Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/75db72e90db206f1a93e1c002d2aa66529131768.roa
File:                     75db72e90db206f1a93e1c002d2aa66529131768.roa (raw, json)
Hash identifier:          zjqqSUDqPJdfz/VhePC7atdbYDDH57Wlprkgd/uVSig=
Subject key identifier:   88:EB:18:4A:C8:64:50:7B:2E:B1:A4:80:0A:74:72:C8:D5:1A:BE:C3
Certificate issuer:       /CN=322c2a7938233e28a1844adf95caf7cea372c821
Certificate serial:       159116
Authority key identifier: C8:FF:0F:B7:B6:1B:A9:75:22:7C:40:40:01:18:35:07:BB:CA:E0:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/322c2a7938233e28a1844adf95caf7cea372c821.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/75db72e90db206f1a93e1c002d2aa66529131768.roa
Signing time:             Mon 12 Feb 2024 19:21:41 +0000
ROA not before:           Mon 12 Feb 2024 19:21:41 +0000
ROA not after:            Thu 12 Feb 2026 19:21:41 +0000
asID:                     265606
IP address blocks:        45.188.124.0/22 maxlen: 24
                          2806:362::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413398 (0x159116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322c2a7938233e28a1844adf95caf7cea372c821
        Validity
            Not Before: Feb 12 19:21:41 2024 GMT
            Not After : Feb 12 19:21:41 2026 GMT
        Subject: CN=75db72e90db206f1a93e1c002d2aa66529131768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:cb:50:b0:9f:5a:49:f5:db:a5:c6:01:c1:
                    f6:c7:45:98:1d:37:76:ed:3a:ff:b8:16:73:f4:18:
                    34:c7:98:2d:80:97:d1:92:a0:9d:0f:62:dd:2d:cb:
                    b3:ef:9d:1c:72:16:2a:cf:22:77:5a:59:f2:13:73:
                    1a:7a:5e:c7:4e:ac:2d:63:8b:ef:eb:a0:80:eb:9a:
                    9a:70:0d:c6:9d:2d:89:b1:05:cf:5f:63:83:ff:76:
                    31:0d:a7:68:5e:b8:c7:62:06:7b:08:3a:51:2e:e6:
                    3f:e6:40:46:5e:6c:69:a9:a4:11:97:34:2b:05:97:
                    bd:78:99:96:c8:78:70:b6:51:0c:67:c0:e8:f2:d1:
                    1d:cd:53:54:eb:71:b9:e2:8f:04:1a:b2:78:b1:1c:
                    f8:f1:f6:d3:1c:84:3a:15:fc:74:20:1f:ad:9d:92:
                    04:0d:33:86:e2:24:7e:63:54:e1:82:03:09:0a:de:
                    c5:63:37:72:f7:26:3b:1f:12:b5:38:d8:08:82:e3:
                    14:44:70:d5:bc:53:b1:be:b3:61:7d:85:6b:e9:b0:
                    25:ec:c2:23:6e:89:2a:43:10:c1:8f:95:6c:0b:7f:
                    b6:9e:82:88:9c:a1:26:c8:3c:da:5e:51:bc:18:95:
                    a0:ad:dc:07:7b:fc:3d:a1:be:cf:83:b6:87:60:4d:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EB:18:4A:C8:64:50:7B:2E:B1:A4:80:0A:74:72:C8:D5:1A:BE:C3
            X509v3 Authority Key Identifier:
                keyid:C8:FF:0F:B7:B6:1B:A9:75:22:7C:40:40:01:18:35:07:BB:CA:E0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/322c2a7938233e28a1844adf95caf7cea372c821.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/75db72e90db206f1a93e1c002d2aa66529131768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d261e43-19d1-4598-a505-747f8426cd0c/322c2a7938233e28a1844adf95caf7cea372c821.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.124.0/22
                IPv6:
                  2806:362::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:93:af:d8:f2:ca:fc:d2:da:a8:59:bc:b6:37:24:95:8d:98:
         a5:f7:54:ac:48:9b:ec:a5:73:a0:c5:85:24:4c:8b:77:17:ff:
         0e:a8:bc:66:49:d1:2b:20:fd:13:0c:a4:4d:eb:2c:d8:ef:69:
         3e:4a:26:ec:f4:a3:81:65:4f:d0:54:67:a5:55:f2:a9:6b:4c:
         84:24:41:6a:a7:18:76:28:ef:af:5c:75:d5:7e:78:7b:ea:ee:
         69:c1:ba:e9:bd:6a:da:55:2e:19:40:b7:5e:c5:37:9f:ff:b3:
         4b:bf:e0:8c:0c:39:e0:e3:a3:ce:f1:12:12:7a:a2:de:36:1f:
         d7:58:4b:bb:76:28:31:58:fb:82:9a:af:26:c3:5a:89:55:27:
         4c:6f:36:b8:9a:db:34:c7:bc:2d:e0:ae:2e:38:fb:19:ef:c9:
         e0:ba:9c:28:aa:de:fd:07:cc:ac:11:73:0e:ab:7b:60:fe:e1:
         0f:c2:e2:4b:8e:2e:8e:68:70:20:a2:63:b4:5d:32:d5:f7:d0:
         bd:da:8c:bc:ee:fc:99:f1:3f:e7:dd:b0:8e:13:1d:78:e9:5b:
         b6:a8:f9:ad:73:50:13:a0:93:c3:98:7c:cb:4f:1c:e4:2c:e3:
         b9:00:85:54:70:49:a8:83:83:cc:e3:ff:39:21:4b:a6:07:04:
         34:47:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----