Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/a9cb688ba519a0d3eeeb5ff95b30993b7085c30e.roa
File:                     a9cb688ba519a0d3eeeb5ff95b30993b7085c30e.roa (raw, json)
Hash identifier:          sAN5zHqeG1Um1tpfQar1c4r1f1W8+FEwuObIO3oBUDc=
Subject key identifier:   48:C2:2C:E2:DD:6B:81:F0:F8:71:65:8B:58:83:B5:FF:7F:FB:1D:E3
Certificate issuer:       /CN=b08b134d19c661a4a28b302fd9901173cb75358b
Certificate serial:       13437B
Authority key identifier: 63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/a9cb688ba519a0d3eeeb5ff95b30993b7085c30e.roa
Signing time:             Tue 25 Jul 2023 20:46:01 +0000
ROA not before:           Mon 24 Jul 2023 20:46:01 +0000
ROA not after:            Fri 25 Jul 2025 20:46:01 +0000
asID:                     265556
IP address blocks:        45.164.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262459 (0x13437b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b134d19c661a4a28b302fd9901173cb75358b
        Validity
            Not Before: Jul 24 20:46:01 2023 GMT
            Not After : Jul 25 20:46:01 2025 GMT
        Subject: CN=a9cb688ba519a0d3eeeb5ff95b30993b7085c30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:5c:e3:0d:60:24:df:17:d9:3c:35:9d:be:
                    3e:9c:4e:64:45:4d:5b:c5:73:94:35:9f:c2:38:04:
                    7e:32:69:03:6d:fe:2f:ea:fc:c4:9f:70:25:8d:57:
                    a0:9d:72:a6:81:74:48:af:6f:54:76:bf:24:a4:02:
                    7e:9b:8c:b5:6e:66:62:5d:8a:58:7b:68:e6:18:3d:
                    8f:47:bd:94:80:fb:c6:88:fb:5a:b6:e8:42:f1:c6:
                    55:a3:72:de:df:37:49:05:27:0d:b3:25:6c:a0:1c:
                    d7:76:a7:ca:d4:a7:92:82:06:fd:5b:65:10:c4:35:
                    cb:21:62:65:52:54:b7:ed:f7:94:ee:bd:cd:6f:7a:
                    28:c8:06:2b:99:28:ca:2d:bb:3c:2d:f7:c2:23:8a:
                    b4:0d:7b:15:35:29:13:4a:e8:b6:f5:79:b4:e7:51:
                    17:08:1b:5c:e4:0a:b7:35:60:fa:3d:f7:7d:8b:ce:
                    07:c8:e1:79:d5:81:d5:06:ca:f0:d6:3f:50:45:2b:
                    21:1e:8f:07:3b:33:96:a2:3e:b8:3d:94:5f:4d:01:
                    c5:6f:fd:67:dd:cc:86:6f:0f:56:a9:b3:ff:ea:55:
                    61:bc:f1:2e:e6:ba:68:07:9d:03:23:90:b8:9d:4c:
                    fd:64:6e:69:72:58:43:7b:d4:9a:15:f0:d9:d8:cd:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C2:2C:E2:DD:6B:81:F0:F8:71:65:8B:58:83:B5:FF:7F:FB:1D:E3
            X509v3 Authority Key Identifier:
                keyid:63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/a9cb688ba519a0d3eeeb5ff95b30993b7085c30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/b08b134d19c661a4a28b302fd9901173cb75358b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:f2:6f:3c:87:d0:06:49:21:20:de:6a:49:ff:a4:7b:1a:d1:
         d1:1e:71:28:b2:63:91:7a:7e:59:86:3f:5f:bd:8d:37:ef:86:
         88:d5:bc:eb:7f:83:2f:e9:e7:5f:73:e8:12:a6:a1:e5:0b:3b:
         79:25:5e:d8:34:8c:7c:bf:26:f6:5d:cb:6e:7e:9b:ca:9c:8f:
         a0:dd:55:90:8b:d7:2d:89:de:ff:d3:67:61:a3:f2:5b:58:99:
         fa:ed:6f:e1:eb:38:b5:9c:a4:d3:66:ff:66:55:4b:96:cd:b1:
         89:ae:32:20:64:f5:ec:51:82:31:9b:28:8c:56:ed:03:72:3c:
         45:09:0f:f9:94:41:de:98:77:17:2a:0e:1e:93:42:31:3b:dd:
         2d:4b:fc:66:0a:df:27:16:14:5b:63:99:aa:89:2d:67:94:ce:
         60:34:2b:0c:91:81:fc:8a:15:b5:78:a4:ec:80:a8:91:ed:5b:
         72:a5:d1:17:bd:8f:a9:2a:85:dd:62:65:c1:1a:b8:44:65:09:
         ee:c3:4f:e7:e3:8d:f9:fd:d1:fb:4d:9f:a9:2e:98:3e:bc:d9:
         58:49:7a:b2:9b:0e:46:b3:73:bc:76:ac:40:6d:f8:92:02:cd:
         32:38:9c:6d:7d:17:23:4d:53:09:43:d4:90:ea:74:28:12:22:
         cc:db:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----