Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/33c502f97f4fc77c7bd9d0c008c81a166dc58b66.roa
File:                     33c502f97f4fc77c7bd9d0c008c81a166dc58b66.roa (raw, json)
Hash identifier:          BCwN0IvFns6BXGnPTfnmkRssXa0Sf6Eg+xpqFlDlzM0=
Subject key identifier:   FD:6B:C1:2A:32:59:19:09:2C:FB:F1:99:B8:BA:F0:69:2D:2F:08:54
Certificate issuer:       /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial:       09E768
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/33c502f97f4fc77c7bd9d0c008c81a166dc58b66.roa
Signing time:             Mon 18 Dec 2023 21:26:24 +0000
ROA not before:           Mon 18 Dec 2023 21:26:24 +0000
ROA not after:            Thu 18 Dec 2025 21:26:24 +0000
asID:                     262204
IP address blocks:        45.170.232.0/22 maxlen: 24
                          2803:bba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649064 (0x9e768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Validity
            Not Before: Dec 18 21:26:24 2023 GMT
            Not After : Dec 18 21:26:24 2025 GMT
        Subject: CN=33c502f97f4fc77c7bd9d0c008c81a166dc58b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:db:77:e8:b9:c1:36:e6:2b:c7:03:c3:0a:
                    3e:7c:b2:1e:0b:96:0d:ed:11:bb:68:7e:6a:a3:f9:
                    0b:87:42:ae:dd:d3:23:d6:41:9f:ba:b7:a8:ca:03:
                    18:c3:6b:01:39:52:f8:4f:46:99:07:59:89:32:44:
                    da:eb:58:e8:ec:e2:b4:02:bb:4a:68:b0:09:ae:e6:
                    7f:cf:eb:6d:66:4b:66:42:b4:6b:35:99:bc:4b:f4:
                    75:63:7c:e9:e1:82:6b:53:58:13:5e:91:cc:6c:2b:
                    18:58:d4:ab:6a:19:cd:4a:ff:43:6a:2b:97:39:17:
                    f9:75:df:9e:56:36:d5:89:a8:d0:be:a4:4f:de:6e:
                    0c:7e:50:ef:7d:30:e5:71:05:15:74:85:45:ca:47:
                    1c:aa:ae:7a:7e:3b:16:89:f1:11:31:ce:03:22:33:
                    ea:ef:e2:c6:4b:c3:ff:77:61:2f:61:1c:e2:24:49:
                    7a:fb:a2:e8:76:a1:e3:41:29:1e:51:d6:43:d6:15:
                    43:ac:f9:44:87:12:4b:24:30:4f:4e:e8:c8:d1:5e:
                    27:80:a1:1f:2c:80:b4:00:62:e6:cd:2c:b4:1f:35:
                    1f:5e:ac:1a:ac:b4:93:99:25:f6:63:cf:ea:c8:65:
                    9b:1d:00:cc:57:2a:db:8a:c6:16:82:02:5e:b9:10:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6B:C1:2A:32:59:19:09:2C:FB:F1:99:B8:BA:F0:69:2D:2F:08:54
            X509v3 Authority Key Identifier:
                keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/33c502f97f4fc77c7bd9d0c008c81a166dc58b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:3f:46:39:88:6f:34:ef:84:11:bd:9c:2d:2f:f5:8e:77:
         8a:b3:ac:62:95:0d:5d:55:45:80:7b:01:1d:d3:f9:f7:4a:a0:
         c5:82:bd:31:5e:0c:27:1a:1f:92:62:3b:33:ae:9f:99:1c:12:
         1b:51:b1:59:c1:9b:59:86:b7:58:44:d0:c3:74:ee:56:76:dc:
         2b:28:c2:f0:f7:9e:58:bb:33:7d:8a:ce:74:62:73:04:d7:bd:
         e0:e5:8a:92:41:e8:dd:96:5c:60:56:62:ad:8e:eb:88:49:8b:
         69:df:43:59:07:0d:7e:aa:09:d5:81:cd:c9:4b:03:05:93:8a:
         2c:e8:a2:85:c7:40:5e:8e:b9:1d:74:61:4f:e1:17:59:87:5f:
         9f:f3:02:a2:23:7d:d1:95:c4:d0:11:bc:ba:07:9a:97:e7:5b:
         1c:dc:d6:e4:3b:f2:00:fd:0c:41:d3:9c:04:45:76:1c:e5:a9:
         40:ae:2e:ca:04:54:5d:5a:27:4a:ff:25:30:2a:5e:fc:c6:61:
         87:96:95:cf:a0:67:bc:e2:07:d0:70:1d:99:e8:08:df:08:e3:
         8c:71:73:e3:ee:29:9c:15:88:30:69:66:c3:e4:7d:71:39:5b:
         01:c0:ba:9a:49:5f:b4:32:2e:31:4c:33:49:64:cd:74:90:2a:
         f0:18:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----