Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/da12cd694ecdae20fddefedda704d13d4c85182d.roa
File:                     da12cd694ecdae20fddefedda704d13d4c85182d.roa (raw, json)
Hash identifier:          bYUSFnBUwQ5Y4gc+JKIcMSX7Q0Be2v36b7s5ybgnleU=
Subject key identifier:   D5:DB:3F:8F:86:6D:D7:81:33:8F:8E:B8:16:77:53:88:8C:67:8B:A5
Certificate issuer:       /CN=c619c73c049b2f8bbf3acabea01c01e066fd9b63
Certificate serial:       1ADB87
Authority key identifier: 28:7C:F6:8F:66:1F:D1:01:E0:BA:CE:16:60:D3:CE:31:81:A8:8F:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c619c73c049b2f8bbf3acabea01c01e066fd9b63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/da12cd694ecdae20fddefedda704d13d4c85182d.roa
Signing time:             Wed 08 Nov 2023 22:33:01 +0000
ROA not before:           Wed 08 Nov 2023 22:33:00 +0000
ROA not after:            Sat 08 Nov 2025 22:33:00 +0000
asID:                     271797
IP address blocks:        45.224.100.0/22 maxlen: 24
                          2803:8010::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760135 (0x1adb87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c619c73c049b2f8bbf3acabea01c01e066fd9b63
        Validity
            Not Before: Nov  8 22:33:00 2023 GMT
            Not After : Nov  8 22:33:00 2025 GMT
        Subject: CN=da12cd694ecdae20fddefedda704d13d4c85182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:0c:06:bd:20:c9:71:d7:be:0d:67:c2:58:
                    ed:b5:7e:3f:cc:f9:87:30:4c:17:e8:b9:a3:22:b1:
                    ff:a8:8a:5b:2d:65:6e:1d:cb:1a:d0:4b:4b:4a:84:
                    df:5a:e5:d2:0d:17:ec:93:9c:1c:48:a9:ff:d2:e0:
                    fe:f2:17:b0:59:a2:42:1c:a4:95:21:8c:39:e5:5e:
                    8e:23:6f:ab:98:f3:c2:e8:a1:f5:b7:84:96:2b:0c:
                    23:73:bd:15:a1:3f:15:9c:ee:2c:7f:dc:77:ea:50:
                    1c:86:67:96:6c:85:95:54:fb:5b:4c:99:bc:47:49:
                    71:8d:f0:0f:99:37:b5:76:5c:b1:83:3d:3c:f2:e7:
                    47:5a:bd:13:81:c2:fb:d4:91:ca:96:be:df:f9:11:
                    ca:ec:3f:26:db:74:fc:2c:5d:12:6b:90:4a:5d:ce:
                    ee:0f:d0:f4:2b:d7:7c:2d:a9:88:3d:ca:e2:ce:55:
                    dd:7e:35:4c:da:c9:3f:fb:f5:c2:ed:95:61:6a:ea:
                    10:07:29:c3:3b:0c:95:6c:96:ca:f5:51:46:db:7a:
                    f2:69:59:e1:2d:6f:b0:0e:8f:ec:17:85:19:a1:b4:
                    57:df:9c:d2:56:89:6e:3b:5c:09:2d:74:f0:eb:ee:
                    a6:c2:b3:f7:52:79:b2:17:0c:d0:e4:56:e0:f8:36:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:3F:8F:86:6D:D7:81:33:8F:8E:B8:16:77:53:88:8C:67:8B:A5
            X509v3 Authority Key Identifier:
                keyid:28:7C:F6:8F:66:1F:D1:01:E0:BA:CE:16:60:D3:CE:31:81:A8:8F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c619c73c049b2f8bbf3acabea01c01e066fd9b63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/da12cd694ecdae20fddefedda704d13d4c85182d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a66cca1-e74f-4dc9-b7dc-c4463f217f03/c619c73c049b2f8bbf3acabea01c01e066fd9b63.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.100.0/22
                IPv6:
                  2803:8010::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:ae:8e:23:94:df:4a:b8:b0:d0:4f:13:dd:4e:26:32:28:
         ae:be:05:51:5d:26:a7:34:5b:0a:f7:03:d7:bb:c6:a9:cf:a8:
         a6:e5:21:b5:2a:90:2d:7d:fe:73:4b:df:d1:4f:0a:76:6f:85:
         80:fd:06:7c:74:af:cc:83:dc:2f:44:e2:48:b1:99:cb:16:46:
         c7:eb:d9:17:24:27:c1:6e:91:53:70:de:4a:75:de:a5:15:fb:
         7b:18:03:08:b4:0f:57:58:ee:4a:47:3a:58:78:ae:a4:6b:9e:
         58:b4:46:a7:65:4f:94:17:b3:21:4a:9e:e1:d8:e7:f3:22:9f:
         df:e0:d3:a5:eb:41:f1:83:b9:b3:2e:b8:14:87:23:da:9c:10:
         fe:b7:fd:26:74:5a:46:eb:4c:14:cf:0d:e2:30:e8:84:cb:59:
         b2:65:1e:73:1f:db:81:df:77:13:b0:3d:a4:d8:a8:b8:99:bc:
         6a:68:71:c5:cc:f6:cf:18:6f:71:e8:71:1a:04:54:da:e8:c8:
         bf:7f:09:8c:66:75:dd:e8:e8:2a:22:04:8c:b3:88:14:c9:9d:
         28:90:73:9b:e4:b9:40:c1:d0:a7:05:74:7c:28:8d:b9:23:40:
         e8:a9:64:45:e8:b8:e4:9b:e0:88:3d:2e:1b:61:fc:2b:d0:19:
         c5:fa:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----