Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/537aa2f55646519558771b53dfe76507846ba869.roa
File:                     537aa2f55646519558771b53dfe76507846ba869.roa (raw, json)
Hash identifier:          fijuNHCC2o8ECBXnx4Jh/rbTcfObo7nW9deQ/T8RJoc=
Subject key identifier:   04:9B:FD:4A:94:E8:9A:CC:D1:AB:D6:52:A4:63:C3:9F:5D:92:76:5E
Certificate issuer:       /CN=ae449b0c47ca297ad20bb51916e2d92c6d34ac38
Certificate serial:       010C4F
Authority key identifier: 66:F2:2F:1D:86:F9:43:C6:40:95:45:9E:3C:38:45:7A:9C:FF:B4:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae449b0c47ca297ad20bb51916e2d92c6d34ac38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/537aa2f55646519558771b53dfe76507846ba869.roa
Signing time:             Mon 14 Aug 2023 13:43:55 +0000
ROA not before:           Sun 13 Aug 2023 13:43:55 +0000
ROA not after:            Thu 14 Aug 2025 13:43:55 +0000
asID:                     265697
IP address blocks:        45.6.132.0/22 maxlen: 24
                          2803:49c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68687 (0x10c4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae449b0c47ca297ad20bb51916e2d92c6d34ac38
        Validity
            Not Before: Aug 13 13:43:55 2023 GMT
            Not After : Aug 14 13:43:55 2025 GMT
        Subject: CN=537aa2f55646519558771b53dfe76507846ba869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:42:d2:ad:77:e2:d7:d7:b2:cf:1e:86:1c:
                    4f:6b:49:87:fe:4f:87:a7:19:b3:c9:46:c3:1e:c5:
                    dc:6e:9f:07:a1:b5:d3:16:13:6d:0d:57:fb:e3:45:
                    d7:b2:4a:be:49:41:67:23:a1:7c:42:9f:9c:c9:ef:
                    cc:02:2f:b7:2c:b6:8f:65:02:ac:0c:45:03:aa:2d:
                    44:77:99:13:d6:ec:67:04:12:39:45:35:09:b1:c1:
                    8d:99:90:89:22:d0:db:49:e3:3a:77:45:71:e4:f3:
                    08:2c:0d:d6:c9:08:88:98:38:89:71:b1:39:a0:bd:
                    b9:e2:37:ec:cd:ff:09:44:50:18:a2:13:9a:96:05:
                    ca:12:7b:38:3b:0a:f9:a7:88:9a:8d:70:fc:24:bf:
                    ec:46:04:7f:6e:4a:f9:9a:9f:71:20:e3:d1:eb:0d:
                    26:7e:3e:a6:b5:3f:af:3a:67:35:7c:6b:2e:cb:a2:
                    fe:66:c6:b9:69:b8:44:68:47:d1:a2:0e:20:24:44:
                    f7:04:d8:8c:65:f1:dd:aa:88:70:a0:63:13:71:99:
                    9d:9a:55:02:88:d3:78:6f:05:b6:e4:36:3d:ed:8b:
                    25:90:6f:f5:83:ce:1a:86:66:2f:60:02:08:8d:bd:
                    00:77:7b:62:cc:f1:12:97:eb:dc:f6:f1:64:fe:ba:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:FD:4A:94:E8:9A:CC:D1:AB:D6:52:A4:63:C3:9F:5D:92:76:5E
            X509v3 Authority Key Identifier:
                keyid:66:F2:2F:1D:86:F9:43:C6:40:95:45:9E:3C:38:45:7A:9C:FF:B4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae449b0c47ca297ad20bb51916e2d92c6d34ac38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/537aa2f55646519558771b53dfe76507846ba869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24e2da27-0407-46d5-9bc1-9abb195aca53/ae449b0c47ca297ad20bb51916e2d92c6d34ac38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.132.0/22
                IPv6:
                  2803:49c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:97:f7:1b:64:96:45:45:a0:46:e5:04:80:08:e8:26:c5:
         2a:22:ad:4d:5f:d9:d2:73:b6:e2:f1:1f:2c:17:02:42:be:d9:
         2c:45:f9:e0:8e:7f:91:cd:fa:28:03:19:e2:63:25:be:45:81:
         cc:12:d2:38:fc:8b:72:bf:c0:e0:4d:47:f3:fb:4e:04:c7:fd:
         92:03:17:6d:8d:aa:fc:9b:b9:f2:b3:ac:9c:59:af:a8:5e:03:
         40:92:51:27:75:cb:ad:28:bd:76:f9:89:e9:79:df:85:bb:27:
         4a:12:2e:4d:d4:32:31:ae:08:4b:71:bc:80:b3:11:1f:26:b0:
         be:45:17:d2:d6:8e:7f:16:e5:56:ea:ce:ad:fa:9b:6a:63:0a:
         11:c5:b2:a2:8f:b7:1d:89:9b:fb:4e:c7:5a:a6:9a:3c:1d:34:
         1d:bf:0e:59:c2:07:66:55:f4:d3:44:f6:fa:b1:98:80:03:1a:
         b5:0f:cf:67:28:a5:3e:f8:8a:aa:84:56:97:61:77:22:80:36:
         03:dd:db:45:e3:3c:97:29:93:25:7a:27:d7:8b:3b:b3:b5:c9:
         a5:a4:f5:7e:c9:1b:76:20:75:51:c1:9c:59:c3:6c:d5:ca:4c:
         33:ff:72:80:7a:e1:3e:7d:36:4f:e0:e5:fe:31:87:74:00:5a:
         a7:4a:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----