Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/e1724d4d110ddc29b15831bb329bc4ec60babb54.roa
File:                     e1724d4d110ddc29b15831bb329bc4ec60babb54.roa (raw, json)
Hash identifier:          tTZlActmBNYKWINSY+gZaViNopWBGea/txy7np4RdUI=
Subject key identifier:   2C:D8:81:9E:4F:E0:62:A3:B6:A2:40:09:16:3E:CA:41:1E:EA:5A:3C
Certificate issuer:       /CN=4358464441e9d4d59b11d9f7116feb4008767b40
Certificate serial:       1032
Authority key identifier: 48:AD:0F:A4:E7:3D:1D:31:ED:EB:E3:38:69:C2:9F:8C:EB:5B:F4:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4358464441e9d4d59b11d9f7116feb4008767b40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/e1724d4d110ddc29b15831bb329bc4ec60babb54.roa
Signing time:             Thu 03 Aug 2023 17:20:47 +0000
ROA not before:           Wed 02 Aug 2023 17:20:47 +0000
ROA not after:            Sun 03 Aug 2025 17:20:47 +0000
asID:                     267728
IP address blocks:        45.167.24.0/22 maxlen: 22
                          2803:a5a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4146 (0x1032)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4358464441e9d4d59b11d9f7116feb4008767b40
        Validity
            Not Before: Aug  2 17:20:47 2023 GMT
            Not After : Aug  3 17:20:47 2025 GMT
        Subject: CN=e1724d4d110ddc29b15831bb329bc4ec60babb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:b2:ec:88:ba:cc:ce:f0:3e:db:5e:08:84:
                    96:de:f3:ac:fb:bf:78:b7:7f:6b:84:37:6a:4b:08:
                    8d:87:81:a7:c7:7f:73:ec:c7:51:e9:98:ee:4e:ac:
                    b1:9c:fb:cc:15:60:50:a2:81:8f:33:a0:96:f6:c6:
                    15:01:bf:48:46:60:9d:06:7e:f1:70:7a:28:81:15:
                    43:2b:03:e4:03:d3:fb:43:6a:73:e0:b1:99:9e:e9:
                    26:f5:e7:a9:a5:0a:0f:74:b5:7d:33:b7:af:10:1a:
                    44:ae:98:d5:ba:7c:fe:c1:b6:31:a2:68:32:ad:46:
                    04:7a:b6:86:8d:e4:ef:a7:65:46:57:50:ae:34:12:
                    75:9a:06:9e:d4:f1:7e:9e:46:6d:c1:56:f4:91:37:
                    39:bd:bd:5e:a5:87:bb:3d:f1:04:aa:77:e6:1e:c2:
                    99:eb:b0:1c:6d:b4:ac:ff:2b:90:f7:d3:82:23:ba:
                    f2:6d:d5:bb:08:1f:f9:45:7b:2d:13:94:cf:36:27:
                    a5:85:f1:1e:c9:31:a1:c9:f4:a4:c9:c7:4d:6e:c2:
                    6d:23:49:dc:78:28:58:f8:cb:59:ee:40:61:c4:35:
                    cb:29:24:c6:ce:e8:80:c8:be:2d:01:e5:67:1a:bf:
                    84:4b:91:7e:ec:4f:9e:24:53:20:5e:9c:25:60:cf:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D8:81:9E:4F:E0:62:A3:B6:A2:40:09:16:3E:CA:41:1E:EA:5A:3C
            X509v3 Authority Key Identifier:
                keyid:48:AD:0F:A4:E7:3D:1D:31:ED:EB:E3:38:69:C2:9F:8C:EB:5B:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4358464441e9d4d59b11d9f7116feb4008767b40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/e1724d4d110ddc29b15831bb329bc4ec60babb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/4358464441e9d4d59b11d9f7116feb4008767b40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.24.0/22
                IPv6:
                  2803:a5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:19:46:ea:ca:60:0f:ff:ae:04:2d:53:6a:3b:df:2a:49:06:
         f0:4b:38:c9:6a:8b:b0:b7:59:43:6a:3d:83:f3:9f:d2:63:dc:
         53:b3:94:ef:65:77:cc:4b:05:9a:02:f5:60:17:4c:e6:d0:38:
         ac:d1:e7:c6:16:45:0e:65:d4:a6:97:75:dc:c4:15:31:98:d9:
         29:71:36:56:38:f2:3a:f0:d1:a8:e8:a3:ba:31:70:b5:2d:78:
         c3:39:cc:5c:2f:10:8d:b8:7f:31:9b:76:a5:ae:d2:41:e6:16:
         f5:00:66:c1:f2:dd:d1:f6:e0:0e:13:d2:34:6a:0c:38:4b:6e:
         1f:73:23:2e:1c:7b:6f:d1:da:d3:5f:9d:91:2b:67:51:6d:e0:
         9b:ed:b2:63:05:bb:a5:c5:69:e0:ff:3c:39:fb:c4:f4:28:da:
         41:72:d4:e8:94:92:b1:d9:b4:42:9e:cc:72:fe:41:3d:e4:f7:
         bb:4f:57:74:db:fb:99:ea:51:85:2b:25:39:7a:c8:d2:be:5a:
         8d:5e:3d:6c:36:bd:5b:07:d9:97:4e:05:0c:3f:a9:11:f6:db:
         cd:3a:98:44:ff:43:b4:76:f4:dd:72:53:86:a9:e7:70:06:31:
         31:3f:a6:54:19:2e:1d:69:10:00:42:ef:3e:a5:41:7c:60:0a:
         14:f5:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----