Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/c1b2aea38a47820ebf23675d8121c0d45408e95c.roa
File:                     c1b2aea38a47820ebf23675d8121c0d45408e95c.roa (raw, json)
Hash identifier:          WxewW97yldNFzMIY5acZ3kxBouWIaLCWeqv4idT6PWw=
Subject key identifier:   D0:0F:33:AC:EC:2A:EE:27:D0:E5:FC:56:EE:25:15:F0:E0:CD:77:F7
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       2482FC
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/c1b2aea38a47820ebf23675d8121c0d45408e95c.roa
Signing time:             Fri 13 Oct 2023 08:30:02 +0000
ROA not before:           Thu 12 Oct 2023 08:30:02 +0000
ROA not after:            Sat 11 Oct 2025 08:30:02 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24
                          2803:a0a0:901::/48 maxlen: 48
                          2803:a0a0:903::/48 maxlen: 48
                          2803:a0a0:904::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392828 (0x2482fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Oct 12 08:30:02 2023 GMT
            Not After : Oct 11 08:30:02 2025 GMT
        Subject: CN=c1b2aea38a47820ebf23675d8121c0d45408e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:24:98:77:dc:bb:90:45:6d:fa:8d:2a:53:
                    26:1d:12:7e:0b:6c:a4:a5:76:db:75:c4:0b:77:e9:
                    ae:d3:37:53:44:4a:12:68:33:3c:eb:90:f9:dc:fc:
                    da:39:76:5e:98:cc:c0:d8:1e:6c:dc:d1:fe:1c:e4:
                    b1:0b:ad:bc:d7:5a:2a:53:e2:a3:ff:f9:0f:f0:73:
                    88:d8:a9:51:89:6c:7d:24:e0:42:1b:83:60:22:a9:
                    f4:69:b6:77:26:09:ea:e7:eb:50:f4:57:9a:24:75:
                    80:2a:64:91:b0:d1:71:08:ec:88:05:99:eb:5e:c2:
                    01:38:0b:a5:77:d0:ea:72:a8:eb:fb:bc:80:6e:90:
                    46:21:a2:ae:ee:84:18:df:15:ca:38:3a:95:68:46:
                    25:02:c4:ac:1f:6f:df:23:06:49:f2:09:5d:7b:d0:
                    6a:b1:8e:7c:53:b5:7a:b9:24:27:b1:84:93:98:67:
                    1d:30:4d:f8:27:d5:fe:2d:8f:69:4c:52:9b:e6:74:
                    0f:81:22:37:32:5e:50:c8:54:08:3f:3d:a8:00:7a:
                    d8:a7:00:6e:43:6c:4e:6d:9b:71:47:eb:66:45:36:
                    b7:5e:f2:96:12:f7:08:b2:de:bb:c0:e9:79:d5:0e:
                    6e:91:78:09:1b:e8:58:86:ca:1c:80:1f:c4:6b:4a:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0F:33:AC:EC:2A:EE:27:D0:E5:FC:56:EE:25:15:F0:E0:CD:77:F7
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/c1b2aea38a47820ebf23675d8121c0d45408e95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24
                IPv6:
                  2803:a0a0:901::/48
                  2803:a0a0:903::-2803:a0a0:904:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:29:0f:87:1d:c6:3e:7e:82:60:35:92:ff:65:50:61:75:
         9c:a4:b3:24:fd:c9:38:7e:f3:0e:9b:dc:0a:ac:af:c9:62:62:
         15:d6:83:85:d9:2a:ff:f2:81:6d:08:af:02:cc:5a:79:57:0d:
         1b:86:35:b4:02:9a:5a:69:d7:08:45:78:ca:3f:ba:5b:0a:c3:
         04:37:c1:b6:4f:7d:e2:95:a1:1f:22:84:84:7f:96:49:39:26:
         03:b6:6b:11:7e:79:e0:dc:36:78:ab:21:91:f0:3a:59:ef:1d:
         e8:49:e5:01:2c:67:83:9b:eb:d7:34:8f:77:3a:99:e2:52:0f:
         d2:36:6a:d2:f8:4f:b1:f5:77:ba:cc:4f:a8:f1:ca:81:28:94:
         5f:72:27:38:df:d7:8b:d2:d5:67:6e:d5:5b:29:f0:15:62:bd:
         15:3e:c7:e8:f2:7e:9a:6e:b1:67:6e:5b:0a:9e:56:54:18:e6:
         c1:cc:68:c6:9b:67:78:4f:a1:57:27:50:71:88:e1:04:34:1c:
         1e:01:03:65:67:a2:f4:48:21:ce:e8:7f:e3:6b:be:ac:1c:5a:
         1c:9f:ab:55:58:a8:fe:fb:d9:ad:46:eb:20:9a:e1:70:bf:5a:
         88:ef:40:c8:59:8a:25:cb:da:3d:e1:7e:3a:6d:56:57:9d:17:
         f9:bd:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----