Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba602039-29cc-4882-bb6d-8ad0888c926c/c18ec98b72cda97a850d7d5391195719ea650169.roa
File:                     c18ec98b72cda97a850d7d5391195719ea650169.roa (raw, json)
Hash identifier:          9BEZV8JkObvUnPET8CCMslKzqmXDLP2FaXwpCciM+iU=
Subject key identifier:   4C:F7:06:77:48:0B:19:D6:7C:DB:FB:FE:96:BA:D4:90:F2:8B:78:D3
Certificate issuer:       /CN=3cc00d0b456c87c1b65e79b5b2d23c50882730af
Certificate serial:       1CE16D
Authority key identifier: 66:E0:A8:ED:CE:72:8E:34:24:C1:B5:6C:C4:B6:C6:63:84:81:37:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cc00d0b456c87c1b65e79b5b2d23c50882730af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba602039-29cc-4882-bb6d-8ad0888c926c/c18ec98b72cda97a850d7d5391195719ea650169.roa
Signing time:             Sat 14 Jan 2023 13:49:00 +0000
ROA not before:           Thu 12 Jan 2023 13:42:33 +0000
ROA not after:            Tue 14 Jan 2025 13:42:33 +0000
asID:                     267722
IP address blocks:        45.166.16.0/22 maxlen: 24
                          2803:5a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892717 (0x1ce16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc00d0b456c87c1b65e79b5b2d23c50882730af
        Validity
            Not Before: Jan 12 13:42:33 2023 GMT
            Not After : Jan 14 13:42:33 2025 GMT
        Subject: CN=c18ec98b72cda97a850d7d5391195719ea650169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:52:e4:38:78:86:37:47:27:e7:fa:a0:af:
                    af:a3:db:bf:87:5b:fc:09:52:bc:4f:23:d7:2e:af:
                    f3:a0:d8:93:2a:36:82:5f:46:d1:e9:a2:7c:e4:3d:
                    dc:32:4d:97:49:08:a8:5f:ad:1b:a7:6a:7b:90:2a:
                    50:86:84:a2:6b:b7:64:a3:48:dd:85:b2:55:da:5e:
                    81:14:84:a7:38:85:52:33:b9:a2:66:b3:ae:0f:b5:
                    45:9a:33:62:14:5c:b0:3c:f7:5a:d9:77:cc:71:40:
                    d6:68:26:cf:61:b2:af:c1:db:38:e1:fa:c4:ca:47:
                    4d:80:f1:60:94:d5:da:29:40:e4:d3:b2:eb:89:fe:
                    be:8a:85:28:a1:53:fa:84:80:bb:02:96:50:90:93:
                    8d:4a:a0:1b:17:62:ce:ba:fe:f3:e3:aa:2f:68:21:
                    d9:7d:7d:92:c8:c1:aa:8c:66:8d:f1:eb:38:5e:6d:
                    36:1c:1a:72:6c:35:44:5f:84:b1:3e:e5:42:7e:83:
                    35:76:52:77:f0:7f:51:60:04:5f:75:09:d6:19:54:
                    26:9c:cc:c4:97:0c:a2:d2:c5:d5:b5:7d:d4:46:fd:
                    a6:df:83:3d:b7:ff:72:28:b5:85:b5:ae:85:22:fe:
                    64:03:e9:5e:b6:67:38:9c:85:03:b1:ec:80:e9:77:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F7:06:77:48:0B:19:D6:7C:DB:FB:FE:96:BA:D4:90:F2:8B:78:D3
            X509v3 Authority Key Identifier:
                keyid:66:E0:A8:ED:CE:72:8E:34:24:C1:B5:6C:C4:B6:C6:63:84:81:37:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cc00d0b456c87c1b65e79b5b2d23c50882730af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba602039-29cc-4882-bb6d-8ad0888c926c/c18ec98b72cda97a850d7d5391195719ea650169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba602039-29cc-4882-bb6d-8ad0888c926c/3cc00d0b456c87c1b65e79b5b2d23c50882730af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.16.0/22
                IPv6:
                  2803:5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:76:03:8f:03:a1:74:75:42:52:fa:a7:ae:9e:32:f5:25:
         1f:58:09:6a:f4:07:d8:52:90:d2:8f:08:2e:86:6d:b1:67:e6:
         22:9a:a4:54:be:32:f7:7d:08:16:8b:af:b9:65:52:24:74:d5:
         b2:21:4f:0a:bc:ea:50:3f:31:3c:1f:37:a3:eb:bf:65:22:9f:
         16:cb:cb:b5:64:27:77:95:29:a1:4b:15:4e:e6:00:93:b7:2d:
         01:a7:c7:8e:26:02:90:47:4b:fd:91:6e:25:6d:ce:ca:ef:0f:
         da:69:d5:29:95:92:cb:fb:0c:9b:4b:b1:77:d6:85:02:c2:ba:
         18:42:b3:76:b6:a5:b0:cd:61:e5:99:30:3c:47:db:de:99:94:
         b6:9c:f7:af:fe:38:76:8d:b6:80:c3:59:a3:0f:dc:e7:b0:75:
         9e:40:58:49:b9:20:45:50:c0:c4:08:ac:60:b5:ab:df:bf:4b:
         97:f3:1e:86:bf:da:07:0a:e1:dd:cb:d5:3c:8a:44:1b:69:84:
         a9:65:7c:d4:e5:2c:ba:27:43:77:0e:f5:53:ee:7e:b4:70:96:
         57:76:cc:85:09:b1:d6:1b:aa:74:ee:ab:c3:bf:fc:52:f2:67:
         e9:ef:0a:19:67:1a:1f:be:82:6b:48:ef:b4:b2:0b:2a:13:04:
         3f:cb:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----