Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/370cd12bfe354ee02fa7667fb9d54ac9aff4460a.roa
File:                     370cd12bfe354ee02fa7667fb9d54ac9aff4460a.roa (raw, json)
Hash identifier:          Qt23pkHhuyQGYabtAoTA/UeoMe2U0MizL0IMJC4gKsQ=
Subject key identifier:   C2:9F:BC:93:01:CD:B0:81:40:75:CB:07:D5:DA:A3:2F:60:AA:78:DE
Certificate issuer:       /CN=ebf04e08f0d4a39fc5898cea5aace966693cd306
Certificate serial:       0B9849
Authority key identifier: 65:E4:60:77:5F:FE:64:52:53:62:2E:3F:8E:DC:43:11:A4:A2:0C:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf04e08f0d4a39fc5898cea5aace966693cd306.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/370cd12bfe354ee02fa7667fb9d54ac9aff4460a.roa
Signing time:             Thu 30 Nov 2023 06:52:06 +0000
ROA not before:           Thu 30 Nov 2023 06:52:06 +0000
ROA not after:            Sun 30 Nov 2025 06:52:06 +0000
asID:                     269818
IP address blocks:        45.184.152.0/22 maxlen: 22
                          45.184.152.0/24 maxlen: 24
                          45.184.153.0/24 maxlen: 24
                          45.184.154.0/24 maxlen: 24
                          45.184.155.0/24 maxlen: 24
                          2803:4760::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759881 (0xb9849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf04e08f0d4a39fc5898cea5aace966693cd306
        Validity
            Not Before: Nov 30 06:52:06 2023 GMT
            Not After : Nov 30 06:52:06 2025 GMT
        Subject: CN=370cd12bfe354ee02fa7667fb9d54ac9aff4460a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:df:4c:4c:a8:89:07:c9:84:a3:5d:e4:48:
                    af:8d:5b:91:72:b6:39:d2:76:55:6c:45:10:76:0d:
                    7b:8a:90:2c:d6:bf:b9:94:74:3e:1e:02:b0:ea:d9:
                    22:c4:d1:bf:36:ca:20:a1:a1:48:89:b6:77:6e:ce:
                    1f:b2:05:19:66:7d:d9:bf:e3:f7:af:8c:0a:83:68:
                    6a:b4:cd:5e:7f:c4:2d:5a:f7:87:d8:6f:af:03:0b:
                    c2:15:18:1e:86:31:42:f6:8c:3a:42:0f:18:e6:78:
                    df:5b:6a:6a:d1:14:21:a2:c9:b5:71:38:9b:ec:0a:
                    6f:15:33:8d:e3:c3:ae:60:70:6e:81:5a:fa:8f:ea:
                    97:4a:a7:db:9b:ab:92:78:d8:5c:fd:1e:c1:2c:c7:
                    0a:29:03:1c:c5:9f:a1:01:82:f0:49:fc:15:1f:aa:
                    e8:42:2a:96:53:15:e9:84:30:64:30:eb:87:4d:ad:
                    68:9a:59:74:71:f1:60:d9:05:13:99:ba:b9:3a:65:
                    11:9c:ff:46:74:ef:f1:02:46:b1:92:53:c8:2a:44:
                    ca:c2:80:51:44:d9:50:04:8c:41:67:fd:d8:8f:78:
                    95:3c:c3:02:20:bc:fb:8c:b4:2a:46:07:af:71:99:
                    67:58:69:ba:f5:14:67:17:fd:d9:e3:20:ff:d3:c3:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:BC:93:01:CD:B0:81:40:75:CB:07:D5:DA:A3:2F:60:AA:78:DE
            X509v3 Authority Key Identifier:
                keyid:65:E4:60:77:5F:FE:64:52:53:62:2E:3F:8E:DC:43:11:A4:A2:0C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf04e08f0d4a39fc5898cea5aace966693cd306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/370cd12bfe354ee02fa7667fb9d54ac9aff4460a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/ebf04e08f0d4a39fc5898cea5aace966693cd306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.152.0/22
                IPv6:
                  2803:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:59:5b:51:40:5d:86:02:8d:7a:80:c9:13:04:b5:cd:c8:dd:
         2b:02:95:36:3c:42:92:84:61:5f:cf:8d:ee:f5:d0:fe:fb:92:
         14:a7:e4:fc:30:99:f3:29:b2:62:e1:9f:1a:44:47:cd:70:0f:
         a9:06:d5:d8:28:00:b5:22:2c:e3:a0:81:59:d8:e9:98:aa:96:
         ec:63:bf:e5:84:99:fd:be:41:c3:31:b5:96:aa:d8:09:37:4c:
         1b:5d:af:b8:d9:f2:92:43:02:a0:de:bd:c3:be:c1:9d:f3:e4:
         df:05:e9:d1:df:aa:f8:a0:36:0d:4b:36:f9:9d:35:bc:62:00:
         1c:08:c4:34:ed:ec:a4:30:8c:7d:18:79:1e:05:3a:b6:41:47:
         3b:b1:bf:1a:40:75:b8:e0:4e:b3:53:bf:cf:25:52:0a:86:31:
         56:17:22:90:d0:1d:0b:8c:70:93:f1:84:0f:27:d4:f7:6e:7a:
         f5:66:94:c4:83:f3:66:66:7f:6a:87:a7:18:58:4c:87:76:81:
         7b:d5:6c:4d:f6:81:03:81:7a:84:3c:82:54:91:79:1b:c7:c9:
         07:43:3e:0b:f4:c4:d8:5a:12:c9:9e:e3:6f:2a:8e:55:c0:5a:
         cf:32:36:75:31:73:3c:22:1d:1d:58:ac:85:bc:e0:56:a0:86:
         6e:59:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----