlen: 24
                          2803:ab20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079178 (0x1fb9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: May  7 18:16:28 2023 GMT
            Not After : May  8 18:16:28 2025 GMT
        Subject: CN=8045bbe4aac8cf32cea6b0a5d750728e3dc2d82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:8e:fc:1a:2f:d5:c4:5f:31:b5:d4:29:81:
                    34:1d:5e:68:45:3f:71:00:f1:8b:49:88:fc:a2:df:
                    9b:25:d5:ac:3e:ac:71:27:e3:9b:31:b8:78:be:a6:
                    3e:4d:42:84:22:bd:97:28:9f:de:7d:a4:57:2e:cd:
                    23:1b:b6:9d:cd:b1:c4:ae:ba:25:a1:02:46:bd:bc:
                    e9:87:9f:44:2a:b6:a2:bd:28:6c:d3:be:a6:22:fc:
                    da:1b:3b:1b:d5:41:75:9f:95:61:5d:4c:94:3c:e0:
                    70:4a:22:c7:b2:df:e7:c3:1c:56:be:35:9f:dd:43:
                    f1:4f:8d:61:34:44:ab:9d:9d:06:d9:cb:9f:94:b7:
                    f5:2f:df:23:d9:19:34:3b:0e:86:10:3e:6e:95:02:
                    71:97:9e:a5:5b:b7:da:e7:85:0e:da:a6:46:52:ee:
                    1e:a2:e1:d9:e0:a7:3f:b0:f3:96:cd:de:dc:9c:e1:
                    5d:ea:8f:80:59:80:bb:1d:18:98:9b:bb:30:3e:01:
                    e6:5e:af:9d:b9:39:47:2f:44:47:4a:87:53:59:e6:
                    12:94:1a:54:12:eb:9c:f5:19:7a:b6:5d:a4:6e:a1:
                    38:b9:89:cd:56:57:16:2f:bc:38:ca:aa:3f:c6:dc:
                    ef:4a:17:79:e6:08:3d:55:eb:8a:be:70:35:b1:63:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:17:27:5A:E8:84:2D:E3:BE:8D:2A:76:45:88:27:AF:1A:6B:38:3A
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/8045bbe4aac8cf32cea6b0a5d750728e3dc2d82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22
                IPv6:
                  2803:ab20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:d3:e9:50:94:8b:a4:0a:91:92:3c:ea:3e:9f:e2:c8:af:
         94:ee:d3:db:55:8e:34:56:81:0a:12:88:1a:c4:d7:22:94:e3:
         56:68:d0:e3:75:f0:ba:6f:52:bf:6c:1d:ec:a1:34:32:99:9c:
         3c:9a:86:a5:87:1c:98:85:6b:c5:25:b1:9f:20:e0:80:bb:63:
         14:db:27:f5:fa:20:e2:5e:9f:90:bd:ee:33:4d:53:43:05:29:
         11:6b:d4:8a:83:43:16:f7:be:77:07:20:fe:a9:2c:19:75:49:
         5e:b4:91:1f:79:76:fe:8d:81:ec:ac:84:aa:1f:f3:53:de:7a:
         25:38:91:44:aa:4f:a8:b0:a3:de:59:c6:01:df:75:56:e1:0c:
         39:6d:7a:f7:f0:c4:2f:32:98:14:39:a2:04:c3:7e:2c:c9:8d:
         9b:3a:49:41:61:0c:11:82:e9:e5:90:8c:58:f6:ea:b3:56:2e:
         ae:02:aa:84:40:49:e9:f6:74:bc:57:a1:30:11:b1:c3:81:e3:
         9a:c6:3f:96:ae:d2:12:c3:05:00:7e:3f:f9:8d:dc:4f:ab:93:
         f4:a6:15:7f:84:ad:62:c2:b7:0b:80:71:98:cd:1f:06:ac:96:
         8c:3e:11:8f:08:79:48:5e:b8:bd:37:f5:a3:4a:5b:e5:22:2a:
         22:b0:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----