Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/f1de369804b6740c7d4289d0295c5d5d6d891858.roa
File:                     f1de369804b6740c7d4289d0295c5d5d6d891858.roa (raw, json)
Hash identifier:          ArvEHQUpAcoQ0ivW6LeP+7cy5TyMqNxAQyWiHtMD314=
Subject key identifier:   DE:63:B2:3D:AC:A9:67:D3:C2:BF:BE:51:B0:9E:FE:9B:BE:76:F5:BE
Certificate issuer:       /CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Certificate serial:       0D3DF2
Authority key identifier: E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/f1de369804b6740c7d4289d0295c5d5d6d891858.roa
Signing time:             Thu 28 Dec 2023 14:28:15 +0000
ROA not before:           Thu 28 Dec 2023 14:28:15 +0000
ROA not after:            Sun 28 Dec 2025 14:28:15 +0000
asID:                     265842
IP address blocks:        45.225.40.0/23 maxlen: 24
                          45.224.203.0/24 maxlen: 24
                          2803:9220::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867826 (0xd3df2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
        Validity
            Not Before: Dec 28 14:28:15 2023 GMT
            Not After : Dec 28 14:28:15 2025 GMT
        Subject: CN=f1de369804b6740c7d4289d0295c5d5d6d891858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:e6:b9:8b:cc:1b:55:77:4d:43:64:9b:a4:
                    c8:f2:f0:97:e6:95:0c:38:f0:b4:fa:3f:9e:4b:18:
                    5c:38:f2:b0:f0:ce:a1:a3:6a:20:09:b9:5e:1d:29:
                    3b:68:7f:7d:30:62:83:7c:94:89:39:a9:34:b5:b8:
                    ad:da:64:fd:26:64:bf:ef:47:71:f6:a4:6f:e6:15:
                    57:22:ab:89:cc:b0:4a:5f:a5:e9:d6:ca:84:fe:9e:
                    bc:8a:0e:70:80:84:ee:1a:5b:10:20:60:cc:d3:ec:
                    4d:89:06:ec:3b:2b:c1:c5:71:40:1c:17:3a:49:79:
                    a7:a6:ea:72:27:b0:20:12:b9:a6:c3:51:0b:3b:ef:
                    22:4a:ce:3e:1b:f1:da:b6:61:5b:2d:40:0e:20:0e:
                    ed:e5:90:10:9b:f0:e5:9f:7a:07:50:87:90:c9:01:
                    c6:2f:29:47:24:42:dc:b9:73:47:1c:4c:39:af:28:
                    83:84:59:b6:27:eb:ac:ee:88:0f:f4:b3:53:1c:1e:
                    71:88:7e:61:91:4e:c3:d9:2e:6e:e2:84:44:25:f7:
                    17:bd:54:a5:cd:eb:6f:d4:f4:28:97:74:a6:41:b0:
                    7f:42:9d:04:8d:47:7d:88:eb:ff:df:0e:e1:73:6d:
                    05:07:78:e9:9c:cd:34:a8:ca:7f:a1:4b:b1:00:d0:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:B2:3D:AC:A9:67:D3:C2:BF:BE:51:B0:9E:FE:9B:BE:76:F5:BE
            X509v3 Authority Key Identifier:
                keyid:E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/f1de369804b6740c7d4289d0295c5d5d6d891858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.203.0/24
                  45.225.40.0/23
                IPv6:
                  2803:9220::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:34:5b:44:7b:b6:f6:7a:30:5b:8f:7d:c8:33:b3:3c:d1:4d:
         7b:95:0e:e2:a1:39:3b:bd:21:c6:ba:f6:3b:a1:0c:0b:6e:12:
         ff:89:07:a9:1d:ee:b5:b5:05:d0:d9:a6:09:bb:f3:80:dd:88:
         82:68:49:70:1c:fb:ff:be:71:f0:18:30:e0:04:97:e9:9d:15:
         74:0f:0a:0b:0c:a0:70:3f:22:78:52:c4:8c:95:17:ab:e3:97:
         6f:3e:9d:3a:3b:0d:c4:98:56:c7:ee:8d:16:bd:39:5b:67:70:
         71:61:10:70:b0:93:e8:e5:41:c5:2e:e0:02:23:71:0b:aa:70:
         9c:01:8d:9e:09:ab:79:09:35:e6:a5:ce:cd:5d:e0:8d:5b:3d:
         56:e0:8e:de:b1:49:ad:3a:a0:dc:be:84:c7:ec:e5:2c:57:cb:
         c7:f0:97:63:86:0c:ab:65:d2:a3:22:57:8e:eb:b5:22:e3:47:
         c1:d4:de:2a:0d:3c:c4:65:e8:1b:9b:f8:93:b4:f5:7d:23:1b:
         d4:5e:db:0b:fa:da:72:ec:a7:89:87:ae:58:7f:ca:d5:29:c8:
         08:23:f6:b3:81:e5:a6:a8:0e:62:7e:a9:79:c2:ec:36:64:79:
         b1:a0:35:f4:48:57:6c:44:ff:91:84:dd:ad:8b:bc:5d:49:ae:
         91:01:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----