Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/38bd0bdcb488afd7a0cf317813cc69a117bff190.roa
File:                     38bd0bdcb488afd7a0cf317813cc69a117bff190.roa (raw, json)
Hash identifier:          i/gmWdLElvBtVhZ5zDkdOYs/Iz8OKxeDG/YYNQ//pO0=
Subject key identifier:   00:0B:02:73:2F:FC:78:DB:CF:3D:9B:0A:C1:B1:20:CE:8B:94:7B:7B
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       2553F5
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/38bd0bdcb488afd7a0cf317813cc69a117bff190.roa
Signing time:             Wed 27 Mar 2024 08:30:08 +0000
ROA not before:           Wed 27 Mar 2024 08:30:08 +0000
ROA not after:            Fri 27 Mar 2026 08:30:08 +0000
asID:                     266721
IP address blocks:        45.191.84.0/22 maxlen: 24
                          2803:ece0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446325 (0x2553f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Mar 27 08:30:08 2024 GMT
            Not After : Mar 27 08:30:08 2026 GMT
        Subject: CN=38bd0bdcb488afd7a0cf317813cc69a117bff190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:81:67:e5:aa:42:77:f9:40:59:71:1e:91:a4:
                    e3:5b:34:8c:5f:85:5e:95:d4:1c:d0:3a:9b:2d:8d:
                    2e:15:c9:f5:ea:f9:a7:8a:8c:b9:4b:f6:3f:68:de:
                    1c:22:ed:a4:aa:82:c1:cb:ca:bb:82:c5:50:0e:30:
                    79:f3:a4:f7:9f:bc:d8:9e:7c:4b:98:06:d0:94:57:
                    fc:85:67:0b:97:e8:10:0a:67:04:bc:8b:16:22:50:
                    db:f9:49:cf:1b:68:7b:93:44:d2:57:48:e8:23:d8:
                    12:9d:36:18:25:44:be:47:c8:4e:ff:e7:81:a5:cd:
                    f1:20:48:a9:75:fc:6f:ce:f8:65:4b:fe:7d:08:a7:
                    c1:1f:e1:82:97:f5:89:ca:20:8f:e8:5c:ea:d5:3c:
                    a4:90:10:8f:ef:5b:42:2a:d4:35:c2:4e:57:10:8c:
                    ec:d2:89:80:b0:8d:b7:a0:f5:c6:76:42:d4:17:9e:
                    95:60:fc:b1:86:d8:4d:46:59:19:1d:67:6f:d3:e1:
                    a3:78:73:d2:2a:1f:b8:c3:99:c0:b7:38:56:86:97:
                    a0:b0:ad:3d:1d:c4:7b:e8:0f:43:49:c4:f7:a8:52:
                    90:b5:a7:df:66:03:66:b1:3a:80:45:e5:bc:0e:df:
                    fd:5c:42:a7:09:d9:02:bc:ee:0a:55:c2:9a:04:a1:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:02:73:2F:FC:78:DB:CF:3D:9B:0A:C1:B1:20:CE:8B:94:7B:7B
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/38bd0bdcb488afd7a0cf317813cc69a117bff190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:18:d7:7a:1c:5f:b4:80:50:59:9c:6f:41:d7:ae:d3:2c:
         bb:6e:28:c8:d4:66:7f:9e:f2:03:1b:70:e0:e0:57:15:00:54:
         be:28:9a:89:35:40:6b:79:39:25:7b:f8:75:81:69:fb:7b:8e:
         89:39:b8:d3:89:bf:04:0d:ec:dc:a4:67:e9:c6:39:da:25:3e:
         4d:dd:f5:53:22:ca:39:5d:aa:cd:9f:48:9c:cf:a9:75:e8:02:
         ff:e5:d9:58:91:b7:d0:e6:b8:94:10:d2:4f:91:58:5f:e5:92:
         aa:fa:83:7e:aa:76:b7:f7:87:a2:c8:80:0f:f4:93:e4:95:28:
         3f:a7:a3:4a:95:e2:c6:03:4c:08:bf:da:b3:48:82:c4:06:e3:
         67:d7:17:90:4e:b7:9b:0c:b4:db:37:a4:a1:79:38:e7:71:fd:
         a7:2f:8a:42:f8:e9:e3:34:b3:f2:9d:1a:3e:78:d0:9e:f6:a4:
         36:e0:34:7f:ab:0e:00:14:dd:f7:2e:4b:aa:60:1c:93:f0:f1:
         7d:56:06:70:bb:01:8d:bf:46:bc:b0:02:89:55:d4:40:a8:b4:
         4c:6a:2a:9b:55:4e:75:e8:4b:ef:85:3b:52:61:11:80:6c:21:
         c2:74:b0:1c:fe:0c:59:d3:3c:4a:97:8c:51:13:5b:7e:81:02:
         d9:83:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----