Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/7a23d88ae9bc67708ad84de294a572eb3a2162f1.roa
File:                     7a23d88ae9bc67708ad84de294a572eb3a2162f1.roa (raw, json)
Hash identifier:          rYZviwp+QTTLs4CnwDMzd2dUVGFsEizH1H9SKzOD7EA=
Subject key identifier:   2A:0A:E6:63:FC:5C:6C:F6:BD:0F:D3:9E:23:05:B7:BC:BE:5F:DE:AB
Certificate issuer:       /CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
Certificate serial:       13F177
Authority key identifier: 89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/7a23d88ae9bc67708ad84de294a572eb3a2162f1.roa
Signing time:             Sat 22 Jul 2023 14:19:58 +0000
ROA not before:           Fri 21 Jul 2023 14:19:58 +0000
ROA not after:            Tue 22 Jul 2025 14:19:58 +0000
asID:                     267929
IP address blocks:        45.179.244.0/22 maxlen: 24
                          2803:7e60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306999 (0x13f177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
        Validity
            Not Before: Jul 21 14:19:58 2023 GMT
            Not After : Jul 22 14:19:58 2025 GMT
        Subject: CN=7a23d88ae9bc67708ad84de294a572eb3a2162f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:03:99:95:8c:bf:d8:0f:13:e2:f5:16:c1:
                    b8:76:ce:77:02:70:7c:d4:69:5c:0b:20:03:eb:57:
                    c3:87:ab:a4:0a:46:26:b1:5e:b5:ef:96:cb:9d:e9:
                    f7:5c:27:c9:62:4b:88:19:1d:2c:ee:ff:0e:69:a4:
                    56:57:ec:91:4c:b8:06:be:20:f6:0f:a5:ff:d4:b4:
                    2e:2d:27:b0:ee:c2:ca:5b:63:a0:10:94:62:78:d4:
                    74:a1:6e:0c:32:8b:23:e6:89:1a:00:51:98:ff:d7:
                    0c:3f:e3:6c:06:ca:96:06:2b:45:01:40:15:17:f1:
                    5d:6c:dc:1e:c5:18:4b:72:35:9a:8b:89:e6:08:95:
                    bc:16:92:d4:6f:c2:f7:82:82:fd:a5:01:71:71:7b:
                    4e:84:3e:2d:cb:69:8c:a7:ad:e8:7a:1f:7d:75:17:
                    c9:00:ef:3b:7a:91:25:e9:fa:38:d6:8e:24:1c:fe:
                    a0:59:58:28:2e:fe:9e:fb:e2:6c:0b:45:33:76:c5:
                    99:c1:c5:c4:0a:42:22:10:0d:11:86:a2:73:f3:3c:
                    5c:73:28:46:96:13:40:4a:32:8e:5d:39:d5:e0:09:
                    f3:2a:3b:00:00:7d:ff:aa:cc:b5:b7:81:f2:d9:69:
                    6e:89:3f:51:cc:29:82:70:b2:04:58:0d:2b:6d:94:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:E6:63:FC:5C:6C:F6:BD:0F:D3:9E:23:05:B7:BC:BE:5F:DE:AB
            X509v3 Authority Key Identifier:
                keyid:89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/7a23d88ae9bc67708ad84de294a572eb3a2162f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/e2b62d0be638d98e406ee5e9dd9c9858052a3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.244.0/22
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:8e:61:10:4f:f3:3e:7f:ad:0e:5c:f5:dd:f2:cf:96:51:9f:
         84:ad:75:99:c8:b7:8a:ae:d0:77:b6:2d:3b:c4:b9:2c:4f:96:
         b4:dd:c7:19:9d:c9:bd:0c:73:eb:46:3f:44:17:5c:14:86:41:
         69:0d:d7:c0:30:30:87:3e:a8:c3:dc:6b:31:c9:42:c0:fc:aa:
         b2:80:90:f9:1b:8a:1d:26:ac:d4:8b:85:0d:2f:16:6c:30:b5:
         7b:67:e0:e6:51:e4:3d:85:b6:77:5c:bb:9d:57:2c:7f:ef:74:
         c3:a0:10:2c:6b:08:4b:25:ce:51:82:90:5f:c1:23:3f:20:10:
         53:25:99:a5:bd:c0:7d:f7:5b:7e:8e:aa:6d:b5:90:fd:be:a7:
         03:35:ee:2c:6c:40:91:2a:46:27:7c:51:37:10:a3:a0:1a:fb:
         46:ca:0a:1c:64:70:85:f1:df:6d:64:f2:1d:d6:05:7e:ee:0e:
         c9:24:e8:2b:51:f8:ec:2e:d8:16:ae:b0:70:7e:c4:e6:bd:82:
         ea:be:ae:12:14:8f:61:6c:83:4d:1f:a5:54:0e:97:24:4c:3d:
         52:23:4d:3f:7b:92:2a:f2:18:87:9a:b4:40:b9:e6:4d:75:19:
         6c:f7:07:0f:36:63:b1:ce:f7:40:0e:db:e0:f5:e5:94:7a:84:
         8f:0b:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----