Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/a1cdea8e7b87e57e89700472eed9653ca13b0792.roa
File:                     a1cdea8e7b87e57e89700472eed9653ca13b0792.roa (raw, json)
Hash identifier:          CQvUK34Ta6RJ9qTyAdjLak30CbBE+o8TKdrgwxMZU3Q=
Subject key identifier:   08:36:76:D5:D4:94:BD:AB:F8:4D:CA:7F:7F:34:22:DF:88:33:29:4E
Certificate issuer:       /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial:       034CDD
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/a1cdea8e7b87e57e89700472eed9653ca13b0792.roa
Signing time:             Thu 12 Jan 2023 19:39:29 +0000
ROA not before:           Tue 10 Jan 2023 18:53:21 +0000
ROA not after:            Sun 12 Jan 2025 18:53:21 +0000
asID:                     52361
IP address blocks:        45.4.216.0/22 maxlen: 24
                          2803:c1c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216285 (0x34cdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
        Validity
            Not Before: Jan 10 18:53:21 2023 GMT
            Not After : Jan 12 18:53:21 2025 GMT
        Subject: CN=a1cdea8e7b87e57e89700472eed9653ca13b0792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:c2:3e:e9:9c:a9:2f:4b:93:91:db:1d:65:
                    8d:ca:76:ff:f8:1d:fe:2b:1e:ea:83:6b:d5:b0:bf:
                    df:64:d9:80:63:e8:2f:56:7e:5c:3e:da:43:18:1e:
                    c1:a0:3a:a4:f8:79:7d:c3:a4:1c:8e:9d:c2:40:64:
                    67:48:5f:08:68:c2:b8:24:3b:f8:8f:50:8a:42:82:
                    62:17:49:3c:9e:43:41:86:6f:9b:62:76:0b:44:6a:
                    d1:99:5a:9c:03:43:47:d7:d7:25:d2:ad:8e:02:89:
                    65:72:63:66:1b:35:a9:01:c8:93:bb:f7:b9:87:26:
                    f9:06:ab:94:30:27:4b:c1:7a:80:b9:c3:9a:72:56:
                    d2:14:90:1b:21:2d:f9:d8:37:25:79:12:51:99:c0:
                    15:bf:73:4e:0b:85:6c:ed:21:b6:88:51:6d:7b:d5:
                    e7:c9:98:da:09:34:a2:00:9f:b0:0c:65:25:57:1e:
                    99:b4:dd:85:cb:6c:19:11:ab:3c:94:df:4f:ed:36:
                    b1:dd:56:fe:a9:58:e8:ce:86:63:6e:e4:4d:2f:0d:
                    bd:90:df:15:71:f8:41:23:4c:d2:21:70:56:0a:6a:
                    ad:e5:86:07:a0:06:67:69:1a:3e:f7:14:8c:52:5a:
                    b1:9d:62:56:70:23:6e:fb:ce:97:94:8f:22:f8:2e:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:76:D5:D4:94:BD:AB:F8:4D:CA:7F:7F:34:22:DF:88:33:29:4E
            X509v3 Authority Key Identifier:
                keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/a1cdea8e7b87e57e89700472eed9653ca13b0792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:55:fc:30:83:5a:fa:e6:b4:0b:6f:52:1b:a1:a3:d5:11:
         ae:a2:8a:b9:07:1d:3d:a1:c8:c4:8d:98:7c:1d:41:b6:4c:8c:
         ef:3f:cd:91:19:32:f1:db:0b:7e:f9:33:ee:af:76:22:12:ae:
         c8:2b:1c:1e:53:9c:d9:cd:8b:e4:19:b6:9c:ce:bd:0e:8b:ab:
         64:7e:5b:80:0f:67:3a:89:26:5a:f6:68:d7:98:14:59:f2:35:
         43:2d:ba:32:ff:f6:ed:ab:47:46:80:23:c9:9b:bc:78:e2:65:
         f1:d9:c9:63:2b:72:99:b1:59:18:85:0d:62:12:ee:db:a5:c8:
         eb:3e:68:5f:da:6f:eb:6b:f9:a5:e7:20:4f:e4:6e:a3:a2:cb:
         7e:5b:a8:1c:27:ed:85:fa:1c:c9:87:5e:a9:96:37:e5:f7:3b:
         f0:ed:2b:b6:33:2f:b5:51:82:77:c7:3e:30:29:80:1f:cc:14:
         d4:d3:79:89:7a:fc:02:d7:ea:e2:87:68:0f:77:ce:61:bd:01:
         4e:21:35:ba:f6:c0:f0:87:24:eb:1c:8e:6e:24:cf:a2:92:b4:
         da:15:bb:93:7a:11:fd:07:2d:ce:b4:57:a1:8b:b3:16:cf:1b:
         1c:80:76:eb:84:4b:81:b1:1a:f1:02:a7:ef:e3:19:8b:d1:fb:
         35:09:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----