Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/e079d96586919174b179ca7dd6286ef1b9dcf880.roa
File:                     e079d96586919174b179ca7dd6286ef1b9dcf880.roa (raw, json)
Hash identifier:          XGTOQWJAyFjYXx/ul4WWHZR9N6ZTmGS3iymMGvVGC4M=
Subject key identifier:   2D:2F:93:C7:94:93:9D:84:7A:A6:DF:E6:1D:AA:76:0D:2E:3F:D3:F9
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       203FC6
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/e079d96586919174b179ca7dd6286ef1b9dcf880.roa
Signing time:             Tue 11 Jul 2023 02:13:56 +0000
ROA not before:           Mon 10 Jul 2023 02:13:55 +0000
ROA not after:            Fri 11 Jul 2025 02:13:55 +0000
asID:                     28423
IP address blocks:        45.166.110.0/24 maxlen: 24
                          2806:30e::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113478 (0x203fc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Jul 10 02:13:55 2023 GMT
            Not After : Jul 11 02:13:55 2025 GMT
        Subject: CN=e079d96586919174b179ca7dd6286ef1b9dcf880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:15:41:e5:98:aa:f8:c2:94:87:0e:99:bd:
                    6e:f7:59:d3:79:25:0e:74:6b:8c:e7:5f:1a:ff:17:
                    86:4c:5d:5a:80:2a:bb:c3:b9:c7:1f:32:c4:e5:56:
                    bb:55:a3:4c:2b:47:6a:0b:88:d6:a1:43:e0:ca:91:
                    40:52:64:89:62:b0:a9:df:d1:13:0b:2b:49:c7:e8:
                    4b:bc:37:b1:ca:35:8d:85:fd:2e:12:bd:09:56:20:
                    ea:9c:bc:3c:9f:a9:78:f4:41:d2:c8:22:cc:13:c7:
                    02:c7:8d:b8:2a:9a:49:69:46:68:8c:10:61:04:97:
                    22:55:97:c1:67:c4:fd:cb:30:40:af:ad:43:ca:1d:
                    eb:eb:1e:5b:93:60:d1:a4:f8:a0:36:02:81:22:d4:
                    b5:6f:61:34:2a:81:be:c3:18:92:a7:4b:9c:f3:d9:
                    b8:12:e4:58:e4:12:cf:5f:ef:b4:f2:0c:92:aa:d2:
                    97:a0:e6:b6:42:8d:66:eb:79:eb:d6:c4:c3:98:7d:
                    a5:ba:e6:df:44:eb:8d:dc:ef:ca:03:43:49:e2:af:
                    8c:a6:d7:9e:41:76:4b:5f:f3:02:c5:03:b0:bd:72:
                    13:4e:bb:15:fc:cf:88:f1:3e:17:b3:2b:04:bd:03:
                    cb:3b:dc:40:a9:2d:b8:c7:c4:b5:b1:8c:de:66:bd:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2F:93:C7:94:93:9D:84:7A:A6:DF:E6:1D:AA:76:0D:2E:3F:D3:F9
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/e079d96586919174b179ca7dd6286ef1b9dcf880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.110.0/24
                IPv6:
                  2806:30e::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:c3:ea:55:1f:66:c9:95:52:1f:87:2e:a9:c1:f8:e2:df:
         05:ad:8c:f5:a1:8c:60:f4:d4:2b:cf:7d:3e:36:b7:ed:ae:5d:
         46:5c:40:2c:47:24:cc:db:13:6a:c2:1e:38:3e:95:2b:8d:32:
         a9:75:1e:fb:09:6d:f2:b6:19:e3:c4:d5:35:dd:90:4f:e6:54:
         9d:f8:c4:af:e6:9b:bf:37:2c:da:03:7e:f1:00:17:57:e0:04:
         46:e7:29:f9:00:46:99:29:8e:dc:45:44:89:b9:a6:cb:8a:01:
         14:50:87:94:64:78:6f:24:81:0c:5f:85:3e:d7:77:bb:12:74:
         26:79:ea:eb:a2:f1:f6:cb:ee:40:63:f2:52:23:8d:85:06:b2:
         82:d8:20:3c:39:1b:fa:86:78:a8:f7:96:23:69:c9:db:d9:43:
         3c:b1:88:12:78:58:32:38:24:42:19:0b:54:b3:2b:51:a4:25:
         f5:eb:07:5e:ef:16:1b:63:b5:63:ec:6e:8e:95:f0:8c:c7:70:
         02:31:81:72:ff:57:07:1e:07:49:1c:71:cf:b7:de:78:a2:33:
         91:04:36:0c:46:29:45:83:2f:c1:95:28:47:5e:04:6c:d1:f0:
         0b:ff:35:0a:42:8f:f2:4b:51:ba:c7:c1:20:b9:c4:26:7b:13:
         66:c3:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----