Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/f20e0d43c7846a13fe7a7d95dbfd9a971391cbb5.roa
File:                     f20e0d43c7846a13fe7a7d95dbfd9a971391cbb5.roa (raw, json)
Hash identifier:          dud6Bh80Qjk4lK5812KTAysk7qJ1u9xjceXrIvnPWGg=
Subject key identifier:   1A:81:80:9A:3A:19:28:81:68:CD:17:5E:25:E6:F0:54:97:44:A5:B6
Certificate issuer:       /CN=debeb6294e93216759f5a631a2f8b9604e220b81
Certificate serial:       24570A
Authority key identifier: 89:3B:59:E1:36:E8:7C:79:32:B5:E8:07:B1:F4:31:71:98:72:08:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/debeb6294e93216759f5a631a2f8b9604e220b81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/f20e0d43c7846a13fe7a7d95dbfd9a971391cbb5.roa
Signing time:             Mon 30 Oct 2023 15:28:15 +0000
ROA not before:           Mon 30 Oct 2023 15:28:15 +0000
ROA not after:            Thu 30 Oct 2025 15:28:15 +0000
asID:                     266707
IP address blocks:        45.229.248.0/22 maxlen: 24
                          2803:3d20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381578 (0x24570a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=debeb6294e93216759f5a631a2f8b9604e220b81
        Validity
            Not Before: Oct 30 15:28:15 2023 GMT
            Not After : Oct 30 15:28:15 2025 GMT
        Subject: CN=f20e0d43c7846a13fe7a7d95dbfd9a971391cbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:d0:e9:c5:6d:0f:bb:50:cd:a4:51:ba:76:
                    6d:e7:f1:e3:d3:5b:36:1d:34:3b:51:db:52:58:e5:
                    fe:f5:6c:35:2b:c3:39:b3:2f:06:2a:fb:b3:33:1b:
                    00:00:fb:bc:e8:27:c1:b3:25:30:10:33:ef:ec:b3:
                    e7:33:52:12:27:f4:cf:7f:4b:16:96:16:f3:30:62:
                    2c:39:e5:91:f9:ff:a5:eb:92:c5:72:47:b5:2c:12:
                    41:8b:d7:1e:04:b9:2b:e5:84:88:7c:d3:c4:b5:bf:
                    96:30:32:06:62:87:39:e7:4a:23:fc:d0:97:93:4d:
                    53:4e:c3:fb:b9:e5:70:ac:e1:09:fc:2b:9d:ea:2e:
                    5b:4f:e0:86:a4:2e:2a:df:82:97:cb:64:51:94:2d:
                    67:a6:00:a8:8c:8f:3e:60:46:63:d7:1e:18:85:f1:
                    33:29:c8:fd:11:9d:9f:4b:47:23:84:a8:39:8e:b1:
                    13:46:af:76:a3:a6:6e:b8:67:46:26:88:7e:32:d8:
                    94:75:90:3b:53:e7:7d:d2:7a:3c:97:de:d1:99:0a:
                    78:26:ad:77:ac:be:ac:1d:f2:67:8d:6b:6d:3e:28:
                    f0:83:68:bf:2c:41:44:13:15:23:31:82:13:3c:64:
                    e7:6d:88:47:ad:36:06:9f:0d:f4:f4:1e:a5:5a:d7:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:80:9A:3A:19:28:81:68:CD:17:5E:25:E6:F0:54:97:44:A5:B6
            X509v3 Authority Key Identifier:
                keyid:89:3B:59:E1:36:E8:7C:79:32:B5:E8:07:B1:F4:31:71:98:72:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/debeb6294e93216759f5a631a2f8b9604e220b81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/f20e0d43c7846a13fe7a7d95dbfd9a971391cbb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c036d4d-75f4-42ab-abce-a358edf11f4b/debeb6294e93216759f5a631a2f8b9604e220b81.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.248.0/22
                IPv6:
                  2803:3d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:92:ed:78:cb:98:f1:39:4a:f1:13:13:15:5a:06:a1:87:
         bc:f2:23:ba:f2:70:80:1e:81:de:58:1a:1f:c7:20:21:3d:86:
         d6:cc:89:b1:26:00:24:44:66:d1:f4:a1:aa:93:d2:a3:61:04:
         4f:01:6b:12:25:1c:56:f1:72:52:87:d7:d3:69:9d:9c:84:72:
         52:19:26:11:5d:58:32:86:4a:cb:5f:a6:4a:2b:b8:bc:02:7c:
         80:04:0f:a3:47:78:68:69:fe:dd:30:2e:c8:2c:bd:e5:5e:fe:
         e9:f6:fc:af:14:14:6a:b7:fc:f4:93:67:bc:8b:67:91:ff:29:
         89:1e:45:89:06:4b:04:08:cd:5f:92:25:4e:48:a1:cd:ed:21:
         87:5d:8e:6c:79:63:12:0b:ac:9e:88:21:f2:54:12:37:af:d1:
         a4:c9:9f:1d:2e:76:66:d7:d7:87:e6:19:7e:f4:ad:5d:39:9a:
         25:da:8b:20:e3:2d:b5:91:40:53:b2:a7:74:75:d1:7a:d2:b4:
         f8:83:72:6e:39:34:5a:46:04:d4:43:d8:6c:ae:d2:2e:ca:dc:
         e9:fa:98:5c:b0:7f:05:5e:8e:c0:9c:71:6c:45:76:0e:70:7e:
         c7:de:55:a7:63:09:e8:ab:d1:a8:a8:4b:da:1c:df:3d:06:49:
         d2:55:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----