Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/50396610447765c8dd876bfc38093f3232ffe5b7.roa
File:                     50396610447765c8dd876bfc38093f3232ffe5b7.roa (raw, json)
Hash identifier:          wGUMOGPzD0CAQ8AXHdXAIYJJ1Pv5YTfLu8pA+s1wlp8=
Subject key identifier:   29:4B:F8:FE:C5:6E:A5:88:90:BC:30:D1:C0:5E:3A:10:90:6E:B4:BD
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       12C590
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/50396610447765c8dd876bfc38093f3232ffe5b7.roa
Signing time:             Thu 11 Apr 2024 08:30:00 +0000
ROA not before:           Thu 11 Apr 2024 08:30:00 +0000
ROA not after:            Sat 11 Apr 2026 08:30:00 +0000
asID:                     265572
IP address blocks:        45.174.59.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230224 (0x12c590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 11 08:30:00 2024 GMT
            Not After : Apr 11 08:30:00 2026 GMT
        Subject: CN=50396610447765c8dd876bfc38093f3232ffe5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:94:c9:76:1c:7e:55:52:92:68:5b:c5:85:
                    61:4c:33:3c:84:dd:4e:bb:84:e5:89:02:a9:95:5b:
                    61:0f:bf:13:b1:55:c5:f3:4e:c5:36:ef:76:36:4e:
                    9c:ff:f1:33:6f:83:b8:31:e6:e6:db:33:8f:3b:ce:
                    93:7e:ef:b5:6d:ad:3d:1e:e8:18:8a:27:c1:0c:26:
                    a1:47:75:28:5e:f4:4d:b7:ae:a7:93:4b:ff:90:94:
                    22:6f:b1:60:c6:e5:1f:4d:fa:d2:86:4b:bf:6d:98:
                    ab:72:1b:9e:32:db:1b:b5:d5:90:5a:21:7d:48:ce:
                    36:b1:80:57:c8:68:af:21:20:f9:b4:49:ed:2f:da:
                    98:b8:66:49:e4:dc:eb:18:7b:e8:37:f4:4c:11:26:
                    64:86:69:99:cc:91:fb:43:c9:b1:8d:fe:ac:9d:ee:
                    20:97:24:0b:f9:e0:1a:ac:c2:00:96:dc:23:80:c3:
                    9f:9e:b1:70:84:19:98:d3:91:7e:20:9b:1c:3d:f8:
                    41:29:17:ce:d5:a6:6f:92:30:14:74:2c:8e:79:ef:
                    88:f1:08:29:d0:2c:d0:18:90:d9:f5:f8:8e:8d:f9:
                    b2:2d:bf:ab:88:df:f2:67:d7:e3:61:39:00:a3:c6:
                    fd:ac:ef:95:15:57:73:78:d9:68:3b:2d:8a:51:d4:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4B:F8:FE:C5:6E:A5:88:90:BC:30:D1:C0:5E:3A:10:90:6E:B4:BD
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/50396610447765c8dd876bfc38093f3232ffe5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:10:fe:50:33:46:38:b1:6d:d2:37:81:e9:73:8c:c5:18:c2:
         dc:89:8b:2a:99:1c:50:0d:a1:47:dc:f4:b0:0c:f8:de:b7:59:
         97:98:01:8b:a4:2c:d3:d9:cc:4f:8d:d2:04:93:03:5b:98:e2:
         9c:fc:ba:5b:42:70:c3:14:05:85:69:68:87:af:80:f7:63:71:
         71:fb:40:f7:6f:93:aa:a0:28:39:36:7c:e4:26:20:90:c3:f6:
         27:08:45:8a:82:86:48:f4:e6:ef:77:44:7f:fa:80:fc:3c:45:
         68:73:e8:e4:22:0e:fe:ca:5e:46:1c:bd:05:44:4a:51:82:8a:
         a1:51:90:23:71:e1:9d:ea:d8:04:d4:79:64:c7:a7:53:24:17:
         dc:d6:c3:aa:19:8f:25:a8:bb:8d:fd:a3:07:8f:0c:7a:c6:74:
         83:20:95:9f:58:01:fe:13:ee:8e:e1:28:3b:17:d3:3b:0e:c6:
         16:49:aa:69:c2:08:81:a3:86:c0:ae:85:df:f5:45:57:2d:3b:
         e2:d9:5f:92:56:6e:59:0f:d7:80:25:aa:e3:c1:1b:d9:bf:2f:
         1a:7f:58:73:aa:c2:da:fe:9b:24:24:7b:6a:bd:56:49:59:69:
         61:1d:df:05:fc:91:3b:b2:67:2e:23:fd:2b:f1:b4:84:37:1d:
         d9:47:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----