Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/60b2c2dd827eaae5b1ec82fb07b8a2bf126b19c1.roa
File:                     60b2c2dd827eaae5b1ec82fb07b8a2bf126b19c1.roa (raw, json)
Hash identifier:          tAV5ze8tPbo0Nh1nR2mEm/b2I15l1KHNNtcypFlIV90=
Subject key identifier:   AA:7E:4D:49:02:B4:2E:CC:75:02:93:B5:C2:1F:20:9F:DD:5B:0D:14
Certificate issuer:       /CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
Certificate serial:       0D1BE9
Authority key identifier: 9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/60b2c2dd827eaae5b1ec82fb07b8a2bf126b19c1.roa
Signing time:             Mon 27 Nov 2023 17:14:36 +0000
ROA not before:           Mon 27 Nov 2023 17:14:36 +0000
ROA not after:            Thu 27 Nov 2025 17:14:36 +0000
asID:                     269814
IP address blocks:        45.186.24.0/22 maxlen: 22
                          45.186.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859113 (0xd1be9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
        Validity
            Not Before: Nov 27 17:14:36 2023 GMT
            Not After : Nov 27 17:14:36 2025 GMT
        Subject: CN=60b2c2dd827eaae5b1ec82fb07b8a2bf126b19c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9b:a6:77:95:c3:64:70:95:02:6f:be:d8:d3:
                    97:a3:77:b9:73:06:2d:e1:19:96:25:db:f4:09:7f:
                    7c:cd:b7:47:e0:a6:1b:38:f9:e1:9d:19:f5:67:52:
                    9d:a3:99:c4:13:1a:5c:21:7d:fb:99:24:94:33:f5:
                    d5:b5:b9:e9:69:b2:83:34:2b:bb:29:9c:70:61:f4:
                    b9:77:96:3a:be:cd:09:7e:93:63:94:b8:61:03:2c:
                    4d:d0:b1:43:d4:42:e6:a0:90:37:27:11:a8:9e:d4:
                    4e:00:09:87:46:eb:6a:93:fd:da:bb:99:95:3a:00:
                    48:0f:2e:74:2f:ef:f6:c9:d7:a1:0a:82:9f:f1:05:
                    63:cf:f0:29:2e:44:36:a4:35:da:80:90:2c:f3:04:
                    e0:54:7b:6c:f2:58:5c:f6:b4:90:f5:08:2e:78:1f:
                    7c:bb:9f:ad:45:b4:d8:09:8b:12:30:b2:49:73:07:
                    24:5c:73:5f:d7:c5:50:8c:39:16:af:8d:f9:ac:cc:
                    4e:6f:de:cd:1f:63:3e:74:85:46:cd:9f:98:e5:27:
                    47:2a:77:37:8a:06:d5:0f:bd:4b:65:09:bc:46:ef:
                    1a:d5:91:96:95:81:6f:5c:4b:a5:0e:23:87:82:5a:
                    e1:1a:b3:24:cf:e4:2c:2f:9a:54:4f:b9:63:cc:e5:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:4D:49:02:B4:2E:CC:75:02:93:B5:C2:1F:20:9F:DD:5B:0D:14
            X509v3 Authority Key Identifier:
                keyid:9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/60b2c2dd827eaae5b1ec82fb07b8a2bf126b19c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:41:ae:57:10:c8:af:84:d1:fe:c4:31:50:b1:d7:47:55:61:
         2e:e6:55:4d:02:b3:c4:56:a6:e6:3e:08:e8:51:80:06:87:c2:
         fe:97:aa:c3:a8:66:83:da:89:19:59:d7:67:9a:7e:a4:cd:10:
         ca:04:f2:d0:b7:75:7b:2a:87:9b:f5:9d:33:c0:3a:ae:13:fa:
         fb:3c:5b:97:6e:22:2e:eb:b8:eb:0a:b0:9c:30:96:a6:8f:cd:
         c2:92:4d:31:03:2c:83:7b:79:99:78:6f:8e:f2:45:e9:91:43:
         b9:85:95:ec:b1:09:61:27:93:8c:b1:86:0b:d1:cc:9f:fd:8b:
         11:1f:fd:fd:77:a8:78:95:01:0b:94:7a:66:5a:03:33:c0:20:
         31:61:25:a4:1d:21:a2:41:a8:af:a6:56:19:7f:7b:05:05:23:
         8a:60:47:94:8b:49:f3:19:6e:4b:8b:bc:50:5b:2a:e9:f7:09:
         cb:74:76:53:10:69:4d:4e:a8:54:55:2b:89:8c:f9:30:af:c6:
         5d:aa:99:15:d0:09:c2:2d:f9:9c:64:7c:90:7c:6d:84:73:1b:
         b3:37:69:88:ce:f8:e5:c9:d8:ab:eb:9e:7f:82:e5:d1:cc:24:
         5d:f7:2b:d9:00:25:b1:fd:5e:c5:3c:32:6a:71:f6:03:e2:ad:
         b3:84:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----