Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/7dfe90dd3538c2c4676628bd97506aa5de7a9abc.roa
File:                     7dfe90dd3538c2c4676628bd97506aa5de7a9abc.roa (raw, json)
Hash identifier:          EfExab1XmWmDKv/VSnuuEdCS97PshrgBcmzXbnze+AE=
Subject key identifier:   03:AE:FD:2A:7C:7A:C6:0E:EA:08:24:A5:A2:FF:55:76:60:CD:D3:26
Certificate issuer:       /CN=cd16539c52bd19701a219cb7f91b852671af6b16
Certificate serial:       0C2864
Authority key identifier: 65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/7dfe90dd3538c2c4676628bd97506aa5de7a9abc.roa
Signing time:             Thu 20 Jul 2023 00:35:02 +0000
ROA not before:           Wed 19 Jul 2023 00:35:02 +0000
ROA not after:            Sun 20 Jul 2025 00:35:02 +0000
asID:                     267729
IP address blocks:        45.167.220.0/22 maxlen: 24
                          2803:e5a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796772 (0xc2864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd16539c52bd19701a219cb7f91b852671af6b16
        Validity
            Not Before: Jul 19 00:35:02 2023 GMT
            Not After : Jul 20 00:35:02 2025 GMT
        Subject: CN=7dfe90dd3538c2c4676628bd97506aa5de7a9abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:af:51:ad:74:f2:8f:02:ed:55:f9:65:51:
                    1b:20:8a:31:f0:60:74:d7:33:6b:85:9f:ab:88:39:
                    88:af:1f:34:e3:69:c3:68:39:60:7d:2d:fb:53:64:
                    1d:4f:31:0d:67:66:97:08:db:74:8b:24:bb:e6:f5:
                    01:ee:9e:22:d6:1d:80:a9:78:35:7c:0b:bb:f0:e7:
                    ee:86:f8:78:05:65:ac:83:c9:df:ab:9b:1a:35:c1:
                    6a:ab:01:7b:93:61:2b:58:69:c9:9e:8a:1a:b8:3f:
                    1a:31:fc:1c:53:6b:f4:dd:a6:ce:a2:53:74:2f:cb:
                    8f:dc:3b:eb:ef:df:b1:46:ce:99:06:2b:3e:36:63:
                    72:94:da:98:24:5f:28:88:55:65:4b:94:c7:ec:72:
                    8a:80:d4:67:50:00:fe:e2:6d:68:97:9b:f9:e7:a7:
                    13:a4:7e:2b:62:17:d1:7f:60:7d:4b:3b:d8:e5:cc:
                    ab:be:a1:82:e8:1d:21:66:3b:6f:bd:30:32:ee:86:
                    0e:75:da:bc:38:4c:d0:4f:ec:a6:09:53:96:5c:8d:
                    48:92:37:6e:1b:7e:a3:0e:69:32:3f:49:c4:39:e3:
                    f9:f9:c8:90:2c:13:db:55:e2:71:97:ef:ff:3b:1a:
                    06:c7:19:c5:17:62:fa:d7:a6:03:a5:00:d9:5e:b4:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AE:FD:2A:7C:7A:C6:0E:EA:08:24:A5:A2:FF:55:76:60:CD:D3:26
            X509v3 Authority Key Identifier:
                keyid:65:4E:F8:25:03:EE:4F:D4:39:0F:08:28:E2:35:6F:AE:59:82:D0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd16539c52bd19701a219cb7f91b852671af6b16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/7dfe90dd3538c2c4676628bd97506aa5de7a9abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/056779b9-74e7-4fc3-81f6-3264ab9fc9fc/cd16539c52bd19701a219cb7f91b852671af6b16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.220.0/22
                IPv6:
                  2803:e5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:40:b7:b1:03:67:f3:2c:a3:de:86:48:ab:f7:a0:da:98:d7:
         13:e8:f3:02:54:67:c6:f8:2d:96:3d:c7:45:35:24:18:20:78:
         df:0f:14:0a:c1:6a:e8:e3:4b:bc:c0:d4:48:e8:58:41:61:ec:
         f6:29:da:69:4b:27:96:50:84:a5:a1:88:4c:74:7d:c8:8c:b7:
         23:5c:05:0e:01:e0:95:0f:ab:67:7c:f1:fd:40:24:73:ef:f5:
         69:8d:8c:0e:ca:a0:37:bb:e0:89:1d:bf:4a:89:1e:f5:c6:5b:
         ce:08:0c:e9:9f:bf:e4:54:7b:96:4f:30:13:74:65:43:89:7b:
         b8:08:f1:5f:21:18:f9:9c:69:40:cb:4b:ee:8f:8b:d0:30:2f:
         99:03:e9:b7:81:f6:c4:7a:77:18:a7:09:4e:9f:7e:63:1d:b4:
         38:f6:bd:c6:c0:ea:1a:79:68:fe:f7:62:fc:c8:69:91:b7:bb:
         c5:8e:ab:a1:cb:53:d4:9d:b8:a9:e7:2b:46:ad:7b:d9:d0:e8:
         73:4a:01:16:3d:18:49:6d:05:d6:0e:34:5a:a3:8d:92:97:58:
         99:9f:70:65:1d:0c:2a:1d:a4:b9:c6:8a:12:06:90:34:e9:94:
         ee:b0:71:cc:9f:8b:3e:16:93:95:56:84:2c:ff:e0:86:4f:86:
         62:27:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----