Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/a489b299d6d8eda17478f87104beca16f974ce7e.roa
File:                     a489b299d6d8eda17478f87104beca16f974ce7e.roa (raw, json)
Hash identifier:          N2n6Zm+hwpJ2XkSrMvHuUkjQ22+QekJG/a+sPNaCt6o=
Subject key identifier:   43:F0:16:00:2F:F4:C0:F0:CA:97:85:9F:F4:E9:BB:BE:33:0E:C9:0A
Certificate issuer:       /CN=d87cacea641658717abecb35689ebe8932f40ead
Certificate serial:       0A67DE
Authority key identifier: 50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/a489b299d6d8eda17478f87104beca16f974ce7e.roa
Signing time:             Thu 22 Jun 2023 04:35:25 +0000
ROA not before:           Wed 21 Jun 2023 04:35:25 +0000
ROA not after:            Sun 22 Jun 2025 04:35:25 +0000
asID:                     267796
IP address blocks:        45.172.184.0/22 maxlen: 24
                          2803:5fa0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681950 (0xa67de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87cacea641658717abecb35689ebe8932f40ead
        Validity
            Not Before: Jun 21 04:35:25 2023 GMT
            Not After : Jun 22 04:35:25 2025 GMT
        Subject: CN=a489b299d6d8eda17478f87104beca16f974ce7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:d9:81:d7:f7:51:1a:74:f6:31:f1:01:59:
                    2c:f8:93:09:cd:76:36:fd:c8:03:35:0f:87:bd:dd:
                    19:bc:b8:cd:26:a7:8f:e8:b4:5d:7d:d2:59:06:e0:
                    fc:4b:a9:cb:c4:06:6c:43:0c:44:9a:a3:12:be:04:
                    dd:24:1b:c2:fd:dd:90:75:d4:26:41:1f:25:ec:bf:
                    85:5b:82:bd:72:7c:64:14:db:d6:03:bd:61:69:e9:
                    1e:b1:1b:17:bb:7e:4b:a6:ce:a9:aa:f5:00:97:3f:
                    3c:3f:df:57:06:46:62:81:3b:1c:74:8d:67:3b:a0:
                    8e:4b:17:1b:d0:54:12:2d:51:6a:c5:7d:a1:49:c7:
                    8c:10:e1:94:1f:69:43:52:a3:1c:75:6d:d0:a6:37:
                    90:8d:9d:8c:3b:a9:f8:94:10:06:fc:93:ce:40:31:
                    5c:e8:46:a9:d7:18:a3:b9:a2:dd:50:f4:2b:ff:11:
                    f2:f6:c2:5c:67:65:74:58:a7:e4:ab:79:00:46:2b:
                    23:11:7d:d9:56:6b:f3:d9:e5:72:af:d0:3f:c8:8c:
                    38:10:63:2b:35:68:c6:e7:b5:19:1c:23:23:a7:87:
                    f8:3a:3c:9d:d6:74:ea:f3:5c:4f:43:a7:f5:1a:69:
                    29:98:44:04:71:dd:e4:88:52:35:2f:17:b6:86:b3:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F0:16:00:2F:F4:C0:F0:CA:97:85:9F:F4:E9:BB:BE:33:0E:C9:0A
            X509v3 Authority Key Identifier:
                keyid:50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/a489b299d6d8eda17478f87104beca16f974ce7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.184.0/22
                IPv6:
                  2803:5fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:df:30:1c:b4:c9:d0:65:52:56:12:a5:db:3c:b3:f5:9b:bc:
         53:ff:c5:ef:9f:d0:56:bb:37:07:16:33:cd:c8:50:b2:0a:96:
         bd:60:c3:af:6f:ee:0a:23:47:b1:77:08:2d:2f:8e:b9:8d:8d:
         f3:e6:e5:7d:b7:94:44:b3:68:31:aa:85:cd:1e:3d:a8:a3:e8:
         fa:cd:d0:1b:44:ea:3f:b2:66:cd:45:7b:e3:a2:21:33:24:73:
         29:03:e3:db:85:a9:ba:e7:f0:c3:7f:86:7d:04:f5:76:9b:7e:
         e8:25:79:9f:05:55:c4:d3:77:16:d0:46:26:e4:2b:9c:3e:0a:
         36:ac:d8:bf:6f:20:66:e0:fc:6f:52:4e:bd:b8:82:a4:18:fa:
         5f:34:3d:e5:d3:c1:ec:92:89:a8:41:1d:75:2d:ef:86:ed:93:
         4e:ac:b5:79:b3:ff:41:ac:c0:52:a2:31:dd:4e:ce:c9:a6:90:
         61:67:9f:8c:dd:10:47:75:19:a2:9f:53:ce:49:b4:3e:8a:aa:
         cf:ec:b7:96:16:87:4b:70:5c:58:fa:78:84:11:ca:67:0c:20:
         a1:f5:83:5c:f6:52:02:88:83:f0:2c:4b:69:f2:ed:a2:8d:5f:
         05:97:92:e7:7a:79:8a:e5:5a:61:40:3a:1d:20:cd:d0:ea:b0:
         51:7f:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----