Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/082d640efcfd7910350b5f1edfb856f528904448.roa
File:                     082d640efcfd7910350b5f1edfb856f528904448.roa (raw, json)
Hash identifier:          qZskUhf+sc/cokSc9DFkf1BzWHF+8rInLvxZybQjkM4=
Subject key identifier:   17:8E:A1:6B:54:BA:9E:A5:91:6E:6A:0B:3F:F6:5D:D6:53:F6:F5:14
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       1FAE05
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/082d640efcfd7910350b5f1edfb856f528904448.roa
Signing time:             Mon 17 Apr 2023 07:31:08 +0000
ROA not before:           Sun 16 Apr 2023 07:31:07 +0000
ROA not after:            Thu 17 Apr 2025 07:31:07 +0000
asID:                     266784
IP address blocks:        45.235.120.0/22 maxlen: 24
                          2803:a0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076165 (0x1fae05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Apr 16 07:31:07 2023 GMT
            Not After : Apr 17 07:31:07 2025 GMT
        Subject: CN=082d640efcfd7910350b5f1edfb856f528904448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:07:98:11:2c:a4:81:5c:c6:52:5b:42:77:
                    02:d8:c8:45:b7:a8:25:68:16:20:b9:52:a6:9d:12:
                    58:ac:e4:49:3b:4c:85:3b:20:9b:12:47:fc:85:38:
                    14:aa:f8:16:cb:22:d1:1b:5e:df:5d:0b:60:c7:33:
                    0e:59:1e:0a:27:1c:67:5e:67:00:8f:09:1d:f2:d5:
                    61:33:fe:ee:ac:6b:d8:a5:41:54:48:dd:4f:3f:f9:
                    65:f1:48:c3:3f:a5:d9:e6:ec:51:84:2f:51:7a:19:
                    1e:75:4d:c4:59:07:92:fb:10:f5:b1:51:fa:49:62:
                    bd:0f:da:07:43:b7:36:4a:8e:5f:12:88:a0:10:c8:
                    ac:71:d3:4b:10:99:57:a4:5e:d6:bb:3e:09:b8:80:
                    3e:d4:49:c1:c3:bb:b7:8e:d5:dd:8a:11:e6:1d:6c:
                    59:15:be:0c:73:8d:8b:8a:48:1d:6b:dd:23:0a:69:
                    71:8b:fa:fd:1c:9e:b1:b4:f7:a4:82:52:85:16:a4:
                    68:07:11:1e:d8:5d:96:08:a5:e0:a6:8f:8d:aa:6f:
                    1b:f2:87:e7:a9:2e:ce:0e:61:cb:8a:73:7c:65:f7:
                    97:61:a8:1a:8a:02:ff:b3:e3:78:91:68:e6:ea:6a:
                    8d:1b:49:12:cc:a7:ab:ef:55:7b:c3:75:33:56:bb:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8E:A1:6B:54:BA:9E:A5:91:6E:6A:0B:3F:F6:5D:D6:53:F6:F5:14
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/082d640efcfd7910350b5f1edfb856f528904448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22
                IPv6:
                  2803:a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:b1:1b:7b:c3:ac:38:82:bc:85:9c:1b:67:db:ee:54:3a:d3:
         b4:9b:fe:85:84:79:4a:60:19:55:ec:a3:55:e5:1c:ad:44:9d:
         e6:42:31:29:88:c4:67:a1:a2:38:c8:ae:c6:15:3c:eb:e2:86:
         16:3c:7a:87:c3:54:8d:b9:1d:3e:93:fa:78:2e:1b:98:85:fd:
         ee:da:93:b0:c2:a2:02:93:aa:7f:9a:f5:0b:a4:43:5f:0b:78:
         47:50:57:31:95:c2:80:63:67:84:ec:5d:0f:c3:85:83:00:ba:
         1e:4b:9e:38:6f:be:a6:fb:95:96:61:7b:5d:e6:8e:4a:34:4d:
         08:f5:70:a6:3f:53:0d:64:6f:eb:2a:47:82:d1:63:6f:90:28:
         b0:37:4e:4f:62:85:18:e6:72:7a:57:fd:e8:2d:2b:6b:db:0a:
         2f:2d:ba:2a:38:5f:a1:ea:97:36:0a:a1:62:96:65:9e:62:dc:
         22:8c:e2:ce:2a:35:d8:11:67:68:f6:7d:86:d4:1b:a6:1f:f5:
         8c:45:ac:d2:94:75:b9:76:81:80:99:a1:7a:d9:b2:bf:84:df:
         d5:0c:f2:01:e0:86:4f:12:e0:89:c4:ea:b5:c2:30:25:45:38:
         04:4e:5a:e0:b8:a2:56:8e:d1:93:74:ac:0c:83:be:c1:8f:4d:
         18:e3:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----