Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/1bf9a7e88090e43cc77dd18d8b8722a5bba8b1b2.roa
File:                     1bf9a7e88090e43cc77dd18d8b8722a5bba8b1b2.roa (raw, json)
Hash identifier:          gnwdfZk4D+VVxjnfpzaEyj2Iur3ITmJONeriI//Aqg0=
Subject key identifier:   8B:39:49:15:C6:CE:44:10:31:49:41:94:7F:98:B2:5D:79:4E:2A:E5
Certificate issuer:       /CN=064899b606f78a681c0fd0649043cb728d259f11
Certificate serial:       11CE0B
Authority key identifier: CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/1bf9a7e88090e43cc77dd18d8b8722a5bba8b1b2.roa
Signing time:             Tue 18 Apr 2023 08:30:00 +0000
ROA not before:           Mon 17 Apr 2023 08:30:00 +0000
ROA not after:            Wed 16 Apr 2025 08:30:00 +0000
asID:                     267904
IP address blocks:        45.230.248.0/22 maxlen: 24
                          2803:f320::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166859 (0x11ce0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064899b606f78a681c0fd0649043cb728d259f11
        Validity
            Not Before: Apr 17 08:30:00 2023 GMT
            Not After : Apr 16 08:30:00 2025 GMT
        Subject: CN=1bf9a7e88090e43cc77dd18d8b8722a5bba8b1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:4a:2f:f6:51:5b:4b:f1:c7:21:bb:39:d3:
                    7e:a6:f4:8e:26:fc:50:b5:0a:e5:34:6a:59:24:9e:
                    0e:18:1e:32:d5:0a:c1:e1:8e:ff:89:34:2a:2c:ae:
                    20:a2:7a:bd:92:89:17:8d:07:6e:27:f4:5d:72:b9:
                    c8:e0:17:90:70:09:e1:ef:55:c8:6b:ef:33:ef:1d:
                    8d:9c:8f:5d:f2:da:64:88:a9:8d:d5:4c:27:de:f7:
                    fd:18:d2:fe:f4:87:3e:09:5f:24:94:fe:d3:ef:e8:
                    46:a4:cf:d7:46:2c:54:fc:24:fc:40:2a:9a:00:76:
                    96:68:31:eb:5a:79:ed:a9:cc:48:c4:25:c1:32:ad:
                    59:fd:b5:41:35:82:65:31:b1:7a:e7:ee:0d:b5:a4:
                    fd:a6:c8:58:35:d9:79:01:0e:67:2f:b9:82:04:39:
                    a5:26:d0:75:a8:ee:0c:ba:61:55:0c:bd:5f:68:f8:
                    e6:18:ec:6d:5d:a3:9c:36:e5:3c:f1:33:20:a1:47:
                    13:26:88:e3:b6:f0:ff:66:bc:be:ea:b3:d7:e6:64:
                    73:69:50:2b:1d:4f:6b:50:92:b8:bc:3d:42:1a:1a:
                    a3:d5:d4:dd:1e:ef:94:d3:99:2f:dd:eb:45:fb:36:
                    90:74:08:ca:3c:a9:60:35:04:9b:e9:b3:0a:20:d3:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:39:49:15:C6:CE:44:10:31:49:41:94:7F:98:B2:5D:79:4E:2A:E5
            X509v3 Authority Key Identifier:
                keyid:CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/1bf9a7e88090e43cc77dd18d8b8722a5bba8b1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.248.0/22
                IPv6:
                  2803:f320::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:bf:1a:36:25:50:eb:20:ed:ce:7d:3e:a3:c3:de:1b:81:49:
         54:e4:07:0f:1c:d7:5b:9b:4b:ae:45:ab:d2:6d:d5:1e:6c:58:
         59:e4:49:5e:f6:38:b4:06:f7:de:13:c6:88:5f:eb:af:29:5e:
         ff:39:38:50:9d:3a:60:27:f5:78:95:ee:f0:cc:cd:cb:71:b3:
         8e:fe:79:9c:bd:70:2a:a0:98:9d:2c:e5:0a:15:48:c3:f0:cf:
         b7:c0:4d:1c:2f:b3:6e:99:c0:d2:1e:96:e1:67:eb:e5:27:62:
         87:0b:2e:c5:9a:60:e0:e6:02:15:04:a7:ea:0a:02:32:45:16:
         12:d2:d7:3e:6e:e4:1f:cf:a6:0f:61:d4:f9:de:a9:c2:eb:86:
         82:7b:65:af:65:7d:f3:77:ef:26:bb:f1:06:8e:2b:3b:20:70:
         5b:83:37:68:cd:8f:37:9f:b5:c2:de:c8:3f:2c:fb:40:37:f3:
         25:66:fd:b1:71:27:f8:f8:af:75:13:da:ae:64:b9:34:6b:76:
         e2:8a:4e:a1:bc:45:67:c9:7a:d2:77:84:db:aa:2f:42:35:3a:
         ad:41:a1:e0:7a:7c:e2:b5:e5:d0:0c:07:52:ef:4b:fa:9a:80:
         3c:b6:6c:59:61:33:fb:ba:a5:76:ec:ae:00:3d:c1:89:b8:39:
         11:f1:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----