Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa
File:                     eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa (raw, json)
Hash identifier:          eP5b8cuaTZaBsOEd5rvlA9fqw8TxoYZ0VKqJFZ6yf/E=
Subject key identifier:   DE:21:4B:76:AC:B2:76:B8:3A:D2:00:AD:ED:57:B7:61:52:71:A1:01
Certificate issuer:       /CN=5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8
Certificate serial:       10C39B
Authority key identifier: D8:DD:25:F7:EF:D2:53:8D:E0:CF:A6:E3:9A:85:2B:12:6B:9E:30:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa
Signing time:             Wed 13 Sep 2023 20:13:40 +0000
ROA not before:           Tue 12 Sep 2023 20:13:39 +0000
ROA not after:            Sat 13 Sep 2025 20:13:39 +0000
asID:                     28007
IP address blocks:        45.229.32.0/22 maxlen: 24
                          2803:8d20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098651 (0x10c39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8
        Validity
            Not Before: Sep 12 20:13:39 2023 GMT
            Not After : Sep 13 20:13:39 2025 GMT
        Subject: CN=eb8f80eee3f3d92d1e202264f9e7ae398745d6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:68:af:e8:d2:b7:e6:12:1a:2f:b5:b2:79:
                    e1:27:8f:30:a2:9b:d2:6c:b8:b0:20:e0:43:82:61:
                    eb:63:df:33:f0:dc:27:c1:83:28:5d:2a:4b:4d:87:
                    83:89:53:67:26:ef:33:29:87:16:99:32:1c:3d:76:
                    f1:a4:0a:a1:4b:11:a0:b3:6a:cc:91:a5:47:21:48:
                    51:aa:ff:5f:9f:b5:77:a8:ee:37:98:28:e7:e0:78:
                    c5:6d:be:88:81:43:cf:c7:fd:60:a4:8b:df:35:b8:
                    76:97:42:68:b0:78:d0:36:3b:aa:38:13:d3:8e:14:
                    c9:b8:c2:a3:9d:cd:fd:80:2a:72:cc:7b:ba:d7:30:
                    d6:54:bd:ee:2d:1a:c5:db:0a:86:7e:ba:d6:9e:2e:
                    43:57:bc:8f:90:33:b4:37:16:8d:7d:9d:53:53:68:
                    8a:a6:c9:12:f0:b9:5c:25:d8:e0:22:12:1a:15:38:
                    69:93:46:44:37:86:b0:55:79:d5:39:8d:22:1f:ab:
                    42:6e:c9:a3:d8:6f:cd:52:27:5c:15:74:70:c0:7c:
                    9b:34:23:e0:b6:18:72:6c:6a:12:2f:a0:4b:4c:d3:
                    de:48:bc:04:4e:04:16:ac:e4:d5:d8:e1:07:10:c0:
                    71:c6:4f:72:39:6c:77:98:dc:a0:e5:15:7f:ed:6c:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:21:4B:76:AC:B2:76:B8:3A:D2:00:AD:ED:57:B7:61:52:71:A1:01
            X509v3 Authority Key Identifier:
                keyid:D8:DD:25:F7:EF:D2:53:8D:E0:CF:A6:E3:9A:85:2B:12:6B:9E:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/eb8f80eee3f3d92d1e202264f9e7ae398745d6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29e7e0bf-dd9d-46fc-a2ba-0c061ea2f4f3/5b2b6ea2fa40816d3366c89cb30d85a4a17be5b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.32.0/22
                IPv6:
                  2803:8d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:15:36:bb:40:a9:3f:c8:c7:74:00:f1:d2:c4:f0:bb:db:4f:
         61:cb:5e:e8:21:d7:b0:6d:b9:6c:25:b2:25:e6:00:60:88:ec:
         8a:5f:4b:f5:9e:32:5f:82:d0:23:04:f4:ea:05:c5:f3:29:7a:
         da:51:ad:29:cc:dd:3d:e0:c4:24:bc:8e:8e:ae:51:c5:44:5e:
         a5:19:c6:ea:b1:79:14:73:6b:11:d6:bb:c3:5b:7c:48:fd:b0:
         6d:9e:a1:38:ed:89:7a:b6:bf:46:3f:49:7f:c2:26:c6:c0:07:
         b5:a0:8b:5f:9f:f9:d4:e4:bf:a7:8e:b9:b9:5e:f0:a4:97:bd:
         80:1d:5f:23:2a:63:f3:4e:97:0f:a1:d3:7c:7b:00:14:20:7c:
         49:77:b9:28:02:a9:50:5b:7f:6c:05:ed:5b:43:d1:8e:76:33:
         7f:da:0e:88:5e:12:08:71:27:d3:fc:9c:83:83:cd:00:67:4a:
         62:2d:44:99:a4:a0:b9:7b:b3:32:24:f8:03:a2:a1:f1:58:2a:
         25:19:c5:a3:39:0d:ad:9c:1a:f7:bd:37:6a:aa:6f:f4:29:e6:
         da:85:7e:4a:f1:32:29:06:83:78:8a:1f:3b:35:20:46:c0:e3:
         55:38:22:36:56:6b:96:93:e2:47:06:d7:4a:4b:6a:3f:16:ec:
         de:72:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----