Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/f31d794a524107233a2202cd0a4507b413d38128.roa
File:                     f31d794a524107233a2202cd0a4507b413d38128.roa (raw, json)
Hash identifier:          dfCEryvFxvp2Ylhv7oldNe2bEjsrZ6y2nPXlS+EB6Zs=
Subject key identifier:   F7:27:4D:07:D4:04:FD:87:5C:C5:A3:3C:10:70:9D:BB:CF:84:5D:4C
Certificate issuer:       /CN=b31a8cfda0d53042955a6fbcadb44a381686bc7c
Certificate serial:       0E0B35
Authority key identifier: F0:E3:B7:B8:9D:B3:10:B5:FF:B4:47:1B:E5:47:9F:B9:DA:23:1D:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31a8cfda0d53042955a6fbcadb44a381686bc7c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/f31d794a524107233a2202cd0a4507b413d38128.roa
Signing time:             Fri 09 Feb 2024 22:31:17 +0000
ROA not before:           Fri 09 Feb 2024 22:31:17 +0000
ROA not after:            Mon 09 Feb 2026 22:31:17 +0000
asID:                     266863
IP address blocks:        45.239.128.0/22 maxlen: 24
                          2803:f2a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920373 (0xe0b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31a8cfda0d53042955a6fbcadb44a381686bc7c
        Validity
            Not Before: Feb  9 22:31:17 2024 GMT
            Not After : Feb  9 22:31:17 2026 GMT
        Subject: CN=f31d794a524107233a2202cd0a4507b413d38128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:fd:9e:4b:82:49:4a:d6:73:a4:66:61:9f:
                    6e:0d:4d:76:79:e3:a5:40:69:49:b3:f3:37:53:40:
                    a6:1f:12:16:ac:92:fc:84:6b:95:c9:f4:d0:05:a5:
                    c2:94:6b:0b:67:bb:ba:f8:8d:9a:74:34:9e:d6:69:
                    65:55:27:50:f8:d2:5d:98:00:49:13:12:2c:67:05:
                    45:92:5e:4a:4a:d4:8a:dd:96:2f:4f:ca:b0:fd:95:
                    84:8d:f8:21:4a:f8:9a:de:e7:35:0a:a0:8c:ae:32:
                    88:6b:76:03:49:1d:bc:4c:b7:9c:18:64:66:8b:61:
                    49:27:2b:3a:63:b9:b3:06:9a:2c:37:70:ca:5b:c9:
                    83:b0:65:8b:7e:67:34:a4:da:6c:07:1e:7a:34:ae:
                    06:ff:a7:f2:91:70:71:33:68:d7:12:33:21:96:b2:
                    2f:34:00:d1:c5:8b:38:f6:63:da:41:c9:a6:b9:c3:
                    54:73:50:0d:54:2f:19:76:97:e6:69:d8:af:2d:83:
                    9c:57:94:b0:1c:2e:df:7a:82:0f:9c:1f:be:97:ef:
                    23:70:40:e3:2a:0a:d6:64:fb:a1:46:23:9a:3e:b7:
                    14:4f:13:eb:94:f3:01:68:df:ed:17:e1:ab:69:8f:
                    d8:75:d7:36:9f:d8:3a:c8:12:62:dd:1b:ca:a4:ff:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:4D:07:D4:04:FD:87:5C:C5:A3:3C:10:70:9D:BB:CF:84:5D:4C
            X509v3 Authority Key Identifier:
                keyid:F0:E3:B7:B8:9D:B3:10:B5:FF:B4:47:1B:E5:47:9F:B9:DA:23:1D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31a8cfda0d53042955a6fbcadb44a381686bc7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/f31d794a524107233a2202cd0a4507b413d38128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/b31a8cfda0d53042955a6fbcadb44a381686bc7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.128.0/22
                IPv6:
                  2803:f2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:b4:9a:00:c2:84:8c:d5:1f:af:dc:f3:80:b9:74:ee:50:
         a9:c1:0c:57:f8:c7:3e:c5:80:f1:0c:b3:7d:13:1b:56:b2:83:
         c4:f2:df:d4:23:7e:5c:3f:01:13:80:ee:00:d8:c7:28:5b:48:
         8a:4f:d5:9b:4a:33:bb:76:25:0f:d9:c3:94:c8:08:69:1c:0d:
         7e:be:ef:a0:03:e2:13:e8:fd:a8:57:14:f6:4d:45:e8:23:20:
         30:19:47:71:49:68:14:8a:57:93:e4:c9:da:20:36:0b:a8:f0:
         1e:75:dd:4b:29:58:93:e1:b8:07:a5:e8:67:42:bd:58:b5:19:
         64:0f:a9:46:ee:5c:7a:9c:23:7c:5f:ee:c8:26:9a:78:08:f9:
         e2:e9:a1:93:b6:f4:88:92:82:a5:47:54:a5:fa:34:4a:84:9b:
         0e:52:24:a2:ac:d1:08:be:ed:4c:2a:ad:74:31:a4:0f:d2:2f:
         61:30:e5:92:a9:eb:0b:b6:70:84:19:2a:af:ac:dd:e0:97:2b:
         05:b6:71:2c:88:c3:28:1d:73:b3:9f:60:ac:a4:11:69:4d:93:
         71:f4:36:fd:c9:ea:5d:1d:ef:bb:2a:6c:0e:6b:e3:5b:45:f1:
         ff:4f:c1:af:44:58:2c:aa:98:58:b4:b3:f0:41:8d:e9:7e:ae:
         b5:18:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----