Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/ed40859ed1999dd44a31f7dcdeaa66ecb20141c0.roa
File:                     ed40859ed1999dd44a31f7dcdeaa66ecb20141c0.roa (raw, json)
Hash identifier:          Onl3mTCY5wU5mkAGrASNZHpmXrAOl1VMtJOTd8vGcr8=
Subject key identifier:   60:4C:57:B4:E9:01:09:74:7C:9F:C6:F5:14:C8:0B:C0:42:F8:BD:3F
Certificate issuer:       /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial:       05E10C
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/ed40859ed1999dd44a31f7dcdeaa66ecb20141c0.roa
Signing time:             Wed 26 Apr 2023 22:28:27 +0000
ROA not before:           Tue 25 Apr 2023 22:28:26 +0000
ROA not after:            Sat 26 Apr 2025 22:28:26 +0000
asID:                     265679
IP address blocks:        45.4.216.0/22 maxlen: 24
                          2803:c1c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385292 (0x5e10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
        Validity
            Not Before: Apr 25 22:28:26 2023 GMT
            Not After : Apr 26 22:28:26 2025 GMT
        Subject: CN=ed40859ed1999dd44a31f7dcdeaa66ecb20141c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:e0:44:c4:52:3e:ae:28:71:60:a1:9e:6c:
                    94:16:57:50:a1:b2:5e:a5:4b:f9:7d:1c:48:6f:d1:
                    d9:d7:89:3f:ce:bb:12:1d:5f:28:d0:a7:94:35:72:
                    1c:50:b7:e6:42:ef:ac:8c:32:5a:89:58:59:12:58:
                    e1:fe:e3:67:af:96:6f:76:bb:4d:5e:2b:19:ce:eb:
                    ff:97:de:5b:b7:2c:c2:ee:f6:c5:83:d7:b1:33:ee:
                    64:74:fc:fc:a8:02:b5:6a:00:d0:77:ab:c5:f9:35:
                    94:0d:8b:a2:3d:b0:f2:4b:dc:63:77:ff:3c:ce:d5:
                    2a:fe:ac:96:13:aa:d6:5f:29:6e:1b:6f:34:4f:35:
                    7b:6d:28:a5:cd:28:d2:9b:31:cd:f3:0e:f1:60:f6:
                    e4:bf:e5:ec:79:9c:75:a5:ff:05:76:b8:42:57:85:
                    a8:64:3d:ed:6f:ab:c1:cc:90:d4:28:b2:ce:df:e2:
                    67:9c:bf:11:fd:66:c9:16:c3:2c:c0:ab:c7:b0:bf:
                    f4:3f:89:60:9b:a7:37:ac:fc:d6:ff:5b:41:61:eb:
                    a4:31:63:b6:69:73:4d:f6:42:c8:ee:7d:15:13:36:
                    1d:c6:7f:98:83:31:50:88:fb:05:92:9f:55:66:c1:
                    c4:f4:aa:a9:2a:2b:64:46:48:64:fe:f6:bc:4e:2e:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4C:57:B4:E9:01:09:74:7C:9F:C6:F5:14:C8:0B:C0:42:F8:BD:3F
            X509v3 Authority Key Identifier:
                keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/ed40859ed1999dd44a31f7dcdeaa66ecb20141c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:87:8a:4b:51:94:29:db:6b:5a:d4:b9:ab:52:55:16:68:
         22:14:d7:fc:0a:44:34:9d:d4:55:aa:e6:79:5b:bd:2a:36:0c:
         89:aa:ab:82:d1:31:41:ca:d7:e9:10:8a:b7:04:ce:63:f6:da:
         1b:f2:2a:71:16:9a:23:ca:c9:98:76:8b:6b:c1:15:55:e5:27:
         39:55:39:da:20:33:18:49:15:96:37:82:00:58:cf:68:a1:2f:
         eb:6e:9d:6d:d7:eb:d3:d3:3c:4e:20:28:e7:e3:4d:9a:59:09:
         53:91:c6:07:1e:83:b4:a4:4e:a8:74:1a:f5:6e:6f:64:3c:99:
         ab:44:ab:e8:6b:a6:5c:f0:3a:76:91:da:f9:8c:e8:dc:a5:a6:
         82:3e:d4:27:fa:0c:11:07:20:bb:5c:69:4a:87:28:1b:52:4c:
         6f:0a:5c:23:5f:61:ff:ee:e3:ed:7f:f0:cc:21:a6:15:b8:d7:
         da:f1:5b:2d:34:d7:0e:89:74:c7:d5:bc:be:c4:07:d4:e0:43:
         c4:df:f8:a3:4f:37:60:22:bd:49:30:0b:58:cd:f7:a2:aa:fa:
         c7:c6:fb:1d:6c:e8:54:58:8c:ee:65:09:80:1e:57:8c:aa:ab:
         69:bb:b1:e5:04:bd:b9:97:12:93:ff:4a:56:29:00:f2:97:92:
         7d:c9:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----