Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/8adeb96798236e39ab0faac009d67708b510d7d0.roa
File:                     8adeb96798236e39ab0faac009d67708b510d7d0.roa (raw, json)
Hash identifier:          CdqOosH33cRzAlr01MonjEl7v9f+Ey8PbcQr6aFpgfk=
Subject key identifier:   00:BC:58:B0:9E:4E:85:1B:B5:88:EE:76:29:D2:C2:BA:3F:63:6C:2C
Certificate issuer:       /CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
Certificate serial:       011319
Authority key identifier: F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/8adeb96798236e39ab0faac009d67708b510d7d0.roa
Signing time:             Mon 22 May 2023 16:07:39 +0000
ROA not before:           Sun 21 May 2023 16:07:39 +0000
ROA not after:            Thu 22 May 2025 16:07:39 +0000
asID:                     266791
IP address blocks:        45.236.32.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70425 (0x11319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
        Validity
            Not Before: May 21 16:07:39 2023 GMT
            Not After : May 22 16:07:39 2025 GMT
        Subject: CN=8adeb96798236e39ab0faac009d67708b510d7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:66:75:40:28:d4:57:d1:b1:fb:c3:f6:05:
                    11:b5:ad:5e:9c:03:44:c3:22:3d:59:2f:de:34:3a:
                    5b:73:bd:22:80:37:18:7d:74:92:a5:56:13:9a:18:
                    6d:d9:d0:0a:fa:f4:54:66:7d:f1:ca:13:68:b0:98:
                    0b:15:03:3c:e1:03:6f:f8:61:25:42:8f:d6:5a:3b:
                    85:45:ac:36:b0:a4:fe:e4:3c:89:aa:a2:d2:ae:4d:
                    2e:58:c3:68:e3:c0:95:b6:01:a9:91:05:65:ca:00:
                    e6:1f:e1:7a:95:33:71:bc:4d:38:c6:0b:04:d9:67:
                    2b:5b:91:e2:e6:1c:c0:9e:1f:9f:a6:eb:7c:8e:1c:
                    f1:65:be:49:05:a6:03:aa:af:17:bb:85:65:cf:60:
                    2a:75:f0:82:32:8d:2b:7c:d7:20:d1:9e:83:c9:2f:
                    2d:a9:d8:b8:d6:aa:13:ff:f2:d9:5b:eb:51:a4:fc:
                    15:11:5e:7b:73:2d:34:02:26:bc:31:e2:bf:74:97:
                    e8:78:e1:4b:6a:7e:22:20:24:e6:7c:51:53:83:16:
                    d7:52:dc:f2:22:cd:a8:27:74:e8:9e:e4:90:23:25:
                    f1:c5:01:d3:3a:53:10:3c:1a:dc:d8:3f:3d:3d:e2:
                    aa:32:13:17:96:04:29:cb:b2:2f:c1:39:68:43:8d:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BC:58:B0:9E:4E:85:1B:B5:88:EE:76:29:D2:C2:BA:3F:63:6C:2C
            X509v3 Authority Key Identifier:
                keyid:F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/8adeb96798236e39ab0faac009d67708b510d7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/45261c30c618b29a3cce23bac23ee2522bfc9f5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:66:f9:3b:a3:c5:6d:be:c9:51:57:44:a8:6f:fd:04:71:4a:
         23:a1:59:b7:d9:96:53:d0:aa:30:ed:90:97:e2:13:09:a3:21:
         2e:f0:8c:2f:3d:2f:be:ae:1d:bb:bd:e6:ea:53:ae:b8:53:91:
         91:16:65:da:23:23:3c:4e:11:fc:43:91:8e:83:1b:3c:af:8c:
         b5:d9:15:a6:55:c5:48:67:59:64:ad:61:d2:13:0b:9a:c2:43:
         41:a6:ca:72:ad:cb:6b:f7:f8:ab:ce:5e:d0:6b:3c:c2:07:a8:
         4c:9f:ca:05:7f:98:33:cf:f5:56:38:f1:54:1d:48:03:6d:2b:
         19:2b:60:59:2a:66:5b:4c:c3:eb:b7:70:e5:25:d6:4d:ae:21:
         f2:0f:9d:32:b8:83:fb:cf:37:f5:43:09:b0:87:0b:08:cb:4c:
         9b:8e:93:64:6f:a8:f4:0e:26:84:47:5d:11:ee:3d:d0:3e:9d:
         63:ba:a2:c6:f8:de:22:47:26:1f:07:48:5a:b0:cd:be:81:10:
         96:50:6b:06:ea:20:da:e6:73:b9:9c:26:61:5e:27:6a:a7:fa:
         83:71:0a:8d:75:9c:07:df:67:ef:21:a6:7f:9c:24:ac:97:65:
         a6:7e:b6:be:69:f2:0b:02:29:93:43:cf:af:2f:df:12:30:33:
         e1:20:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----