Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/ce2ae92f12dbfbf201615f6f824ebbf10e79b68d.roa
File:                     ce2ae92f12dbfbf201615f6f824ebbf10e79b68d.roa (raw, json)
Hash identifier:          jisBEfy8/jdjbolAXghzeYJkbM5Y1W9nN5rWAaew2uc=
Subject key identifier:   DF:FE:FA:61:80:17:6A:22:FB:8E:B4:63:57:EC:8D:2C:EC:F1:E4:31
Certificate issuer:       /CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
Certificate serial:       3D6D
Authority key identifier: 8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/ce2ae92f12dbfbf201615f6f824ebbf10e79b68d.roa
Signing time:             Mon 24 Jul 2023 15:46:08 +0000
ROA not before:           Sun 23 Jul 2023 15:46:08 +0000
ROA not after:            Thu 24 Jul 2025 15:46:08 +0000
asID:                     52318
IP address blocks:        45.237.52.0/22 maxlen: 22
                          2801:1f:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15725 (0x3d6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
        Validity
            Not Before: Jul 23 15:46:08 2023 GMT
            Not After : Jul 24 15:46:08 2025 GMT
        Subject: CN=ce2ae92f12dbfbf201615f6f824ebbf10e79b68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:40:57:9e:cd:44:21:8c:fa:1a:0d:bc:5e:
                    4c:bc:5c:8e:f5:36:41:2a:84:0f:97:d7:3b:bf:c0:
                    fd:5f:7e:c0:59:92:be:e5:69:ad:eb:58:ed:f3:05:
                    67:b7:ac:7f:2c:48:7c:04:1d:95:37:1a:7f:38:fa:
                    23:42:f1:2b:b1:d2:45:bd:ce:12:c0:34:d5:76:0f:
                    95:66:01:6f:d7:7d:12:8a:a1:50:eb:77:b8:4a:ad:
                    d3:50:29:61:90:2d:6a:a1:f7:9c:9f:88:ac:29:62:
                    fe:40:c1:7d:fb:bc:6e:22:bc:64:2c:a2:68:19:34:
                    00:37:f2:f2:bf:17:ae:4c:5b:61:6e:84:6b:9f:36:
                    e1:ca:a4:29:c3:b9:3b:83:8d:77:02:5c:42:ae:29:
                    b1:2a:a0:a7:d7:89:9a:06:ae:72:df:99:db:10:bb:
                    e8:a9:43:49:dd:cb:a8:52:26:55:7f:00:70:ce:24:
                    a7:6c:17:b7:67:ca:86:1b:dc:15:bc:83:d4:21:55:
                    e4:72:c8:b9:00:01:e1:14:4d:94:4a:7b:bd:8c:84:
                    a1:6f:9a:6c:fc:e2:2c:75:36:7a:83:17:6c:9e:48:
                    5d:75:c2:54:68:49:79:aa:97:d9:3a:1d:2a:a1:b5:
                    50:38:f0:b0:08:f5:99:0d:20:36:d2:9c:f7:f5:76:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:FA:61:80:17:6A:22:FB:8E:B4:63:57:EC:8D:2C:EC:F1:E4:31
            X509v3 Authority Key Identifier:
                keyid:8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/ce2ae92f12dbfbf201615f6f824ebbf10e79b68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/a7f9ed94b559a4db41aea1589c5195ae51090fc5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.52.0/22
                IPv6:
                  2801:1f:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:09:98:60:34:1a:cb:f9:4b:54:75:6d:f3:fa:b4:00:dd:c4:
         d2:67:7e:26:66:11:10:58:57:e9:97:52:55:60:1d:a3:57:c0:
         ea:24:7e:97:26:e3:4d:53:6c:a8:21:cb:b5:36:e2:e6:c2:f2:
         7c:e9:03:f5:f3:19:94:69:60:23:4b:67:f3:06:c0:8b:61:62:
         0b:d2:10:eb:5a:2a:90:f0:de:22:1d:32:ca:41:c0:76:eb:22:
         6c:17:72:37:3f:0b:90:05:ad:5b:4b:b1:67:cc:b4:13:69:c8:
         bf:c5:56:ce:24:25:7b:2a:19:62:b5:00:aa:c1:c2:b1:6c:94:
         0f:2e:ec:d4:ed:e2:81:f5:de:ac:2d:ec:21:0c:37:07:d9:a5:
         27:e8:7a:3c:69:ad:87:58:ef:5a:8e:3f:48:09:92:f1:12:e5:
         8e:58:eb:97:e4:34:46:84:6f:b5:e5:e8:a9:0b:70:66:af:bb:
         08:73:ae:10:f0:15:04:a4:78:9d:4b:01:9e:ef:ea:53:54:35:
         f0:2a:3b:66:6a:bf:b8:f9:2d:5a:20:6d:87:2c:e8:41:01:e1:
         93:14:a8:f9:52:64:10:ce:bd:1c:25:36:19:f1:47:9c:64:07:
         ad:c6:68:23:9c:b9:06:bf:e6:ac:ce:5d:76:68:f6:5a:67:e3:
         a3:90:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----