Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/837fbf28e60138846809692086bb19d8c55fefcd.roa
File:                     837fbf28e60138846809692086bb19d8c55fefcd.roa (raw, json)
Hash identifier:          BVTh4ecU8i5gGIr7GkmyO35quBZppizraWeJA6+Jm8U=
Subject key identifier:   5F:E8:AB:C0:4F:9A:1B:BA:12:54:E4:62:1C:A4:A9:90:BD:7D:93:F7
Certificate issuer:       /CN=ddadb9d544e015937addf6f7bacfb49314bd6944
Certificate serial:       1CE953
Authority key identifier: DB:63:79:4E:47:9E:22:56:88:1F:69:19:6B:73:88:AB:BB:F7:31:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddadb9d544e015937addf6f7bacfb49314bd6944.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/837fbf28e60138846809692086bb19d8c55fefcd.roa
Signing time:             Mon 08 May 2023 01:02:34 +0000
ROA not before:           Sun 07 May 2023 01:02:34 +0000
ROA not after:            Thu 08 May 2025 01:02:34 +0000
asID:                     265530
IP address blocks:        45.5.52.0/22 maxlen: 24
                          2806:28e::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894739 (0x1ce953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddadb9d544e015937addf6f7bacfb49314bd6944
        Validity
            Not Before: May  7 01:02:34 2023 GMT
            Not After : May  8 01:02:34 2025 GMT
        Subject: CN=837fbf28e60138846809692086bb19d8c55fefcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:05:b1:d5:80:16:b3:9d:90:67:ce:2d:b6:
                    0a:fa:bb:55:76:76:dc:96:13:22:4c:bd:4f:f5:b6:
                    52:73:62:e6:9c:ec:e6:53:05:eb:29:c7:ae:45:ba:
                    4f:4d:2e:56:04:b8:7f:0b:f2:fd:5b:b7:cc:1f:45:
                    c7:55:00:1f:ec:ea:b6:55:5c:5f:97:51:7e:f1:37:
                    7a:a6:5e:8a:82:f3:eb:a2:66:a8:40:c9:59:a2:80:
                    cc:03:1f:c7:c7:10:14:2e:e4:39:d2:8a:fa:bf:37:
                    7a:c5:0d:09:b2:24:63:29:db:e9:50:ba:24:8a:5f:
                    44:d4:44:f9:7d:9d:da:5c:30:f3:2d:a2:5b:41:03:
                    64:1c:69:fb:82:c9:8c:c0:d5:a1:e5:a5:f1:c1:2f:
                    c1:4f:55:6f:42:bc:2f:1e:91:a6:1f:0b:e1:7c:28:
                    74:38:f1:9f:ec:9a:ad:9d:e2:5d:82:31:f1:c8:aa:
                    7c:ab:d9:69:b7:97:28:c4:10:d4:fa:3d:72:bd:78:
                    0a:e3:4d:55:4c:b1:47:6a:a7:b2:18:78:d3:34:46:
                    af:da:2d:a1:7e:cd:d8:98:0a:16:a5:fd:10:fd:ca:
                    00:32:1b:69:69:f7:f2:b9:f4:30:56:8c:94:86:ed:
                    46:23:62:9a:05:4b:3d:bc:d8:d4:59:66:50:09:4a:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:AB:C0:4F:9A:1B:BA:12:54:E4:62:1C:A4:A9:90:BD:7D:93:F7
            X509v3 Authority Key Identifier:
                keyid:DB:63:79:4E:47:9E:22:56:88:1F:69:19:6B:73:88:AB:BB:F7:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddadb9d544e015937addf6f7bacfb49314bd6944.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/837fbf28e60138846809692086bb19d8c55fefcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/ddadb9d544e015937addf6f7bacfb49314bd6944.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.52.0/22
                IPv6:
                  2806:28e::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:0f:af:37:6f:7c:59:94:9d:13:3c:06:cc:1e:08:96:6e:
         12:51:67:2f:bb:c5:99:fc:85:51:10:50:9d:8d:8f:dc:2a:83:
         16:e8:92:e9:22:1d:b9:3d:62:72:ca:80:92:37:61:a3:69:f2:
         21:88:a2:45:2b:9e:83:17:de:66:3a:de:80:e9:5f:d4:c1:6c:
         7c:6d:49:fb:b6:0a:77:dc:7f:39:33:c5:46:30:91:8b:36:5f:
         e0:90:03:8f:19:0e:15:09:12:78:b8:10:6c:d8:27:77:4e:96:
         ff:15:dd:3e:02:60:d8:4c:ca:fa:30:e4:a1:80:0f:4c:c3:74:
         03:28:fb:1c:78:f8:93:c6:de:4c:1e:ee:75:97:ae:32:7c:98:
         5d:7f:b9:c7:87:27:2d:e6:8b:a4:8b:ba:68:cd:c6:c6:5c:f0:
         d9:af:0b:b9:66:bf:a8:5d:44:17:31:aa:2b:e2:28:2a:2b:b5:
         e3:e2:e2:99:c8:20:e2:2f:76:24:30:c0:7a:9a:bb:fd:5e:a5:
         33:e0:c3:58:7e:3b:07:e7:40:73:b6:78:cd:4e:85:f8:31:1c:
         88:56:99:64:f3:13:d9:0e:c0:41:45:e6:8b:e8:d2:78:1f:00:
         a0:a0:dd:58:9b:53:bc:57:5c:c1:43:01:21:74:59:c3:36:9b:
         b7:96:28:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHOlTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
YWRiOWQ1NDRlMDE1OTM3YWRkZjZmN2JhY2ZiNDkzMTRiZDY5NDQwHhcNMjMwNTA3
MDEwMjM0WhcNMjUwNTA4MDEwMjM0WjAzMTEwLwYDVQQDEyg4MzdmYmYyOGU2MDEz
ODg0NjgwOTY5MjA4NmJiMTlkOGM1NWZlZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArEwFsdWAFrOdkGfOLbYK+rtVdnbclhMiTL1P9bZSc2LmnOzm
UwXrKceuRbpPTS5WBLh/C/L9W7fMH0XHVQAf7Oq2VVxfl1F+8Td6pl6KgvPromao
QMlZooDMAx/HxxAULuQ50or6vzd6xQ0JsiRjKdvpULokil9E1ET5fZ3aXDDzLaJb
QQNkHGn7gsmMwNWh5aXxwS/BT1VvQrwvHpGmHwvhfCh0OPGf7JqtneJdgjHxyKp8
q9lpt5coxBDU+j1yvXgK401VTLFHaqeyGHjTNEav2i2hfs3YmAoWpf0Q/coAMhtp
affyufQwVoyUhu1GI2KaBUs9vNjUWWZQCUqNhQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFF/oq8BPmhu6ElTkYhykqZC9fZP3MB8GA1UdIwQYMBaAFNtjeU5HniJWiB9p
GWtziKu79zFdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGRhZGI5
ZDU0NGUwMTU5MzdhZGRmNmY3YmFjZmI0OTMxNGJkNjk0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDUzYTZhOTItZmI3NC00ZTJkLWEwNDEtYWU5OGJi
Y2Y5MDMzLzgzN2ZiZjI4ZTYwMTM4ODQ2ODA5NjkyMDg2YmIxOWQ4YzU1ZmVmY2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNTNhNmE5Mi1mYjc0LTRlMmQtYTA0MS1hZTk4
YmJjZjkwMzMvZGRhZGI5ZDU0NGUwMTU5MzdhZGRmNmY3YmFjZmI0OTMxNGJkNjk0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0FNDANBAIAAjAHAwUAKAYCjjANBgkqhkiG9w0BAQsFAAOC
AQEAC1UPrzdvfFmUnRM8BsweCJZuElFnL7vFmfyFURBQnY2P3CqDFuiS6SIduT1i
csqAkjdho2nyIYiiRSuegxfeZjregOlf1MFsfG1J+7YKd9x/OTPFRjCRizZf4JAD
jxkOFQkSeLgQbNgnd06W/xXdPgJg2EzK+jDkoYAPTMN0Ayj7HHj4k8beTB7udZeu
MnyYXX+5x4cnLeaLpIu6aM3Gxlzw2a8LuWa/qF1EFzGqK+IoKiu14+Limcgg4i92
JDDAepq7/V6lM+DDWH47B+dAc7Z4zU6F+DEciFaZZPMT2Q7AQUXmi+jSeB8AoKDd
WJtTvFdcwUMBIXRZwzabt5Yo3g==
-----END CERTIFICATE-----