Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/9f8c0dfe876bedff7c8ffbf9222b5164df27851d.roa
File:                     9f8c0dfe876bedff7c8ffbf9222b5164df27851d.roa (raw, json)
Hash identifier:          y9keNJr1qG0pZFZe4XYazU3WfNafvNUnpkaymK7ALFs=
Subject key identifier:   79:6A:AF:F6:E0:D7:73:90:28:01:1B:C4:89:BB:18:93:D3:65:B8:73
Certificate issuer:       /CN=a431b12cbb45857ee37540244e236b5fe1793e26
Certificate serial:       25997A
Authority key identifier: 0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/9f8c0dfe876bedff7c8ffbf9222b5164df27851d.roa
Signing time:             Fri 05 Jan 2024 13:36:29 +0000
ROA not before:           Fri 05 Jan 2024 13:36:29 +0000
ROA not after:            Mon 05 Jan 2026 13:36:29 +0000
asID:                     27947
IP address blocks:        45.238.216.0/22 maxlen: 24
                          2801:1c:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464122 (0x25997a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431b12cbb45857ee37540244e236b5fe1793e26
        Validity
            Not Before: Jan  5 13:36:29 2024 GMT
            Not After : Jan  5 13:36:29 2026 GMT
        Subject: CN=9f8c0dfe876bedff7c8ffbf9222b5164df27851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:70:28:86:63:8d:ef:38:7e:a8:ab:9b:c0:
                    c4:20:dc:c0:0f:39:ec:82:8e:f1:a0:cb:bb:c6:56:
                    53:2b:a0:13:d6:6e:57:d8:43:a7:2d:92:b9:3b:1b:
                    d4:19:ac:9c:e2:7f:dc:79:df:48:70:88:15:00:89:
                    ed:b4:82:d0:d3:2b:3f:f9:c2:ac:ab:90:7c:d4:4f:
                    85:8d:60:ef:b4:12:8d:f5:3e:17:db:ee:5f:ab:39:
                    12:a2:fa:a9:b8:5c:aa:10:1e:7b:1f:7f:79:0c:ec:
                    25:59:86:05:10:64:f1:09:54:ea:35:16:e0:a4:05:
                    cc:2e:00:46:b9:7d:ab:ef:ea:20:f5:b0:de:9e:9b:
                    7e:a1:85:c9:04:e1:59:75:b5:3b:8d:31:11:8e:d2:
                    bb:01:09:80:0d:c0:af:d6:0a:33:cc:6b:de:16:a6:
                    c6:c0:2c:8a:7d:b2:3d:90:2a:00:ff:4b:28:6d:f6:
                    b4:88:ee:70:2f:f7:29:aa:7b:b7:e6:a7:ac:ad:7e:
                    f8:0c:3b:e4:6d:86:d3:bf:9c:de:c3:e7:ca:84:48:
                    bb:fb:95:46:12:a6:be:57:5a:1b:18:5b:33:06:aa:
                    27:7c:a1:ba:bc:e2:a1:41:40:b3:f9:89:a7:3b:b1:
                    b1:1b:b1:a7:4b:27:97:65:82:16:2e:f0:af:25:01:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:AF:F6:E0:D7:73:90:28:01:1B:C4:89:BB:18:93:D3:65:B8:73
            X509v3 Authority Key Identifier:
                keyid:0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/9f8c0dfe876bedff7c8ffbf9222b5164df27851d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22
                IPv6:
                  2801:1c:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:b1:91:3c:d8:1a:fa:3b:87:de:ac:d5:96:c4:46:c3:74:
         18:58:8a:9a:17:f5:02:27:48:f1:65:98:08:04:5a:fb:9a:93:
         82:86:f8:66:33:ac:4f:13:f8:31:69:3c:e2:53:87:23:7e:2e:
         5a:5c:16:2f:ef:10:d5:c0:78:0c:03:77:2a:d8:fd:14:d6:06:
         57:8b:74:18:6d:bd:6b:ac:50:0d:f3:f3:9d:84:5c:cf:f3:4a:
         2e:db:58:e6:51:db:23:97:ff:8d:67:b7:2e:6f:c2:4d:9d:6d:
         9b:2a:42:e2:5d:4c:99:bf:20:b7:ad:98:c0:89:a2:7c:b4:29:
         ec:2f:d4:be:41:cd:a9:59:c9:2e:72:52:2d:34:ab:9b:0a:11:
         c5:34:84:48:36:81:28:ff:e5:e0:40:9d:53:6a:03:35:a2:6e:
         7a:d3:9f:18:d0:b0:1f:4f:25:e2:ba:df:06:e3:73:5c:e0:79:
         a2:80:16:8a:5e:32:36:b2:86:08:09:4d:97:a3:20:1c:10:16:
         07:89:09:6b:27:27:a7:4a:5c:dc:fc:85:14:5d:70:f6:1f:87:
         78:85:fe:d4:55:2f:dc:35:02:f2:b8:46:f9:99:f0:ac:38:c5:
         99:bc:43:16:3b:7c:69:c8:f7:f1:5a:4a:96:0e:46:ab:38:5d:
         15:60:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----