Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/d87ff371928014bb7d2c7b084ca13c14799bb13f.roa
File:                     d87ff371928014bb7d2c7b084ca13c14799bb13f.roa (raw, json)
Hash identifier:          OXBzrxrv3UAsl/Tqf8EsdX7VTP7TweMnTPCjSbQhw44=
Subject key identifier:   07:01:A7:94:3E:0E:B1:A0:CA:8A:DE:C8:40:A0:04:4E:C3:6C:9A:19
Certificate issuer:       /CN=477cbcab0219a0cea1fe864323f2777db756c459
Certificate serial:       17D708
Authority key identifier: 0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/d87ff371928014bb7d2c7b084ca13c14799bb13f.roa
Signing time:             Thu 18 May 2023 14:59:38 +0000
ROA not before:           Wed 17 May 2023 14:59:38 +0000
ROA not after:            Sun 18 May 2025 14:59:38 +0000
asID:                     269916
IP address blocks:        45.191.188.0/22 maxlen: 24
                          2803:fce0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562376 (0x17d708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477cbcab0219a0cea1fe864323f2777db756c459
        Validity
            Not Before: May 17 14:59:38 2023 GMT
            Not After : May 18 14:59:38 2025 GMT
        Subject: CN=d87ff371928014bb7d2c7b084ca13c14799bb13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:e7:64:af:37:fa:c6:36:f1:e5:5d:3e:7b:
                    22:30:f2:35:c5:16:05:c4:be:62:c7:78:ac:3c:20:
                    03:e7:15:b9:a9:62:5e:ca:ab:f2:2d:43:bf:7a:1c:
                    3d:ad:a6:31:06:be:ae:89:5d:db:e8:df:53:cd:19:
                    15:8f:fa:80:40:ca:86:2d:9c:8c:69:a0:98:e0:07:
                    dc:7c:29:72:c6:83:2b:ef:ea:a3:41:67:6b:d3:0c:
                    d4:e6:a5:e5:12:ef:b0:f3:8d:7e:1c:92:84:3b:62:
                    f3:aa:84:99:2f:c7:38:8b:8b:76:68:f4:3b:ec:37:
                    86:31:f3:f7:8a:bd:97:5b:20:81:cf:85:4f:4f:b7:
                    50:b7:37:14:68:40:96:44:65:1f:65:71:17:a8:50:
                    11:31:7e:c5:55:32:51:83:8d:ea:22:63:7b:6b:d3:
                    1b:d6:c2:e0:f2:d0:6c:f3:1f:46:1f:05:84:92:79:
                    41:a4:eb:c4:ff:61:40:2b:bb:fe:04:d7:e1:26:a9:
                    ec:fe:54:e1:eb:92:76:50:2f:92:a6:64:32:30:07:
                    c0:2d:4d:5c:fd:2d:22:78:95:18:a0:5f:b3:66:26:
                    61:75:fc:78:3f:c4:31:ba:6c:b2:22:92:68:55:d8:
                    15:a7:3e:2e:98:40:90:d9:d7:4a:a2:02:b8:c8:ba:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:A7:94:3E:0E:B1:A0:CA:8A:DE:C8:40:A0:04:4E:C3:6C:9A:19
            X509v3 Authority Key Identifier:
                keyid:0A:8E:93:F0:37:65:CB:EB:24:BC:F4:B3:58:AC:40:22:B4:4D:AD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/477cbcab0219a0cea1fe864323f2777db756c459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/d87ff371928014bb7d2c7b084ca13c14799bb13f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c28e3ff-f732-46af-81e4-a0e58fbd74a0/477cbcab0219a0cea1fe864323f2777db756c459.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.188.0/22
                IPv6:
                  2803:fce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:7e:f6:a3:70:9b:36:ba:4a:e6:0a:70:ab:13:66:07:bf:fd:
         04:cf:e3:b3:9a:18:d5:ac:a3:3d:8c:12:41:6d:07:8e:2c:7a:
         5d:30:82:87:31:68:dd:ff:20:4a:6a:6d:bf:05:bd:9b:3e:0f:
         e9:a5:83:eb:be:ba:cc:25:85:a9:8e:c9:50:c6:e7:b0:b4:fa:
         a9:c6:06:a7:01:53:bd:80:48:fd:b6:53:f4:2a:6b:c1:72:bd:
         74:a7:be:4f:07:24:41:9c:74:24:8f:4e:67:db:4d:7f:cf:be:
         73:bf:c7:11:e6:1c:e3:df:7a:44:a0:5c:0c:34:64:14:cd:3b:
         f6:1d:cf:03:59:e8:f6:dc:4a:62:6c:4a:27:5d:5e:1e:55:68:
         31:3d:84:2b:c4:bd:fa:a1:61:27:bb:ab:27:c1:62:eb:c1:83:
         af:03:b4:ec:a7:4c:a6:57:2a:d6:c8:c4:4a:84:b3:07:fe:b4:
         bb:ae:2e:4c:05:5e:f2:e6:8d:80:4f:25:0a:41:e9:ce:49:0f:
         a5:3d:45:2c:c1:27:40:41:b0:00:7b:a6:bc:b8:e8:0c:08:14:
         49:4c:f3:5c:d0:cd:c5:27:e2:6e:a9:35:a6:93:a6:63:32:40:
         78:d3:67:ec:85:a4:f0:f0:a0:60:dc:c7:4f:e0:0f:84:de:d6:
         20:a8:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----