Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/f7ab6a44b6dd6d832ec6d110a0a2b6d8411b3d39.roa
File:                     f7ab6a44b6dd6d832ec6d110a0a2b6d8411b3d39.roa (raw, json)
Hash identifier:          zjomNhKE10DKpe7KjZ7Xv3ptyW8fBtKAnfP1qVd2NMA=
Subject key identifier:   B4:97:D4:8C:31:18:87:CF:0A:C8:45:DF:CE:B2:84:81:68:FF:D8:65
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       1FABF8
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/f7ab6a44b6dd6d832ec6d110a0a2b6d8411b3d39.roa
Signing time:             Thu 22 Jun 2023 04:13:32 +0000
ROA not before:           Wed 21 Jun 2023 04:13:31 +0000
ROA not after:            Sun 22 Jun 2025 04:13:31 +0000
asID:                     267849
IP address blocks:        45.175.164.0/22 maxlen: 24
                          45.175.164.0/24 maxlen: 24
                          45.175.166.0/24 maxlen: 24
                          2803:ac60:3e::/47 maxlen: 48
                          2803:ac60:2e::/47 maxlen: 48
                          2803:ac60:30::/48 maxlen: 48
                          2803:ac60::/32 maxlen: 48
                          2803:ac60:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075640 (0x1fabf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 21 04:13:31 2023 GMT
            Not After : Jun 22 04:13:31 2025 GMT
        Subject: CN=f7ab6a44b6dd6d832ec6d110a0a2b6d8411b3d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:07:51:9f:4e:0f:80:04:62:78:c5:d4:a6:
                    c3:20:1b:7b:6d:dc:6c:4f:b1:ba:de:f4:7a:bc:76:
                    9b:7a:e3:1a:fb:c5:35:ec:57:de:55:6f:63:e1:6d:
                    cd:86:ad:48:3f:bb:2d:65:6d:d9:d5:24:2f:be:1d:
                    c2:f2:d5:50:a0:6f:f7:9e:21:56:42:db:45:dd:3b:
                    53:fe:f2:47:a2:f4:73:07:10:93:d8:33:7c:3a:ba:
                    a8:c9:b2:e4:a2:b0:8b:96:2a:4d:f1:e5:2c:7f:78:
                    a3:32:51:32:ff:80:73:75:48:97:ba:a4:9b:fd:4c:
                    6d:a8:07:12:69:3c:08:e6:17:d0:21:87:b2:41:c8:
                    0c:d0:b1:3f:fe:0d:15:ca:86:2e:ce:09:fd:7c:61:
                    ec:43:86:d5:b6:3c:fa:2d:75:13:35:fa:58:d4:cd:
                    b6:a5:02:07:98:ed:8e:40:d5:aa:55:6b:4d:16:81:
                    25:92:86:22:25:e6:89:f1:05:2d:dc:b6:44:8f:00:
                    2e:65:49:98:6b:44:d4:52:bf:01:d6:6a:10:c2:9f:
                    4f:44:b6:1e:92:3d:df:42:9f:37:0b:fc:f4:94:a6:
                    51:cb:83:f2:31:c8:57:2e:26:5b:57:81:de:51:30:
                    bd:37:c2:33:00:9a:17:59:02:ec:7d:68:f5:66:f0:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:97:D4:8C:31:18:87:CF:0A:C8:45:DF:CE:B2:84:81:68:FF:D8:65
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/f7ab6a44b6dd6d832ec6d110a0a2b6d8411b3d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.164.0/22
                IPv6:
                  2803:ac60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:e0:6d:25:f3:8e:7a:4b:a0:8a:fb:32:3f:d0:ab:fe:ed:8d:
         81:cd:6a:0c:f1:fb:1e:81:07:cb:42:02:5f:6d:d4:6d:ce:b7:
         68:4c:8d:4d:7e:d5:dd:98:4a:10:f1:7d:e8:3e:6c:16:0b:1a:
         9b:cb:29:34:bb:0b:3a:05:b8:bd:e0:bb:66:fc:95:53:1b:7e:
         0d:77:03:45:e1:a5:7f:39:11:62:cd:99:ef:f4:be:09:0c:24:
         a4:2c:3b:c3:dd:d6:04:8e:25:c8:66:5a:93:79:2d:03:da:b1:
         eb:09:e7:11:8c:0f:a9:89:2f:c7:c1:1f:10:42:d8:aa:79:d1:
         5a:03:61:51:67:23:d0:a3:50:5b:fa:aa:a9:c5:dd:c2:94:36:
         01:24:86:4c:f6:dd:76:6f:e2:d4:63:e8:67:3a:4b:37:06:d3:
         31:79:57:ad:9f:11:b0:3b:aa:62:17:bd:31:58:81:7a:de:b8:
         6e:ad:30:46:55:cf:b3:c1:d1:88:fc:76:a4:4e:1a:e9:09:63:
         88:c2:ab:58:3f:3a:7f:94:e8:7d:a1:58:c0:14:08:43:e3:b9:
         4b:e4:3b:96:b1:17:9d:88:52:bd:92:92:93:31:5e:23:8b:63:
         29:f2:40:73:87:d0:f1:84:94:43:df:92:c3:62:82:09:ae:dc:
         96:43:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----