Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/a72c9c3a5891420abea6a3d7911efd718a4f199d.roa
File:                     a72c9c3a5891420abea6a3d7911efd718a4f199d.roa (raw, json)
Hash identifier:          geLGTFPF/6EF36wtBCHkJ7l+X2e1RG4x7hJn9KOfgMA=
Subject key identifier:   07:B3:46:D5:54:D1:28:1D:46:A4:C0:3A:EC:00:93:99:1D:FF:77:73
Certificate issuer:       /CN=110912d812a3612d5635fe6be68c37d72afb24e2
Certificate serial:       1C9E91
Authority key identifier: 8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/a72c9c3a5891420abea6a3d7911efd718a4f199d.roa
Signing time:             Sat 15 Jul 2023 08:30:00 +0000
ROA not before:           Fri 14 Jul 2023 08:30:00 +0000
ROA not after:            Sun 13 Jul 2025 08:30:00 +0000
asID:                     267785
IP address blocks:        45.172.16.0/24 maxlen: 24
                          45.172.17.0/24 maxlen: 24
                          45.172.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875601 (0x1c9e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110912d812a3612d5635fe6be68c37d72afb24e2
        Validity
            Not Before: Jul 14 08:30:00 2023 GMT
            Not After : Jul 13 08:30:00 2025 GMT
        Subject: CN=a72c9c3a5891420abea6a3d7911efd718a4f199d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:c9:a2:fc:81:79:b2:e0:60:3b:70:b3:f6:
                    a8:ed:22:43:c3:18:47:35:40:f2:78:db:b9:89:78:
                    c5:03:26:14:e0:37:d2:4b:62:b5:2f:e2:d0:f3:54:
                    54:d3:46:5a:98:ab:61:d5:d5:8e:3e:3d:3c:ad:6b:
                    03:59:86:f0:84:15:73:2b:ae:e5:0f:4d:9d:c8:b8:
                    1a:fe:30:75:92:5b:14:46:90:e6:3a:16:dc:d8:95:
                    58:7f:a9:9c:b2:4d:0f:2e:3b:c2:53:63:fa:5a:d5:
                    2f:b9:86:bd:f2:0e:2d:8f:1f:16:41:5b:19:00:03:
                    17:4b:d1:20:7e:36:67:46:8b:a1:11:07:ca:3a:04:
                    31:7c:fd:67:95:49:ab:60:be:7d:ef:16:f2:29:d1:
                    27:ff:7f:77:c3:30:70:df:06:22:c4:e6:14:3b:c8:
                    6a:93:80:e4:ac:d2:76:f7:44:3c:73:ac:96:a4:40:
                    16:9a:58:0e:99:8a:06:47:0b:f9:b5:fa:42:6f:e6:
                    bf:b1:21:5f:04:fe:8f:1b:38:0f:8e:35:0f:6a:e0:
                    b1:4d:13:32:e9:6b:b3:6e:c2:8c:0d:f2:21:21:eb:
                    63:4e:1d:41:0a:86:c2:ed:9f:f8:45:16:72:2a:17:
                    d1:2f:fa:4c:98:f8:37:e3:4e:e8:92:29:86:f1:53:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:46:D5:54:D1:28:1D:46:A4:C0:3A:EC:00:93:99:1D:FF:77:73
            X509v3 Authority Key Identifier:
                keyid:8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/a72c9c3a5891420abea6a3d7911efd718a4f199d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/110912d812a3612d5635fe6be68c37d72afb24e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.16.0-45.172.18.255

    Signature Algorithm: sha256WithRSAEncryption
         18:69:10:fb:e2:16:e3:d5:55:c7:b3:40:aa:2b:4a:f4:0e:01:
         45:fb:b5:71:e3:24:0a:a3:df:a4:74:34:b5:92:e2:6a:87:43:
         b5:32:e3:10:0a:e1:c5:26:77:40:e9:ba:fa:29:15:fd:da:9c:
         42:5f:66:d4:e4:31:0b:d6:41:5f:34:a4:20:6b:f0:73:49:e7:
         4a:5b:af:e6:56:41:a9:89:de:98:75:9b:da:14:18:e2:6b:bf:
         a4:9c:af:e7:2c:56:0b:49:02:43:d0:b0:60:45:9a:b8:e2:3e:
         3b:40:ed:69:9b:cc:80:c8:93:30:fc:99:7d:61:77:40:32:b2:
         5b:9c:0e:0a:47:a7:10:d7:2b:c2:a7:47:c6:e2:24:ba:ed:4a:
         b2:f2:06:41:87:77:af:9e:79:16:90:ec:fa:d9:cc:a9:14:89:
         91:76:35:7e:68:2d:f5:82:0e:43:dc:c6:63:74:b9:e7:64:e5:
         ba:2a:47:12:64:67:30:83:f4:c2:07:41:60:7c:af:c4:2a:33:
         b7:b1:66:a2:23:61:d4:28:77:80:70:60:dd:1d:60:7f:d1:fe:
         1a:c5:e0:2a:f8:b1:15:57:1a:f7:a1:93:44:61:e6:98:2b:17:
         ee:25:64:c5:6e:0e:2d:c0:a8:c0:72:83:85:9c:4c:4f:e7:0e:
         ae:6d:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----