Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/54be0500a5828bb786093cad514e2abb664570bb.roa
File:                     54be0500a5828bb786093cad514e2abb664570bb.roa (raw, json)
Hash identifier:          zeZW2dbXF7XbslV665ObtwVM8MeQdvb7HXmarlnJEFQ=
Subject key identifier:   BD:F7:2E:ED:73:2E:81:3B:DC:71:74:5D:66:D8:86:33:B3:38:D7:DC
Certificate issuer:       /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial:       11C635
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/54be0500a5828bb786093cad514e2abb664570bb.roa
Signing time:             Mon 18 Sep 2023 16:02:45 +0000
ROA not before:           Sun 17 Sep 2023 16:02:45 +0000
ROA not after:            Thu 18 Sep 2025 16:02:45 +0000
asID:                     267689
IP address blocks:        45.163.20.0/22 maxlen: 24
                          2803:1a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164853 (0x11c635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Validity
            Not Before: Sep 17 16:02:45 2023 GMT
            Not After : Sep 18 16:02:45 2025 GMT
        Subject: CN=54be0500a5828bb786093cad514e2abb664570bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:19:5e:32:ac:a8:ca:58:33:c3:64:b1:ae:
                    d7:37:6a:d6:2b:8a:91:4b:95:ff:b9:1d:f7:f5:d7:
                    02:6b:48:00:15:d7:de:b1:b6:38:8a:44:78:c8:f4:
                    9f:e3:0d:a1:08:ea:ba:50:82:55:76:3a:ae:b4:cc:
                    0d:b1:10:8a:d8:32:b4:fe:c1:4d:74:38:40:8b:62:
                    9a:3c:43:19:60:cd:2d:47:74:79:b4:7f:d0:d3:46:
                    c2:36:17:f7:06:97:87:49:eb:3a:79:48:65:5f:2a:
                    02:40:40:68:31:2d:75:cf:ad:d6:b6:42:dd:74:18:
                    a4:c7:a0:b9:8c:38:ab:25:6c:fb:e5:8b:74:ee:a2:
                    e3:d8:e4:28:7a:47:52:5b:5d:5e:86:53:34:65:f8:
                    43:dc:98:09:f0:44:04:f2:c8:9b:6b:f2:de:5f:97:
                    25:55:8a:ce:c7:61:73:50:43:11:56:ab:70:9e:91:
                    1f:e5:03:4c:8b:e4:eb:bb:11:c2:29:c1:80:aa:4c:
                    71:a6:28:c0:47:28:62:eb:95:df:32:ce:d6:e8:b2:
                    83:93:d8:9d:d8:68:33:41:08:a1:f9:de:3c:72:1b:
                    be:28:dc:8a:7d:76:9a:a1:b9:63:0d:5c:f0:64:4d:
                    d9:aa:7f:ad:98:db:be:99:6a:6f:49:3f:30:08:20:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F7:2E:ED:73:2E:81:3B:DC:71:74:5D:66:D8:86:33:B3:38:D7:DC
            X509v3 Authority Key Identifier:
                keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/54be0500a5828bb786093cad514e2abb664570bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.20.0/22
                IPv6:
                  2803:1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:c2:98:d4:c3:85:f1:96:ec:d2:17:20:f2:43:4f:1c:06:
         40:a1:f2:7b:64:e1:2a:fc:39:cd:70:04:98:1d:34:d7:26:85:
         d0:4e:d6:54:f5:21:f4:21:85:70:4f:c4:9c:f9:d5:45:f0:ca:
         d3:0f:f7:e9:f3:db:6a:48:8f:05:d3:03:24:e8:b2:b6:7c:a6:
         b6:79:be:89:9a:f3:1c:dc:db:82:3e:43:05:8f:84:0a:e1:bf:
         d7:86:8b:7c:e7:5c:a7:0b:79:6f:c0:2b:66:1f:3f:7c:63:ed:
         f5:bd:ab:bc:5d:f9:96:0a:a4:e0:96:a6:f9:13:91:da:35:83:
         7c:1a:c8:5a:48:b3:84:23:cd:c9:ca:f4:39:00:47:64:77:0d:
         0c:00:0e:bf:ea:21:b8:7f:9b:ab:a0:4d:7f:b8:97:89:53:dc:
         8f:96:bd:ff:28:b1:51:b4:10:e2:97:22:40:67:fe:39:a2:73:
         50:46:cb:c2:84:1f:f7:08:16:92:21:94:4d:ad:8d:6e:e8:11:
         33:83:2d:f8:60:df:a3:7c:02:93:f6:68:4a:46:f7:4d:48:bb:
         2f:47:02:a4:31:85:e2:cc:59:f5:25:4c:fe:96:9f:11:f7:e1:
         d7:ff:e7:4e:1b:22:da:dc:87:96:49:4b:3d:01:6a:64:22:bd:
         00:f7:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----