Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/897df056a59820327835266d8d761364d42caaf0.roa
File:                     897df056a59820327835266d8d761364d42caaf0.roa (raw, json)
Hash identifier:          7NGkuN0AsUEWTlKSzm+sBME+NMmcUZf3a/HQnr3s0Y0=
Subject key identifier:   DC:A9:F6:E1:A7:6C:C2:7A:66:A6:BC:37:F6:82:EF:2D:D3:4E:1E:7B
Certificate issuer:       /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial:       287D2A
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/897df056a59820327835266d8d761364d42caaf0.roa
Signing time:             Thu 28 Mar 2024 17:09:23 +0000
ROA not before:           Thu 28 Mar 2024 17:09:22 +0000
ROA not after:            Sat 28 Mar 2026 17:09:22 +0000
asID:                     264668
IP address blocks:        45.225.104.0/22 maxlen: 24
                          2803:aa20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653482 (0x287d2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
        Validity
            Not Before: Mar 28 17:09:22 2024 GMT
            Not After : Mar 28 17:09:22 2026 GMT
        Subject: CN=897df056a59820327835266d8d761364d42caaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:fe:93:80:6a:00:e2:f6:f2:45:1a:0f:a2:
                    c1:39:49:e4:1e:89:a8:5e:43:1d:63:15:41:12:25:
                    38:ec:5f:fc:b2:7c:a4:9b:48:b0:a5:82:fe:6b:4a:
                    b0:c1:6d:4e:e1:e5:e5:6d:d8:9d:69:a6:26:37:93:
                    01:f7:0a:64:42:e4:66:d6:91:10:32:c2:8c:7c:7b:
                    ee:62:7c:a4:38:49:9a:cb:55:d7:59:44:7d:71:ed:
                    f2:01:1d:36:ba:d0:c5:5d:2e:d7:e5:e8:2d:da:9c:
                    3c:06:76:ba:1b:43:37:45:75:84:68:64:a4:ad:df:
                    90:02:99:d4:c9:6a:44:83:59:97:3f:e0:bb:d0:19:
                    ce:e6:72:26:fa:ca:38:80:d8:80:52:3c:c2:68:7a:
                    f9:cb:7e:f6:db:cc:1d:6e:9f:ff:13:50:f7:f9:03:
                    bb:3b:55:54:dc:5e:bb:58:04:cb:ee:16:69:cf:65:
                    59:97:e7:78:e1:3d:1a:bb:d2:63:43:54:6d:19:aa:
                    45:83:6d:f7:31:1f:68:7d:d2:59:fa:77:12:3c:ac:
                    20:2b:66:74:86:47:f3:aa:08:37:bd:84:94:97:2c:
                    42:7b:d1:95:42:34:b0:6b:6a:51:2b:b1:f9:6c:dc:
                    4e:7d:7e:3c:36:da:6a:15:8d:70:f4:99:06:81:1f:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:F6:E1:A7:6C:C2:7A:66:A6:BC:37:F6:82:EF:2D:D3:4E:1E:7B
            X509v3 Authority Key Identifier:
                keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/897df056a59820327835266d8d761364d42caaf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22
                IPv6:
                  2803:aa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:39:ad:f3:d2:ef:eb:89:d2:57:7f:6b:8f:1a:d1:4f:f4:7d:
         12:fd:44:64:e0:97:8d:82:c6:db:4e:88:aa:26:19:90:de:5a:
         43:be:db:07:ae:b4:17:ad:e0:0c:b1:6c:7a:86:11:41:8c:da:
         7b:39:ec:1e:53:7a:d1:49:7b:8d:cc:02:77:d0:c4:70:37:b4:
         94:9b:0b:82:e4:70:3a:a9:3f:62:fc:a1:54:11:23:03:72:3f:
         0f:50:69:2b:b9:01:76:ac:dd:df:8b:c6:15:9b:59:40:93:3c:
         90:d1:dc:9b:80:9e:7b:04:d2:29:44:12:59:58:a3:2e:35:3d:
         2b:b8:4f:42:ba:da:57:6a:6f:4b:5e:81:5d:70:6b:94:d5:d3:
         7f:91:72:d9:cf:86:c9:24:80:70:f5:e7:6b:65:2b:52:17:d0:
         3c:39:dc:26:19:3a:17:b4:4d:98:ea:b5:3f:47:47:ab:3b:36:
         7e:15:54:dd:63:1c:9a:66:2b:f0:89:e4:50:17:f0:e8:b7:f6:
         2b:14:35:1c:d2:86:55:15:77:aa:1c:93:dc:56:37:17:4e:6a:
         6d:87:92:87:78:10:3c:10:6a:9b:76:08:d0:e9:e3:58:05:d1:
         90:35:c2:c5:fa:f1:71:ae:10:a0:7d:97:87:d3:6f:96:5c:6a:
         b1:d0:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----