Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/68f8974cb719bcca1cecca5efb0497f6f51e8737.roa
File:                     68f8974cb719bcca1cecca5efb0497f6f51e8737.roa (raw, json)
Hash identifier:          KGZULEBNdD/yXkV8Jft4M4HvdJWTl16gVkdGAfceszU=
Subject key identifier:   D4:04:21:72:83:C4:D9:00:4B:66:BC:01:29:CE:62:69:ED:FD:C0:5A
Certificate issuer:       /CN=da0a5bf2a5328643f1d2d18258ecc892718a8a35
Certificate serial:       149496
Authority key identifier: 0A:F2:B9:BA:95:A4:D2:3B:95:3C:B3:67:5C:8D:FC:38:95:EF:6F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0a5bf2a5328643f1d2d18258ecc892718a8a35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/68f8974cb719bcca1cecca5efb0497f6f51e8737.roa
Signing time:             Sun 25 Jun 2023 14:56:11 +0000
ROA not before:           Sat 24 Jun 2023 14:56:11 +0000
ROA not after:            Wed 25 Jun 2025 14:56:11 +0000
asID:                     267851
IP address blocks:        45.174.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348758 (0x149496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0a5bf2a5328643f1d2d18258ecc892718a8a35
        Validity
            Not Before: Jun 24 14:56:11 2023 GMT
            Not After : Jun 25 14:56:11 2025 GMT
        Subject: CN=68f8974cb719bcca1cecca5efb0497f6f51e8737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:34:87:11:30:45:c1:84:9b:f3:8c:5c:9b:
                    e7:4b:91:b8:3e:bf:68:b9:81:1f:b7:06:1b:6f:a3:
                    be:c4:3b:55:cb:7f:67:de:2c:be:ef:2b:60:83:a2:
                    15:64:51:3e:eb:7f:7d:17:1b:a7:ed:7f:d5:08:94:
                    d1:57:d4:07:4d:2b:a5:27:c3:a7:f1:e2:ac:21:d4:
                    18:5c:83:0b:2b:0a:df:51:41:81:0a:e8:a3:02:da:
                    40:d7:e0:01:10:42:73:bc:04:6f:dd:1f:0f:c5:31:
                    4c:5f:3b:a6:2c:10:8c:11:31:a8:ad:51:45:05:22:
                    5e:ba:26:be:76:6f:fc:35:bd:8d:ee:ed:82:98:b1:
                    57:63:a6:16:06:d0:33:20:0d:55:38:0e:6f:bc:e6:
                    c8:0c:7d:77:c7:1b:cd:f2:75:ab:b9:71:0f:9d:c1:
                    00:32:5b:0e:74:f8:11:1e:8d:92:fd:69:50:0d:68:
                    cf:ac:40:6a:f0:58:7a:29:c8:c4:ee:1f:8a:6d:b0:
                    8c:17:c1:24:4e:19:bb:d9:c8:b4:9d:2d:ef:7c:58:
                    64:91:08:fb:90:2c:97:a8:c4:4c:9d:37:84:47:46:
                    34:cb:53:ae:26:4d:ea:73:e2:92:66:06:63:84:33:
                    7a:5f:00:55:54:18:25:32:dc:d8:c6:d2:8c:7a:9c:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:21:72:83:C4:D9:00:4B:66:BC:01:29:CE:62:69:ED:FD:C0:5A
            X509v3 Authority Key Identifier:
                keyid:0A:F2:B9:BA:95:A4:D2:3B:95:3C:B3:67:5C:8D:FC:38:95:EF:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0a5bf2a5328643f1d2d18258ecc892718a8a35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/68f8974cb719bcca1cecca5efb0497f6f51e8737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25888dcf-8f65-4751-9b7e-dbb617665707/da0a5bf2a5328643f1d2d18258ecc892718a8a35.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:64:64:72:02:2c:b5:f8:09:71:91:0e:fc:a8:cc:15:fe:
         3a:9d:f0:30:ed:2d:9f:4e:c9:55:40:5e:ce:cc:02:2d:d7:de:
         f0:7b:be:3c:b1:17:a7:8e:51:80:be:ed:f0:25:37:98:4f:a2:
         1b:9b:8e:38:4f:2a:6a:96:0d:9d:68:e6:c4:fc:ab:2c:38:ea:
         b2:ca:c0:2c:e9:e3:ac:e0:60:fa:83:f3:38:da:e1:d1:91:cc:
         93:e0:8e:68:15:c8:d8:23:df:65:f9:c9:6d:a9:78:8b:be:07:
         fa:dc:77:41:d1:6b:e7:3d:82:88:d6:0d:4d:31:88:b8:04:4e:
         d0:62:3f:e2:f4:ae:77:2c:91:bd:f7:bc:77:57:93:a2:2d:f0:
         9d:6f:92:f7:bb:e3:cb:8b:e9:11:1b:a2:9e:25:ef:a6:c4:8f:
         8d:fd:21:78:cd:79:cf:b4:6b:71:de:18:0f:14:d0:47:37:88:
         86:be:a1:3a:21:4d:68:ec:d0:ba:ba:f9:d0:56:8f:68:1c:03:
         ad:ad:01:f1:55:bb:6d:5b:6e:b5:31:3d:34:35:3e:aa:dc:d4:
         13:87:73:61:ca:57:29:e3:ec:36:e4:fd:b1:98:11:b1:dd:d3:
         72:ba:5a:5e:9b:48:2b:de:d1:08:b5:2c:36:98:5d:d1:65:26:
         6c:7d:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----