Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/16435e2b1dfe6688f07557d581c25e7a04122456.roa
File:                     16435e2b1dfe6688f07557d581c25e7a04122456.roa (raw, json)
Hash identifier:          BIvKA3Vmn0/pHFF9Xg59lbs9M96OxGML4QJJGWXZ5ow=
Subject key identifier:   E2:F3:A1:A4:20:19:D5:73:0A:67:13:1B:80:50:A9:27:26:82:71:22
Certificate issuer:       /CN=9f80f54526bd059d5b93379c083f1134c117b046
Certificate serial:       11A739
Authority key identifier: CC:FB:08:0A:BE:F4:CF:C4:89:9E:2E:4E:64:FD:16:A8:A0:62:EE:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80f54526bd059d5b93379c083f1134c117b046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/16435e2b1dfe6688f07557d581c25e7a04122456.roa
Signing time:             Tue 03 Oct 2023 08:30:14 +0000
ROA not before:           Mon 02 Oct 2023 08:30:14 +0000
ROA not after:            Wed 01 Oct 2025 08:30:14 +0000
asID:                     266820
IP address blocks:        45.237.84.0/22 maxlen: 22
                          2803:84a0::/36 maxlen: 36
                          2803:84a0:5000::/36 maxlen: 36
                          2803:84a0:c000::/36 maxlen: 36
                          2803:84a0:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156921 (0x11a739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f80f54526bd059d5b93379c083f1134c117b046
        Validity
            Not Before: Oct  2 08:30:14 2023 GMT
            Not After : Oct  1 08:30:14 2025 GMT
        Subject: CN=16435e2b1dfe6688f07557d581c25e7a04122456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:51:6f:60:c6:9d:7c:9e:e5:13:81:7e:f2:
                    1c:92:8a:99:5b:7d:4d:38:cf:07:8e:a9:30:1a:29:
                    bb:a6:38:2a:e5:c9:12:a0:dd:fd:bc:84:e7:66:83:
                    f4:e1:5e:bd:51:a5:ce:0a:3b:98:72:b4:91:85:e1:
                    41:6a:08:a7:a4:14:3b:c8:bb:1b:ab:72:d0:2c:fb:
                    3b:42:eb:00:60:71:2e:12:17:2c:22:a9:05:2b:bc:
                    e7:46:b0:ea:42:67:ac:11:35:24:d3:a6:8e:1f:0c:
                    92:36:cf:bc:15:78:12:bc:92:c8:ca:17:ed:96:89:
                    4d:38:61:b3:69:c7:f7:ec:35:be:56:db:f6:40:3c:
                    dc:4d:dd:82:99:73:12:c6:46:50:f8:0a:cc:6e:98:
                    e9:6d:6c:c5:bb:7d:56:62:a1:bf:45:b4:e3:0e:11:
                    96:f9:33:0d:de:af:dc:3f:2b:b4:41:d4:cd:40:98:
                    f7:d7:0d:aa:7c:08:27:cb:2d:43:76:06:2a:71:5d:
                    bf:dd:a5:c8:a8:1b:8b:b2:e0:a5:f5:f6:5a:13:27:
                    c0:ad:18:04:91:57:fc:cb:22:68:13:ab:a7:74:65:
                    10:ad:88:65:86:10:1a:d8:69:52:81:71:9d:f4:82:
                    aa:03:66:e8:01:cf:b3:ca:64:76:09:be:75:c6:08:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:A1:A4:20:19:D5:73:0A:67:13:1B:80:50:A9:27:26:82:71:22
            X509v3 Authority Key Identifier:
                keyid:CC:FB:08:0A:BE:F4:CF:C4:89:9E:2E:4E:64:FD:16:A8:A0:62:EE:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80f54526bd059d5b93379c083f1134c117b046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/16435e2b1dfe6688f07557d581c25e7a04122456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/9f80f54526bd059d5b93379c083f1134c117b046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.84.0/22
                IPv6:
                  2803:84a0::/36
                  2803:84a0:5000::/36
                  2803:84a0:c000::/36
                  2803:84a0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:22:e5:7f:33:fb:e0:ea:f2:1b:fb:b9:54:59:3c:f4:2c:
         36:8c:43:ed:17:a5:6d:6b:88:73:cc:a5:39:b5:ff:50:e8:da:
         e5:10:08:a4:63:da:13:df:8f:b1:e7:32:78:eb:8a:68:2f:b1:
         7c:f3:e3:a2:69:cc:0d:03:2c:6a:c6:14:2f:22:d1:0b:8c:98:
         fb:ce:9d:de:08:d8:50:52:7f:cb:4f:08:29:3e:cc:e4:98:37:
         66:54:d3:5d:db:d8:00:01:80:3c:c8:a1:ef:2a:26:c5:7d:9b:
         c2:2c:2f:bb:38:18:32:7c:1b:08:89:cf:56:05:b6:32:96:63:
         ad:e3:4a:9e:02:e9:7f:a3:87:45:84:eb:16:77:ff:d7:af:b5:
         46:a5:bf:f8:40:4b:8f:b3:00:ec:82:e1:81:49:b8:76:c8:b7:
         14:e3:24:c3:80:a1:13:8b:a4:a8:ba:ad:06:01:bb:bd:e5:78:
         e4:89:88:6e:3f:17:55:78:09:c9:29:bb:0b:1c:8a:6e:14:d5:
         ea:b8:62:45:7c:2c:b6:dc:3d:15:d4:30:9d:8c:6b:79:ea:97:
         16:c7:13:82:8d:a0:93:20:73:9b:5c:3a:e1:0c:c8:de:41:03:
         8e:7c:bd:fe:95:bc:ee:2a:7a:ad:88:16:84:b7:93:97:01:00:
         65:68:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----