Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/3e5ad97e45998fa8e0c46b470bc73bd41cf09b41.roa
File:                     3e5ad97e45998fa8e0c46b470bc73bd41cf09b41.roa (raw, json)
Hash identifier:          5Am8kxMxDxSun2euvpsXnrEwXNxZMOZF6ZGr5qiXTvA=
Subject key identifier:   62:27:77:17:E7:2B:35:47:62:B4:BF:B7:B2:0C:EA:21:D9:CE:17:AF
Certificate issuer:       /CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
Certificate serial:       202875
Authority key identifier: B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/3e5ad97e45998fa8e0c46b470bc73bd41cf09b41.roa
Signing time:             Tue 04 Jul 2023 16:54:25 +0000
ROA not before:           Mon 03 Jul 2023 16:54:24 +0000
ROA not after:            Fri 04 Jul 2025 16:54:24 +0000
asID:                     267864
IP address blocks:        45.176.88.0/22 maxlen: 24
                          2803:a260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107509 (0x202875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
        Validity
            Not Before: Jul  3 16:54:24 2023 GMT
            Not After : Jul  4 16:54:24 2025 GMT
        Subject: CN=3e5ad97e45998fa8e0c46b470bc73bd41cf09b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:c1:f0:29:77:6f:7e:ac:18:46:cd:ed:9e:
                    f6:d3:14:ba:59:0b:83:f7:f2:e1:22:bd:0b:a0:69:
                    0f:86:98:d0:b9:ba:7c:12:0d:c8:1b:a6:05:0e:e3:
                    de:f6:03:1f:f1:91:fb:fe:cd:50:23:6f:81:58:c2:
                    de:26:d3:1f:b9:6c:43:27:06:b3:59:ff:0e:d2:c5:
                    b5:7b:12:8c:a2:2c:7b:52:0f:e4:2e:59:80:88:b5:
                    6e:ff:d5:72:28:36:cb:d1:ce:34:e1:7b:72:72:b6:
                    a5:1f:74:12:f7:de:c0:dc:2f:19:b8:44:77:c4:35:
                    29:da:4c:2c:b1:e9:39:0c:d8:33:40:83:96:a4:65:
                    8a:59:49:ee:4f:60:4d:92:83:5f:96:60:67:11:65:
                    b1:f4:48:68:3a:a5:08:2c:cb:a9:6b:fe:33:b8:cb:
                    64:a7:27:65:0d:45:a3:79:d6:87:28:39:12:4b:21:
                    75:53:11:3e:9b:63:65:cb:0c:57:3a:3e:30:f6:2e:
                    95:b1:eb:f4:6b:2d:2e:2e:6e:cc:45:1e:b6:71:07:
                    c5:42:8a:d6:46:8b:03:ed:5c:f5:2a:f7:8e:c5:21:
                    9a:67:55:7b:f9:7c:95:49:51:6a:e3:3d:36:98:43:
                    1b:c2:4d:5e:32:49:ef:39:b1:e2:a6:22:98:20:06:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:27:77:17:E7:2B:35:47:62:B4:BF:B7:B2:0C:EA:21:D9:CE:17:AF
            X509v3 Authority Key Identifier:
                keyid:B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/3e5ad97e45998fa8e0c46b470bc73bd41cf09b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/b85681cb3788741f37ae8f16dc7e84b962b71feb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.88.0/22
                IPv6:
                  2803:a260::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:b1:e5:dc:9e:cb:16:e2:ab:87:4e:f4:1e:dd:5f:f2:f3:
         bf:a4:86:5c:12:d9:e6:45:a2:c5:89:25:2a:bf:05:79:55:88:
         3f:e8:48:ff:a0:e5:eb:ee:31:b2:85:28:e6:89:fe:72:0e:c9:
         6f:cb:44:35:0f:39:61:e8:5a:f8:fc:71:7b:b8:31:46:ab:89:
         b7:26:05:fd:e9:56:48:b7:27:e3:0a:a4:d8:2b:e2:71:4b:d0:
         e3:99:d6:b7:7b:19:37:6a:80:12:43:19:99:84:95:d3:39:01:
         0c:40:e0:8d:1e:a5:02:f2:be:89:a8:6d:12:32:1e:5a:ce:70:
         af:84:a3:b8:8f:71:0d:95:17:dd:a5:bd:20:5f:06:b9:63:22:
         f4:53:9c:20:6d:11:a5:19:3a:db:fc:12:f0:2e:0f:a3:0a:83:
         12:b9:68:de:b8:c4:4f:cc:8f:72:1d:9e:40:a5:45:e6:ce:e8:
         42:fa:2f:21:19:e9:11:49:a5:39:68:69:97:4a:9b:49:84:7e:
         d4:ec:41:26:4b:aa:c1:f9:1a:82:bd:2c:f2:1f:96:f7:a2:5f:
         57:fa:cb:87:77:aa:8a:79:d6:79:3c:e1:8a:02:f8:f1:1e:ae:
         96:82:2b:16:a4:ed:3f:dc:5e:ec:4d:7b:68:ea:e3:78:b7:c0:
         09:55:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----