Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/df021d3a639e2a11c88c670153492d37ea5530cf.roa
File:                     df021d3a639e2a11c88c670153492d37ea5530cf.roa (raw, json)
Hash identifier:          0tRy0XlYTYjRtOMd9qgR7FYn64UcjZVWhq+lZkuxbBg=
Subject key identifier:   93:0B:E5:37:CD:9C:3C:89:88:7E:C8:BD:1E:68:79:9C:B1:CF:39:5B
Certificate issuer:       /CN=5e5ceaadf571a00b99a9944ca5eeab8a563da150
Certificate serial:       24AFBB
Authority key identifier: 37:6E:61:7C:20:79:1B:E0:13:01:AE:88:A8:5A:F7:82:38:4F:ED:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e5ceaadf571a00b99a9944ca5eeab8a563da150.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/df021d3a639e2a11c88c670153492d37ea5530cf.roa
Signing time:             Tue 31 Oct 2023 21:38:03 +0000
ROA not before:           Tue 31 Oct 2023 21:38:03 +0000
ROA not after:            Fri 31 Oct 2025 21:38:03 +0000
asID:                     266814
IP address blocks:        45.237.44.0/22 maxlen: 24
                          2803:b8a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404283 (0x24afbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5ceaadf571a00b99a9944ca5eeab8a563da150
        Validity
            Not Before: Oct 31 21:38:03 2023 GMT
            Not After : Oct 31 21:38:03 2025 GMT
        Subject: CN=df021d3a639e2a11c88c670153492d37ea5530cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fc:82:9f:84:5d:f1:e8:67:e7:d3:07:6e:f4:
                    c8:0a:6e:80:75:48:35:b0:4d:ff:c6:45:20:4a:f1:
                    81:57:a9:0e:6b:7d:ce:9c:65:5a:49:92:b4:a7:6c:
                    32:d0:92:ef:c6:5f:b1:a2:30:70:5e:ff:a3:15:c7:
                    9b:d4:18:f7:4e:18:ba:1b:31:cd:bf:c0:ef:df:50:
                    be:f8:b7:de:ad:93:09:da:d5:47:d4:2a:17:aa:32:
                    3b:3d:f2:1f:41:e9:3e:ef:c9:46:b5:fa:60:f5:a4:
                    4f:5a:ff:c1:19:4f:f6:32:ec:c3:94:e8:ab:17:e3:
                    c0:8f:46:50:56:0c:62:3f:c3:fa:50:cc:3f:68:b4:
                    6a:b2:c6:ad:b3:32:8e:26:59:88:c1:07:0e:f7:7a:
                    47:93:d2:4b:1e:f6:9b:79:31:8d:68:a7:3d:5e:d4:
                    4d:99:c3:16:0c:48:b7:48:34:a4:f7:8f:49:12:09:
                    f8:4b:b7:d4:bd:96:88:3b:de:b7:f6:1c:c9:8e:2f:
                    32:01:85:88:8a:30:f7:d0:ad:14:3c:57:ec:f9:af:
                    58:ad:a0:25:db:a6:a6:b8:af:39:94:80:c0:d3:be:
                    cb:b5:da:c6:38:0d:b7:89:57:1b:59:1d:3d:45:37:
                    41:da:8b:bd:e8:7a:2e:ff:ea:6a:bb:3f:d3:ac:51:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:E5:37:CD:9C:3C:89:88:7E:C8:BD:1E:68:79:9C:B1:CF:39:5B
            X509v3 Authority Key Identifier:
                keyid:37:6E:61:7C:20:79:1B:E0:13:01:AE:88:A8:5A:F7:82:38:4F:ED:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e5ceaadf571a00b99a9944ca5eeab8a563da150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/df021d3a639e2a11c88c670153492d37ea5530cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a5b4caa3-acc8-4059-b05c-f836a76dee7e/5e5ceaadf571a00b99a9944ca5eeab8a563da150.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.44.0/22
                IPv6:
                  2803:b8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:3a:b3:96:9b:93:41:a3:ea:a3:1f:d2:1b:3c:25:e5:5a:
         19:c2:1b:5b:91:8c:76:b6:b3:51:c9:33:fb:d6:32:8f:b6:48:
         62:ed:d2:53:1d:7c:8e:ff:75:53:bf:65:00:e2:c7:ff:e7:39:
         ed:26:ba:cd:33:81:ce:c7:66:cb:1f:9f:fb:f0:53:9c:d5:dc:
         66:e2:9e:f9:c8:76:18:26:ab:f3:a9:f4:d8:ac:0d:d2:83:8f:
         fd:4c:c3:f9:5f:dc:d5:b7:e1:c2:ce:38:cf:f3:51:f9:0f:a6:
         75:fc:d7:58:d3:56:4f:60:bb:f0:23:fa:b5:2d:d8:2e:fc:51:
         f3:e8:4c:0e:b5:b4:68:4f:12:bb:cb:36:72:d0:2e:db:30:99:
         10:c3:3b:b9:db:70:0a:82:1d:eb:db:48:70:ee:fe:e0:59:fa:
         77:3f:f7:b4:af:39:5e:af:64:f4:83:41:55:98:f0:48:7b:55:
         c7:2b:7a:a2:26:c4:c7:06:1d:93:b4:13:f7:dd:e6:76:71:f3:
         dd:3f:c3:98:e1:86:59:ab:65:ae:aa:4d:33:c5:79:b6:8f:f5:
         ee:bb:73:51:82:55:9c:c6:37:78:97:ab:96:73:16:7e:45:73:
         b8:dc:0a:e6:a7:71:20:21:f9:33:a0:ca:d7:47:96:1a:96:44:
         c2:37:dd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----