Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/793ca7061a1aaa5c115771a9e34d9f35639b6eb8.roa
File:                     793ca7061a1aaa5c115771a9e34d9f35639b6eb8.roa (raw, json)
Hash identifier:          uHgpbckIacWNDX6qdNJG3Px0KWoCu1maRLZTutfxgms=
Subject key identifier:   EC:AB:E6:B4:40:D3:20:36:B6:D5:44:5E:80:41:08:6C:4C:F0:15:E3
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       21CE39
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/793ca7061a1aaa5c115771a9e34d9f35639b6eb8.roa
Signing time:             Fri 16 Jun 2023 16:55:21 +0000
ROA not before:           Thu 15 Jun 2023 16:55:20 +0000
ROA not after:            Mon 16 Jun 2025 16:55:20 +0000
asID:                     262186
IP address blocks:        45.65.136.0/22 maxlen: 22
                          2803:a5c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215481 (0x21ce39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Jun 15 16:55:20 2023 GMT
            Not After : Jun 16 16:55:20 2025 GMT
        Subject: CN=793ca7061a1aaa5c115771a9e34d9f35639b6eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:e8:8b:df:c1:85:c6:9a:3a:aa:34:df:d3:
                    0f:bd:6e:15:0d:0d:20:28:25:00:5d:f1:78:94:72:
                    46:c5:c0:21:4a:6b:e4:8f:17:77:a4:0c:b7:d2:29:
                    cb:6a:7f:62:b1:36:af:3b:4d:1d:36:17:75:9a:62:
                    98:9b:39:16:8d:02:77:e6:bc:dc:47:76:b5:a1:82:
                    f3:b7:0c:b1:96:23:8e:e5:04:02:d1:a6:e9:3d:a6:
                    47:6c:8b:e9:d2:00:6c:41:53:ec:a4:92:6a:15:f2:
                    fa:97:e8:6c:8e:be:c9:1f:23:a8:d8:e6:b5:bb:4e:
                    85:90:4a:04:d0:16:b0:ee:b3:25:20:95:c4:a9:1e:
                    a6:84:a6:12:63:ef:69:3b:f1:e3:13:9e:55:13:9d:
                    e5:67:44:09:e5:b0:57:bd:0a:82:9c:38:61:65:aa:
                    88:d1:ab:98:4b:9c:8a:60:4d:bc:9f:df:26:22:17:
                    3a:0f:dd:59:7c:ff:c1:4d:11:76:d7:ab:8a:c0:27:
                    06:0f:4c:34:99:41:ee:8a:7c:39:00:db:4c:1d:a0:
                    bf:1c:23:54:96:51:9b:a2:3a:48:1d:e0:72:90:dc:
                    c0:b0:4c:e6:84:67:41:08:b7:2b:3a:be:bf:92:80:
                    23:15:a0:ef:8a:41:13:60:c8:a8:ca:57:9f:50:77:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:E6:B4:40:D3:20:36:B6:D5:44:5E:80:41:08:6C:4C:F0:15:E3
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/793ca7061a1aaa5c115771a9e34d9f35639b6eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.136.0/22
                IPv6:
                  2803:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:91:e3:ea:bf:75:c8:43:42:6d:fa:70:df:76:7f:47:4a:b2:
         fd:9e:42:44:ba:5b:b6:51:c0:4c:05:e8:4a:53:ec:6c:d8:d8:
         b3:67:36:b3:71:5d:ba:db:91:67:cf:9a:3d:9f:a4:81:ca:fa:
         53:b9:02:e1:83:e0:72:f8:ba:f2:1a:34:8c:7f:18:32:8f:86:
         ba:bb:22:41:47:78:31:98:bb:e7:4f:eb:32:f8:23:9e:c8:33:
         75:dd:3b:83:66:e9:04:ed:ef:75:b2:14:88:d1:a6:51:05:ff:
         c4:f9:5a:51:e5:4a:4b:b8:be:f6:a3:51:05:14:26:18:1a:ed:
         68:51:f6:21:cd:fc:e0:34:53:eb:7f:59:11:23:ab:84:7a:21:
         f1:4d:66:6c:b4:b4:17:9b:b0:d0:50:7e:19:02:a3:5a:8a:25:
         09:a9:23:ee:14:08:50:1f:28:a4:9a:bc:74:7e:b0:66:48:9f:
         d6:1c:dc:5b:9f:ab:9f:64:d8:64:94:64:0e:5f:3b:67:cd:42:
         05:22:49:2d:db:7c:45:17:22:33:d4:a2:15:66:db:c5:5d:66:
         0c:5e:fe:01:7b:44:d2:f0:bf:15:92:e7:d2:2b:c4:03:ba:13:
         fe:45:66:0f:79:30:0c:d8:5c:c6:7b:f4:62:25:ca:52:61:6a:
         73:3b:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----