Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/33c5da135c3fcefa182cb05b2d93d167bf8c96e3.roa
File:                     33c5da135c3fcefa182cb05b2d93d167bf8c96e3.roa (raw, json)
Hash identifier:          tAxG8PTvwyIM85PiHVdIFUd1BFavMPD0lZmkmdu2UqM=
Subject key identifier:   6D:7E:19:A4:E4:84:6B:FE:7D:C3:D9:DD:57:09:96:D7:80:0E:5C:98
Certificate issuer:       /CN=c4148fec5d63878beccdfd61c25ec33637126b8c
Certificate serial:       2026F2
Authority key identifier: AC:A2:08:E8:AB:CB:89:32:61:13:D6:AB:19:30:D6:C7:A1:84:D9:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4148fec5d63878beccdfd61c25ec33637126b8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/33c5da135c3fcefa182cb05b2d93d167bf8c96e3.roa
Signing time:             Thu 29 Jun 2023 20:30:41 +0000
ROA not before:           Wed 28 Jun 2023 20:30:41 +0000
ROA not after:            Sun 29 Jun 2025 20:30:41 +0000
asID:                     52468
IP address blocks:        45.177.180.0/22 maxlen: 24
                          2803:4a60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107122 (0x2026f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4148fec5d63878beccdfd61c25ec33637126b8c
        Validity
            Not Before: Jun 28 20:30:41 2023 GMT
            Not After : Jun 29 20:30:41 2025 GMT
        Subject: CN=33c5da135c3fcefa182cb05b2d93d167bf8c96e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:fc:d9:91:64:64:59:cc:17:d8:6c:f5:73:
                    75:d4:02:0f:01:14:0b:0b:80:28:cf:68:ff:e2:46:
                    8f:52:a9:07:7e:fd:13:d2:6c:07:63:c0:e6:8e:ac:
                    4d:cd:65:8f:c3:97:0a:86:48:a9:d9:56:2c:63:d8:
                    c8:7c:d6:23:7b:c9:71:84:ca:da:6c:e0:b7:21:c7:
                    4e:d9:f6:95:69:3c:98:ae:b8:b9:fc:8b:97:43:df:
                    a3:9d:15:52:76:86:32:9f:3e:42:f7:ee:bb:c2:fb:
                    c1:8b:cf:65:7b:5b:1a:53:74:a2:b3:d8:d7:ca:a8:
                    77:ed:5c:da:2e:ba:56:ff:ad:53:bd:a1:2e:bb:90:
                    66:0d:55:de:6a:01:06:5c:c3:cf:4a:2c:23:3c:ba:
                    21:4d:d1:e0:63:49:c2:b1:56:77:8c:68:d6:69:1b:
                    62:0b:59:0f:86:91:de:d6:29:71:65:f8:12:8e:60:
                    63:56:75:d6:d6:e9:80:90:ce:40:18:01:47:1f:54:
                    4b:e8:68:4b:b6:96:0c:5b:89:89:fc:e1:7a:21:2c:
                    4d:9d:85:e4:6a:08:e1:19:f0:fa:7e:7a:62:b9:62:
                    f9:1c:1b:f1:28:92:13:59:8a:45:69:26:a7:08:8c:
                    fb:72:a5:06:4e:4b:db:cb:c4:be:07:22:c3:42:2b:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7E:19:A4:E4:84:6B:FE:7D:C3:D9:DD:57:09:96:D7:80:0E:5C:98
            X509v3 Authority Key Identifier:
                keyid:AC:A2:08:E8:AB:CB:89:32:61:13:D6:AB:19:30:D6:C7:A1:84:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4148fec5d63878beccdfd61c25ec33637126b8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/33c5da135c3fcefa182cb05b2d93d167bf8c96e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/c4148fec5d63878beccdfd61c25ec33637126b8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.180.0/22
                IPv6:
                  2803:4a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:af:b3:18:29:a4:e3:a0:c5:56:a9:38:52:2d:23:f0:f1:
         b4:d5:ab:80:f9:fd:78:dd:f6:4f:bf:27:9d:8e:bd:5c:07:ca:
         fd:67:68:64:69:f8:c4:11:a9:e6:0d:e6:90:00:bb:28:5b:e7:
         1b:7e:2e:6a:71:3f:99:03:1f:c0:ab:8e:71:eb:3b:d8:69:fd:
         c4:fd:a8:5f:3d:5e:37:b1:94:62:79:39:c1:10:ed:f0:47:ed:
         05:c5:89:91:34:30:61:02:0f:2b:2c:fe:1f:8d:61:f2:4d:76:
         42:d7:a3:e8:83:96:48:c5:82:36:6d:f1:fe:7d:ce:fa:5b:09:
         68:87:56:cd:1c:ad:fe:02:48:c6:90:b8:3b:42:b8:08:d3:c2:
         8e:e8:1d:2b:81:2f:d4:48:c0:8d:16:e2:2c:ae:40:a3:03:0e:
         2d:1e:90:97:69:5b:a0:6a:b5:c9:0f:40:c2:fc:a9:c5:4e:97:
         f0:57:5b:01:a2:b4:3f:78:fa:0e:6f:6d:c5:59:e5:87:66:92:
         20:d6:93:a3:3a:56:7d:f3:71:04:f7:0a:87:bf:4e:23:a6:bb:
         12:ce:9c:0f:77:c0:ff:94:c5:54:b8:f8:db:7a:b9:22:ae:17:
         68:6b:37:32:ad:3e:e5:fc:17:b7:02:00:48:81:a7:17:95:3b:
         f0:8f:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----