Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/0078798f4db8f4e9d5702a0d957c1d24b267d829.roa
File:                     0078798f4db8f4e9d5702a0d957c1d24b267d829.roa (raw, json)
Hash identifier:          A70oaCXRTjEHya2iHMq3HNDm2mxQ2N5VEL6Dyz1bIO4=
Subject key identifier:   18:9D:8E:EE:32:A5:71:95:E1:07:D8:BF:CD:41:AB:23:0D:5E:84:C2
Certificate issuer:       /CN=53bdb74e475b2a4347038eba8bfa2e4427b6097d
Certificate serial:       1E4E88
Authority key identifier: 57:45:08:43:15:02:39:35:FD:2E:45:2F:39:E5:05:8C:8C:AE:AF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53bdb74e475b2a4347038eba8bfa2e4427b6097d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/0078798f4db8f4e9d5702a0d957c1d24b267d829.roa
Signing time:             Mon 13 Nov 2023 14:04:25 +0000
ROA not before:           Mon 13 Nov 2023 14:04:25 +0000
ROA not after:            Thu 13 Nov 2025 14:04:25 +0000
asID:                     269846
IP address blocks:        45.187.4.0/22 maxlen: 22
                          2803:40e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986184 (0x1e4e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bdb74e475b2a4347038eba8bfa2e4427b6097d
        Validity
            Not Before: Nov 13 14:04:25 2023 GMT
            Not After : Nov 13 14:04:25 2025 GMT
        Subject: CN=0078798f4db8f4e9d5702a0d957c1d24b267d829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:9c:da:de:80:fc:9e:3a:bd:c5:d8:5d:ab:
                    8d:44:26:bc:6c:67:86:1c:03:99:79:fa:cc:e4:c2:
                    70:e0:de:80:49:00:c5:84:5e:99:74:d8:1b:18:9a:
                    36:f3:3f:5b:2c:57:b2:88:76:0e:6d:14:9e:ed:03:
                    53:c8:15:d5:d1:fa:e5:ab:fe:b6:9c:b1:7b:93:5e:
                    33:58:a4:1c:f8:9b:cf:56:8f:a9:1a:2d:5d:bd:a1:
                    a7:19:62:14:44:33:7f:fc:0d:84:27:5a:e7:40:2b:
                    cf:6b:27:83:62:9a:cd:72:fb:6c:82:e1:15:4c:35:
                    09:5d:a5:65:3f:d0:10:73:5f:0e:64:f9:be:db:79:
                    5f:a7:a5:26:42:1f:e2:8b:14:c6:5a:f1:a0:b6:f2:
                    e9:d0:59:65:f9:af:e5:89:82:48:b2:94:6a:79:b2:
                    ee:0d:8d:b4:36:9d:3e:a1:f5:7a:9f:9e:33:dc:60:
                    f5:36:5f:9e:be:2c:33:ec:f0:ca:ce:f8:78:d5:29:
                    ed:45:a0:94:06:a7:0f:69:77:54:b7:19:3f:28:31:
                    11:3d:f6:01:bd:58:a7:3a:49:db:50:ad:32:a7:2e:
                    f1:ba:44:a3:5b:79:e7:19:46:93:72:df:82:05:4d:
                    4f:0f:2f:af:31:c2:82:94:3d:51:59:e3:11:4f:7e:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:8E:EE:32:A5:71:95:E1:07:D8:BF:CD:41:AB:23:0D:5E:84:C2
            X509v3 Authority Key Identifier:
                keyid:57:45:08:43:15:02:39:35:FD:2E:45:2F:39:E5:05:8C:8C:AE:AF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53bdb74e475b2a4347038eba8bfa2e4427b6097d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/0078798f4db8f4e9d5702a0d957c1d24b267d829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e710bc2-1d6a-4e46-8f6f-50e9784520c6/53bdb74e475b2a4347038eba8bfa2e4427b6097d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.4.0/22
                IPv6:
                  2803:40e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:50:22:5a:d0:cb:d9:bf:12:95:16:40:1f:f3:34:e3:55:64:
         e7:8b:32:b2:24:99:46:c2:fe:fc:9c:c7:47:0e:72:12:a8:0c:
         ca:bf:97:b2:9e:b1:6e:f1:b2:de:c5:ba:f6:16:28:88:01:1f:
         b3:ba:82:8e:58:44:2a:1f:68:56:78:7d:68:16:9a:54:bb:ef:
         c6:e1:2a:79:c1:3a:ef:cb:30:80:8a:6f:58:22:64:1c:7c:ab:
         8f:97:31:94:b5:d6:86:8e:8a:dd:b8:62:17:4d:5b:bd:35:7a:
         da:93:08:8f:64:b3:5e:b6:47:eb:72:cb:ad:5d:a6:d7:5e:38:
         74:87:ab:4b:a9:03:32:9b:a1:99:a7:4e:42:1a:8c:72:eb:4e:
         6d:45:26:c1:e6:69:5d:50:4f:52:83:0a:33:73:bd:84:2b:59:
         b0:d9:dd:4a:71:b7:e9:d7:64:1f:e7:82:ce:e6:7c:04:2d:65:
         db:c5:e3:da:8b:0a:0a:f6:0d:f9:88:d9:d3:af:03:f7:8e:cb:
         c5:a6:68:61:9e:2e:c3:e3:a6:f3:15:6d:69:82:2d:59:f4:08:
         25:48:c9:47:38:4f:42:d3:08:aa:c5:cf:eb:4c:6b:6f:ae:a9:
         9d:79:13:3a:d3:3d:54:f0:b6:8f:55:a6:7a:6d:de:7c:c3:8d:
         a2:31:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----