Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/055eec246ba737076fa09c987164c80f57b9b191.roa
File:                     055eec246ba737076fa09c987164c80f57b9b191.roa (raw, json)
Hash identifier:          3vpWTVXHfd+ND35l8H3ESG3qpuoeKdbZoWxWXq6nkzk=
Subject key identifier:   5A:31:2D:56:14:C8:C4:50:C7:E1:0D:7E:E7:2B:F8:CF:06:AA:65:35
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       12C943
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/055eec246ba737076fa09c987164c80f57b9b191.roa
Signing time:             Thu 11 Apr 2024 08:30:04 +0000
ROA not before:           Thu 11 Apr 2024 08:30:04 +0000
ROA not after:            Sat 11 Apr 2026 08:30:04 +0000
asID:                     265572
IP address blocks:        45.174.58.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231171 (0x12c943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 11 08:30:04 2024 GMT
            Not After : Apr 11 08:30:04 2026 GMT
        Subject: CN=055eec246ba737076fa09c987164c80f57b9b191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:03:e8:fe:e8:28:30:df:41:19:80:98:91:
                    1b:76:b3:36:3b:73:01:5f:ed:d5:ee:6f:28:fa:86:
                    a6:c1:16:7a:c8:01:95:ab:a2:21:d7:6e:b6:2f:ae:
                    b0:f6:63:3f:1e:12:4a:e8:0a:74:23:6d:54:8b:b6:
                    95:04:7e:45:30:5d:49:82:24:67:3b:36:37:07:c0:
                    ef:d0:b0:4f:29:54:db:52:9d:86:2d:5f:29:16:b1:
                    1a:d5:a7:bc:81:29:e2:ae:4f:86:44:0e:09:d6:ec:
                    13:e0:5d:dc:c8:44:33:81:55:db:ae:3a:e3:a0:0e:
                    05:e6:2c:51:98:a9:9e:ce:46:4d:88:79:cb:90:68:
                    89:71:9a:c4:7d:91:5d:63:15:a7:c8:e5:23:63:41:
                    55:cd:38:19:1b:5f:14:12:e8:81:73:b7:6b:22:be:
                    22:87:6a:b2:cb:c2:0f:eb:7f:04:0f:55:12:47:ef:
                    bc:ee:5a:32:e1:65:0a:a0:90:4a:69:a3:85:6d:28:
                    13:1c:da:12:55:f7:20:e7:1b:a1:c8:49:57:70:1d:
                    92:73:2a:17:cb:b1:58:51:de:17:e4:bf:f7:e1:22:
                    73:8c:df:fe:5b:34:f0:b3:29:75:f8:7b:33:b3:0d:
                    1e:df:83:91:2a:17:62:2d:9c:23:63:fb:74:c6:c7:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:31:2D:56:14:C8:C4:50:C7:E1:0D:7E:E7:2B:F8:CF:06:AA:65:35
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/055eec246ba737076fa09c987164c80f57b9b191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:d9:1b:29:cf:e5:99:7d:49:ef:ec:9f:59:11:06:8c:c2:
         da:42:2e:de:56:4e:05:d3:61:c8:84:66:e0:40:b2:11:6c:fa:
         a3:e0:af:b6:07:bb:37:c7:5d:0e:92:8b:44:aa:e8:27:0f:3f:
         f1:c8:c7:95:4e:49:6b:5b:98:ad:03:09:ca:fc:4c:2e:3a:67:
         a5:3b:c6:fb:f8:27:53:7a:1f:6e:d6:4b:28:bb:a9:bd:8d:2c:
         58:10:67:00:d7:d9:a8:db:45:3a:f0:24:e6:d9:37:b7:6c:09:
         ec:16:a3:92:96:84:74:93:50:46:f1:2e:9d:6e:b3:77:40:c5:
         41:fb:8a:be:79:73:3f:b2:86:05:91:e1:a4:8b:74:70:84:ff:
         d6:e2:1d:f5:95:44:05:08:aa:3d:71:2b:4f:e6:07:0a:6a:c3:
         c3:0f:00:a1:44:51:ff:bb:db:25:f6:4d:a0:2e:08:d2:54:09:
         39:e2:bf:bc:3c:cc:88:18:93:69:d3:1f:98:66:5a:2c:18:28:
         87:d7:96:c6:27:25:b9:43:a7:87:e6:30:db:b6:50:63:47:6e:
         36:e8:b5:c4:c0:64:ed:92:e4:6a:a1:0d:fd:b4:cd:ee:ba:32:
         a9:ed:c2:73:5e:73:34:0e:a7:a8:2b:f7:4c:f4:08:89:9e:1b:
         a7:87:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----