Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/2f4ae9574f1ce6530334c7e95da818febc6eca16.roa
File:                     2f4ae9574f1ce6530334c7e95da818febc6eca16.roa (raw, json)
Hash identifier:          4+QxKd6BmMN1DgYgRM9L0dM2BWrbBKaM/SIdkqvUHHY=
Subject key identifier:   4A:B0:B3:70:36:7B:D3:B9:E0:33:14:47:74:C3:4F:34:31:36:C5:5C
Certificate issuer:       /CN=da8b9d0a8b3007b4981a95a764326193703dd137
Certificate serial:       1E3B17
Authority key identifier: 57:2B:27:8A:BE:28:DA:2D:48:76:71:F0:24:E5:95:9D:96:97:9D:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da8b9d0a8b3007b4981a95a764326193703dd137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/2f4ae9574f1ce6530334c7e95da818febc6eca16.roa
Signing time:             Thu 29 Jun 2023 20:29:23 +0000
ROA not before:           Wed 28 Jun 2023 20:29:23 +0000
ROA not after:            Sun 29 Jun 2025 20:29:23 +0000
asID:                     52468
IP address blocks:        45.190.184.0/22 maxlen: 24
                          2803:48e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981207 (0x1e3b17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8b9d0a8b3007b4981a95a764326193703dd137
        Validity
            Not Before: Jun 28 20:29:23 2023 GMT
            Not After : Jun 29 20:29:23 2025 GMT
        Subject: CN=2f4ae9574f1ce6530334c7e95da818febc6eca16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:ea:4c:c6:eb:df:94:d5:59:93:b4:4a:30:
                    05:90:02:ac:06:f9:35:e8:8b:84:05:c7:83:8e:64:
                    1e:ba:a9:36:ad:11:ad:1e:34:c2:1e:99:cd:e7:1d:
                    ee:7c:28:95:ba:5e:bc:86:f2:4e:3e:23:8e:9c:79:
                    13:3a:e8:08:35:c9:d3:c9:06:e6:50:f2:be:6e:a3:
                    72:1c:bc:a3:57:8b:07:b9:e5:e3:6b:ad:4e:10:7f:
                    97:fc:3f:59:d1:bf:57:d7:bf:47:8b:64:29:d1:ef:
                    a9:37:25:37:44:80:51:27:c5:48:06:b6:c4:14:b1:
                    de:ee:ba:61:f1:f8:b1:2e:9b:15:f6:2c:63:c6:33:
                    ec:e1:eb:10:d1:69:16:16:a5:e4:2e:fe:0f:10:c8:
                    b2:81:56:92:89:f0:1b:90:94:f9:1f:eb:67:4e:ea:
                    06:b3:5c:bc:2e:6c:ce:0a:8a:fa:12:5f:c5:c8:ec:
                    6b:6f:cb:50:16:d6:fa:07:1b:e2:ef:b4:8e:80:a6:
                    0f:fd:83:a1:b9:a6:17:91:c7:a7:9a:fe:ae:70:66:
                    c2:f6:67:a3:8a:0d:d5:0a:ff:ef:4e:b2:ea:1e:af:
                    70:a8:89:8c:83:2a:81:df:d5:17:e2:47:52:24:01:
                    d7:e9:2f:1c:5c:14:c7:26:22:81:20:de:7e:a4:eb:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:B3:70:36:7B:D3:B9:E0:33:14:47:74:C3:4F:34:31:36:C5:5C
            X509v3 Authority Key Identifier:
                keyid:57:2B:27:8A:BE:28:DA:2D:48:76:71:F0:24:E5:95:9D:96:97:9D:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da8b9d0a8b3007b4981a95a764326193703dd137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/2f4ae9574f1ce6530334c7e95da818febc6eca16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/da8b9d0a8b3007b4981a95a764326193703dd137.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.184.0/22
                IPv6:
                  2803:48e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:a6:08:d6:4a:eb:7d:d4:f7:77:20:bd:82:ed:da:05:d5:
         e6:0b:bd:75:19:e9:ed:16:63:b0:bf:fe:d2:38:0e:d8:b5:43:
         2b:a2:ff:31:d3:73:0f:af:93:1b:f5:97:0a:f2:57:36:6b:f8:
         d6:18:47:f0:b7:e3:e5:f5:b0:cc:40:0e:cd:56:d1:09:9d:1d:
         ff:ed:ee:7d:bc:97:f6:c1:7d:eb:04:bc:23:87:3e:53:67:8e:
         15:5a:72:07:07:a1:66:69:d2:9f:41:6f:6c:e3:3d:11:98:6c:
         bb:a5:17:d2:31:fa:8e:87:34:00:d4:3a:52:e2:bd:b5:e1:49:
         c8:2e:95:f9:5c:4c:28:13:68:ae:85:2c:5a:2d:ca:78:94:96:
         d7:ef:79:5c:5a:52:68:26:14:b0:f9:e4:06:c1:81:19:26:7f:
         68:79:3f:32:77:c4:80:8f:1d:43:c7:9d:de:01:3e:1e:c6:87:
         cf:65:6f:c9:5d:c8:81:02:aa:7a:60:54:f6:99:9b:cf:69:8e:
         ea:be:63:c1:72:79:05:6a:9e:5f:7e:5e:dc:8e:6e:7d:f7:71:
         cb:d3:75:4f:9a:5e:7d:de:cd:e3:e2:9f:35:cd:0b:c4:3c:4e:
         29:4d:2a:36:22:3f:04:0b:14:d7:3f:1f:8d:6a:2c:74:7f:37:
         c9:66:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----