Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/cd24d29507ec9a60c57a4a1a4197d82299fe09a9.roa
File:                     cd24d29507ec9a60c57a4a1a4197d82299fe09a9.roa (raw, json)
Hash identifier:          raxozYh8ATHRMxuE+ZiOJHwv2rOvCMUxEA0jqrhGqAA=
Subject key identifier:   BB:63:49:BD:0C:80:69:BE:62:35:8F:34:48:8E:F7:0F:B4:74:96:AC
Certificate issuer:       /CN=de1d132dcee440b2c8e49412f22186fb39f7c848
Certificate serial:       09EA3C
Authority key identifier: 4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/cd24d29507ec9a60c57a4a1a4197d82299fe09a9.roa
Signing time:             Mon 18 Dec 2023 21:27:41 +0000
ROA not before:           Mon 18 Dec 2023 21:26:24 +0000
ROA not after:            Thu 18 Dec 2025 21:26:24 +0000
asID:                     267768
IP address blocks:        45.170.232.0/22 maxlen: 24
                          2803:bba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649788 (0x9ea3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Validity
            Not Before: Dec 18 21:26:24 2023 GMT
            Not After : Dec 18 21:26:24 2025 GMT
        Subject: CN=cd24d29507ec9a60c57a4a1a4197d82299fe09a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:a5:07:10:90:93:53:01:aa:c8:6f:b5:64:
                    fd:ed:17:94:04:b7:66:cf:13:f8:95:39:03:9f:5c:
                    f0:8b:dd:94:c4:e5:79:02:83:ce:4c:50:99:81:74:
                    6f:2d:fa:4f:68:a7:d3:3c:0c:a9:68:e3:11:a1:13:
                    1f:11:bc:58:ac:7c:68:d7:de:d6:4e:1b:18:f2:74:
                    62:b4:d7:e1:cd:3c:b5:ab:9e:0f:0f:1e:f3:61:d4:
                    20:4e:39:7b:81:1f:2a:02:9e:83:7b:a4:b7:f4:a4:
                    8f:87:c9:99:48:34:c0:b7:2f:1f:bd:7b:82:10:e9:
                    08:36:3f:51:4b:bb:a3:10:e1:9a:1f:35:a0:21:75:
                    6e:3d:ac:cd:c9:38:1e:09:09:6a:b7:b6:8d:2a:43:
                    65:5d:5f:3f:c3:c2:e4:7b:47:19:86:f9:fa:67:09:
                    46:9b:a0:47:20:c6:74:5b:c2:bf:98:d9:e5:f9:d1:
                    26:2a:1e:82:8f:71:52:bc:5e:e4:dd:e7:bd:ee:47:
                    c8:2d:d8:18:65:dc:43:ae:ad:a5:b8:4a:45:df:fa:
                    b9:58:93:71:f6:f0:e1:a6:fd:f7:1b:2b:a8:41:3a:
                    f0:2b:6d:3b:a1:39:ad:0d:61:86:19:10:ef:57:f4:
                    7f:0c:56:d9:0d:a8:1b:1f:3c:c5:61:e4:5f:e2:a9:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:63:49:BD:0C:80:69:BE:62:35:8F:34:48:8E:F7:0F:B4:74:96:AC
            X509v3 Authority Key Identifier:
                keyid:4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/cd24d29507ec9a60c57a4a1a4197d82299fe09a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:c6:a6:74:b3:b4:41:28:4e:1a:e3:1b:4c:e2:05:38:aa:04:
         4c:58:6c:60:66:87:db:e4:98:a9:d5:3b:bc:09:13:51:8e:43:
         a5:20:cc:3e:6e:04:8e:0b:1e:c5:f5:fb:84:21:57:c2:09:77:
         88:db:48:18:8d:73:fe:81:17:81:3d:9a:a9:4e:28:d1:30:de:
         6c:53:b6:a7:13:5f:8f:5c:a1:d6:f5:8c:0b:9e:be:c2:42:55:
         61:0d:1b:18:ce:fe:98:a1:3f:67:d6:ae:29:d6:00:f2:d8:e8:
         51:5d:26:02:3e:a5:f9:88:4e:2b:22:b3:ff:0e:5b:b7:66:1d:
         df:8a:4e:3a:d5:4c:8e:4c:fe:a9:13:af:54:4a:99:fc:6e:9d:
         f7:3d:45:bb:cb:e8:73:2f:22:37:07:c7:1c:6e:81:55:97:56:
         03:15:ee:eb:03:1c:9f:01:81:c5:4c:99:b8:7c:fb:0f:22:e5:
         c2:72:a1:e9:42:95:9c:32:13:3b:dc:59:e1:cb:17:20:f2:db:
         5f:4f:8f:10:d7:a3:a8:6b:7d:9b:9a:48:d6:82:01:5b:d3:b9:
         85:df:c2:93:00:6c:99:03:23:a7:03:b6:25:0c:9f:40:a3:12:
         2a:0c:9f:b6:cd:62:e7:28:5d:50:43:ea:88:5f:55:fe:29:24:
         bc:88:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----