Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/86902b3879de42d7bcf102237da097a23dfb0cc8.roa
File:                     86902b3879de42d7bcf102237da097a23dfb0cc8.roa (raw, json)
Hash identifier:          Syfm/wJ7Wyd50ZFJnAWFD3h/USugSE1bdZDtWT0ZvYs=
Subject key identifier:   13:A0:E1:99:C6:A0:41:37:C0:9A:82:B3:72:CA:3B:E2:0A:F3:6C:32
Certificate issuer:       /CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
Certificate serial:       211882
Authority key identifier: D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/86902b3879de42d7bcf102237da097a23dfb0cc8.roa
Signing time:             Thu 13 Jul 2023 04:14:03 +0000
ROA not before:           Wed 12 Jul 2023 04:14:03 +0000
ROA not after:            Sun 13 Jul 2025 04:14:03 +0000
asID:                     264732
IP address blocks:        45.177.147.64/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168962 (0x211882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23604b73c22ca1f7419d3ca4dccb9ce28f4435a8
        Validity
            Not Before: Jul 12 04:14:03 2023 GMT
            Not After : Jul 13 04:14:03 2025 GMT
        Subject: CN=86902b3879de42d7bcf102237da097a23dfb0cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:72:8c:af:16:6d:9c:a6:41:9f:b1:d7:c4:
                    a1:b9:33:38:36:b1:d5:dd:84:94:27:82:c9:55:da:
                    0f:d8:ca:46:e7:c2:56:58:2b:2e:87:93:5c:36:3f:
                    b8:27:b9:57:d1:35:68:3a:ad:1c:4d:16:4c:f9:1e:
                    5e:ea:cd:23:d6:88:87:37:84:33:fe:64:18:65:c0:
                    7c:4d:a1:09:7e:38:cd:e6:0e:93:8d:90:0d:1b:1a:
                    57:7f:66:31:45:60:50:41:20:88:fa:02:73:39:8e:
                    81:79:a9:cd:6f:a3:12:ad:05:db:70:7e:bc:58:ae:
                    ed:e2:f1:60:cb:29:9a:b3:fe:5d:1c:2c:09:6b:6a:
                    e1:99:f6:3f:6b:9f:70:9c:84:0c:bc:de:d3:6e:c2:
                    4d:fc:d1:e1:6b:e5:3d:c1:f8:4e:74:b9:89:81:80:
                    78:68:99:fb:e6:e3:d0:66:3e:aa:67:59:76:1d:bc:
                    59:69:c7:f5:ce:fc:af:7b:62:8f:68:14:2c:9f:75:
                    12:e8:18:58:a4:89:f3:07:5b:25:4b:62:41:37:ac:
                    5e:ef:72:d8:b3:db:34:df:01:f8:96:9b:a5:92:88:
                    c9:ba:3f:d1:de:ae:2f:9d:87:0a:20:bc:65:8e:cc:
                    52:99:9a:7a:ed:49:66:22:30:7b:44:a9:67:92:5f:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A0:E1:99:C6:A0:41:37:C0:9A:82:B3:72:CA:3B:E2:0A:F3:6C:32
            X509v3 Authority Key Identifier:
                keyid:D7:E8:15:32:35:AE:58:6B:50:47:7F:AC:6D:E7:E4:FA:79:9E:6C:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/86902b3879de42d7bcf102237da097a23dfb0cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3c4caea2-569f-4678-a145-28e3fd234454/23604b73c22ca1f7419d3ca4dccb9ce28f4435a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.147.64/27

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:0d:5f:e9:0c:c9:d1:63:66:d8:1d:6a:40:06:14:ac:f2:
         16:55:d3:35:24:bd:ae:eb:ad:d2:81:8e:25:b7:73:81:81:e9:
         06:0d:fb:a8:fe:f2:a8:d8:eb:d1:ee:30:49:36:46:ab:0c:06:
         31:15:04:01:0b:13:39:aa:36:87:b8:a0:fe:ef:f1:5b:10:52:
         ad:2f:29:5f:21:6c:76:8e:62:7e:11:59:34:9b:60:c6:d7:d9:
         7c:f8:4b:c5:01:8e:56:24:28:e8:66:39:3b:ae:1e:ac:89:4a:
         fc:e8:91:ad:f4:4f:9c:53:1e:68:8c:ce:1f:37:ec:01:87:a2:
         1f:d1:4b:d5:de:1e:98:95:ff:1e:66:0f:48:b3:d2:26:aa:11:
         dc:40:2b:03:75:99:19:6d:af:d9:e7:ed:c1:21:b8:07:88:09:
         1b:64:80:bc:31:4c:70:e0:89:3b:07:47:23:86:02:70:ec:87:
         7f:0c:d9:65:0b:60:54:35:8c:77:96:7b:21:c7:b8:7c:06:54:
         6b:58:da:cd:b5:2f:6e:78:c4:f0:08:f8:1f:25:f5:68:90:ac:
         7f:bd:06:8a:52:33:b0:d0:73:a0:6e:72:44:de:5a:b8:e3:14:
         37:ef:7e:7b:63:e5:b5:d5:e4:48:54:80:88:44:d6:69:a3:7d:
         3d:e4:09:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----