Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/9e4a9349868aa9bf43240d60d76abc4c2e1d7aed.roa
File:                     9e4a9349868aa9bf43240d60d76abc4c2e1d7aed.roa (raw, json)
Hash identifier:          ma8gbJJoV6Vxca84czwQs3OblbUf4poHfgMS9aDWKdM=
Subject key identifier:   37:9A:64:C9:AD:2B:99:5A:21:17:F5:40:68:69:6C:9A:2E:E5:5D:47
Certificate issuer:       /CN=6414ea9bc4d9056b40ed2fb4c762184bca3b8608
Certificate serial:       1BC261
Authority key identifier: 31:EB:7F:D1:83:FB:EA:8C:6E:86:03:18:5A:82:F1:2A:22:91:65:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/9e4a9349868aa9bf43240d60d76abc4c2e1d7aed.roa
Signing time:             Tue 31 Oct 2023 13:14:41 +0000
ROA not before:           Tue 31 Oct 2023 13:14:41 +0000
ROA not after:            Fri 31 Oct 2025 13:14:41 +0000
asID:                     265865
IP address blocks:        45.226.58.0/24 maxlen: 24
                          2803:9620::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819233 (0x1bc261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6414ea9bc4d9056b40ed2fb4c762184bca3b8608
        Validity
            Not Before: Oct 31 13:14:41 2023 GMT
            Not After : Oct 31 13:14:41 2025 GMT
        Subject: CN=9e4a9349868aa9bf43240d60d76abc4c2e1d7aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:4e:d5:1f:02:75:fc:10:5a:74:c5:73:78:
                    14:d5:ab:a2:ec:11:9d:f0:42:5d:de:3a:6b:80:14:
                    2d:13:a9:73:09:bc:e2:34:64:40:91:03:a2:00:0f:
                    2e:45:93:1a:29:a4:5e:41:9c:ee:6a:3f:fc:56:ab:
                    71:91:05:32:4d:2a:65:0c:da:3c:47:1a:cf:16:7f:
                    3a:02:58:24:ed:64:f5:6b:fb:b4:3b:7e:cf:00:03:
                    a4:b4:62:09:3e:a6:5a:c1:84:63:a7:c2:b1:14:66:
                    3f:b4:4f:db:8d:11:c6:9d:78:c2:dd:fb:27:ed:c6:
                    fb:25:27:36:8a:53:ff:c9:c7:4a:18:1e:4e:75:a7:
                    82:fe:6a:7b:c3:03:1d:5c:d6:a2:a6:39:c0:77:55:
                    ce:29:84:a4:eb:0f:68:2a:b3:c7:24:54:89:df:14:
                    03:8b:54:56:7d:19:f6:15:a0:9c:15:84:e1:52:27:
                    35:2e:40:fc:c7:42:bf:73:db:f8:1f:1b:4d:ae:0f:
                    04:97:7f:f3:b5:ec:62:e0:d2:e9:53:55:55:0e:88:
                    8f:a5:f9:46:83:c0:24:85:72:27:15:75:06:fc:0c:
                    d4:60:93:15:ae:70:6d:54:31:59:e2:68:41:f7:10:
                    61:88:26:b5:8d:f9:ba:36:a8:e9:cd:d7:f4:ee:b3:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:64:C9:AD:2B:99:5A:21:17:F5:40:68:69:6C:9A:2E:E5:5D:47
            X509v3 Authority Key Identifier:
                keyid:31:EB:7F:D1:83:FB:EA:8C:6E:86:03:18:5A:82:F1:2A:22:91:65:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/9e4a9349868aa9bf43240d60d76abc4c2e1d7aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.58.0/24
                IPv6:
                  2803:9620::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:43:0d:cf:dd:c9:ca:37:3e:e5:f7:1a:c0:6d:be:f0:4d:
         60:ca:0b:f7:dc:55:96:13:5c:d7:b2:d8:b1:2c:3b:fb:90:8c:
         bf:65:5f:97:35:03:8a:a2:7b:6a:ae:da:c2:83:a8:03:fd:84:
         be:7c:8b:57:d7:49:0b:59:c4:4d:c6:f4:58:71:55:4a:1b:17:
         8c:7e:be:7b:6b:6b:4e:1d:18:56:22:05:2b:25:c0:ad:32:7e:
         af:4e:04:00:7c:02:a3:e8:cb:39:67:dd:b9:90:38:3c:78:7c:
         76:18:79:e5:75:e2:66:63:c4:d2:1b:dd:df:81:f7:d1:00:e1:
         25:1c:73:07:4f:a5:3d:4c:80:f7:da:68:04:82:af:b9:1f:68:
         30:e2:fc:48:81:78:b5:09:64:8a:4f:2b:52:80:42:ce:0d:f1:
         a7:2a:36:1c:f5:a0:95:67:42:a9:bf:61:58:91:b2:77:84:73:
         70:8c:2c:7f:70:a4:72:a6:66:8b:92:f9:6c:1d:5f:48:76:10:
         d0:1e:62:7a:4a:5a:c9:c7:37:14:4c:a2:9b:33:a1:96:44:b3:
         08:6f:47:70:e0:5b:4f:11:66:fb:7b:e7:3a:13:2a:56:0d:b3:
         0c:bd:67:e6:f5:db:e6:8b:5d:64:65:e4:24:1e:4c:c2:34:33:
         59:f8:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----