Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/5da63e193c2ae70b443b1b38d5028ec2a3226ef3.roa
File:                     5da63e193c2ae70b443b1b38d5028ec2a3226ef3.roa (raw, json)
Hash identifier:          jTY0CYWvG/aBLeGbKMD1DXZMqXPAWyjmjoBPZIl9k08=
Subject key identifier:   54:85:94:10:D0:CC:6A:18:D4:8B:7C:95:F0:56:14:35:CD:7C:EB:6C
Certificate issuer:       /CN=5acfffcdf0115644645ac1bd50221646562a5c51
Certificate serial:       0775
Authority key identifier: 3B:C6:C3:96:E1:5F:5B:30:33:A4:15:EA:57:BD:A4:8D:36:4C:8F:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acfffcdf0115644645ac1bd50221646562a5c51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/5da63e193c2ae70b443b1b38d5028ec2a3226ef3.roa
Signing time:             Tue 29 Aug 2023 18:07:33 +0000
ROA not before:           Mon 28 Aug 2023 18:07:33 +0000
ROA not after:            Fri 29 Aug 2025 18:07:33 +0000
asID:                     266873
IP address blocks:        45.239.84.0/22 maxlen: 24
                          2803:1aa0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acfffcdf0115644645ac1bd50221646562a5c51
        Validity
            Not Before: Aug 28 18:07:33 2023 GMT
            Not After : Aug 29 18:07:33 2025 GMT
        Subject: CN=5da63e193c2ae70b443b1b38d5028ec2a3226ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:d0:c0:b2:fd:41:52:55:f2:89:75:34:a5:
                    f4:6d:20:5d:79:6e:63:15:6b:01:dd:46:31:f0:06:
                    fb:aa:1f:b9:dd:82:d1:cc:e7:5a:f1:ac:aa:dc:48:
                    5f:23:1d:e6:80:52:01:3a:38:21:ef:cd:f8:86:72:
                    79:8c:1d:ba:2d:6b:25:83:b2:00:24:63:8a:5c:93:
                    cc:18:ff:56:35:41:2c:11:f1:3f:25:3e:2d:d7:9e:
                    6d:bc:32:5a:aa:7a:5c:a7:22:cf:6f:30:d9:8d:59:
                    92:4b:b8:a3:7a:ea:85:ed:d5:89:c9:36:58:dc:f0:
                    91:0e:c0:7a:c0:42:f8:f5:ab:92:8c:4a:4b:7e:70:
                    c0:16:2b:51:e9:c3:09:1f:9c:60:8c:ed:9a:fb:80:
                    de:97:46:05:1c:dc:e4:a7:5d:b9:eb:a8:44:6d:9d:
                    eb:b2:4e:9c:81:b4:fe:c5:b7:6d:82:1c:8a:b0:cd:
                    24:8f:76:2c:8b:89:4f:7a:30:17:97:63:08:f5:8b:
                    2b:d1:f2:c8:31:c6:69:6f:c1:d9:3f:ed:6c:d8:e4:
                    97:b0:c0:2a:97:41:09:32:0e:97:8d:99:ca:0e:ea:
                    d1:16:7b:0f:2e:71:f3:1d:fd:ab:28:05:9c:47:f7:
                    a4:f9:5a:54:8e:1d:fd:f5:73:be:e4:e2:2c:6b:73:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:85:94:10:D0:CC:6A:18:D4:8B:7C:95:F0:56:14:35:CD:7C:EB:6C
            X509v3 Authority Key Identifier:
                keyid:3B:C6:C3:96:E1:5F:5B:30:33:A4:15:EA:57:BD:A4:8D:36:4C:8F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acfffcdf0115644645ac1bd50221646562a5c51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/5da63e193c2ae70b443b1b38d5028ec2a3226ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/5acfffcdf0115644645ac1bd50221646562a5c51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.84.0/22
                IPv6:
                  2803:1aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:9e:01:08:f7:14:c1:8b:93:ba:21:83:ac:a6:77:67:5a:
         38:b6:da:4f:af:94:47:25:c5:ed:97:6d:1d:0a:76:e7:8d:01:
         b4:2e:4f:80:2e:da:04:c7:bf:19:89:72:c3:bd:ca:3c:ae:03:
         0a:3c:31:e8:61:5b:12:4c:bd:f6:f2:8f:99:9c:50:fb:3a:af:
         9c:de:26:c8:20:74:0d:8d:3c:65:01:ab:01:46:b1:90:8b:be:
         3a:b2:38:97:7f:99:80:a4:81:77:4c:68:03:cb:d0:ce:a2:30:
         f8:11:a6:cb:3d:62:34:70:04:a6:eb:36:3d:61:2a:e4:b8:d1:
         bc:b8:b3:18:83:85:dd:1e:11:b7:6f:8b:29:64:b2:4a:00:d1:
         d7:1f:ea:1e:da:74:46:9f:07:a0:20:d1:7b:d6:3e:19:94:2c:
         88:54:40:7c:ec:1e:55:13:e9:b2:f9:15:35:8c:e9:82:16:ad:
         50:ac:16:1b:13:96:e7:d4:a8:3a:54:4d:d8:dc:8a:a4:44:81:
         11:60:63:bc:ab:dd:f5:f3:34:64:c0:8c:92:b2:c8:e3:c2:e7:
         f5:e3:b8:38:7f:c3:62:c2:69:67:ce:b9:c1:36:2a:97:4e:09:
         23:20:7f:4a:c4:75:da:89:3b:9e:d1:8b:8e:6f:2e:93:ef:bb:
         85:3a:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----