Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/5c16bee41ec1618239efcfebd04c2cb909dc21d8.roa
File:                     5c16bee41ec1618239efcfebd04c2cb909dc21d8.roa (raw, json)
Hash identifier:          HcwSUVLkDbOQFsHDlPKwThPNYzhp+K4gMk9uy6G1Rrw=
Subject key identifier:   50:97:79:74:BE:B0:08:E3:C1:96:84:78:44:47:ED:AD:3D:29:0B:7A
Certificate issuer:       /CN=1579ac51896b95038727e3223b1d7ae2507073b5
Certificate serial:       23D286
Authority key identifier: 98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/5c16bee41ec1618239efcfebd04c2cb909dc21d8.roa
Signing time:             Fri 18 Aug 2023 02:50:54 +0000
ROA not before:           Thu 17 Aug 2023 02:50:54 +0000
ROA not after:            Mon 18 Aug 2025 02:50:54 +0000
asID:                     263812
IP address blocks:        170.80.108.0/22 maxlen: 24
                          138.186.140.0/22 maxlen: 24
                          45.228.67.0/24 maxlen: 24
                          190.103.176.0/22 maxlen: 24
                          2800:ba0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347654 (0x23d286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1579ac51896b95038727e3223b1d7ae2507073b5
        Validity
            Not Before: Aug 17 02:50:54 2023 GMT
            Not After : Aug 18 02:50:54 2025 GMT
        Subject: CN=5c16bee41ec1618239efcfebd04c2cb909dc21d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:60:52:c8:a3:be:8d:67:44:5d:27:7f:d2:
                    3b:54:4c:36:ab:0c:e1:43:b2:1d:12:cd:3b:4c:4f:
                    97:17:5e:09:ad:e8:0b:8c:b9:53:a4:4d:ce:9e:75:
                    9f:5a:98:33:26:1f:3a:db:5d:48:a8:9f:9a:b1:bc:
                    76:3e:9c:27:fc:f1:9a:cd:29:25:de:fb:2c:67:ab:
                    79:b4:f2:10:8a:3e:e2:3e:54:e9:60:2c:16:9c:b5:
                    e2:e4:b6:99:48:a0:ea:7d:e4:2a:d1:b8:13:99:8f:
                    34:ef:59:d3:b9:e0:bf:da:e1:dd:ff:3e:db:b0:08:
                    c6:68:6b:a7:d1:0b:81:ab:49:0e:a0:c3:82:9d:3b:
                    1c:e0:25:e9:84:9a:1a:0d:0b:1e:dd:01:41:06:84:
                    6f:ef:42:94:44:61:aa:28:56:51:95:25:aa:d1:3a:
                    6f:00:d3:7c:72:47:94:25:64:7f:82:2a:5e:c1:2d:
                    da:e0:10:1a:b8:a6:63:8c:f0:7f:51:4b:ce:61:9c:
                    96:35:2f:36:d0:ad:15:96:2e:61:ec:2a:04:93:4e:
                    27:59:51:66:e6:f8:c8:5c:ed:dd:59:bf:d5:c8:0b:
                    ac:f0:07:73:2e:bd:ad:c2:21:f6:7c:da:99:03:82:
                    b2:41:c5:84:c7:ac:c4:72:dc:42:4a:0d:5a:bb:bc:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:79:74:BE:B0:08:E3:C1:96:84:78:44:47:ED:AD:3D:29:0B:7A
            X509v3 Authority Key Identifier:
                keyid:98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/5c16bee41ec1618239efcfebd04c2cb909dc21d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24
                  138.186.140.0/22
                  170.80.108.0/22
                  190.103.176.0/22
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:56:01:58:7d:8a:6f:8c:0f:7b:1f:fc:6b:ad:d1:c3:3b:7e:
         c5:68:be:3c:fd:1c:de:44:f0:1f:ee:9f:34:a3:2a:e9:ed:3c:
         aa:fe:1d:73:97:3d:8f:f5:54:d6:b6:03:c5:c8:b0:9d:53:36:
         95:80:e2:48:d1:86:a5:61:ee:1d:38:9a:4d:59:51:c7:11:bf:
         b4:ad:2c:57:5e:33:5c:af:cf:97:81:f5:9d:52:5d:9a:33:09:
         bd:9b:a6:d1:76:9c:d2:50:68:13:38:39:a3:d7:a0:91:7b:8b:
         7a:77:49:56:d9:40:6c:9b:b5:02:58:c9:c2:78:0c:d5:29:bd:
         a2:c0:d9:bc:f4:82:b6:00:7e:3c:f3:2f:63:9f:10:13:29:49:
         0e:40:69:11:02:24:e5:09:24:7f:fa:53:a6:c4:31:31:05:50:
         70:b9:07:c7:b1:0e:e1:6f:f5:aa:38:56:11:12:af:ee:64:e4:
         b8:47:ae:d1:67:45:e0:35:22:02:be:f2:34:85:32:28:54:b3:
         75:70:a8:5b:92:ec:98:db:07:bd:86:03:3c:bf:e6:ab:b8:76:
         60:28:5c:e1:4a:41:63:05:d5:e3:2f:ab:02:20:8d:f4:17:f2:
         87:de:75:bf:30:18:dd:c7:5e:32:9a:61:f9:4f:f2:44:c8:27:
         ee:ef:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----