Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa
File:                     a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa (raw, json)
Hash identifier:          bzStXr35aausD9Q+2JefAFp/RPUo578MDxKFccaNeyg=
Subject key identifier:   7F:77:E0:52:E6:25:F4:A6:EF:32:FB:51:22:7C:6F:9D:BD:44:A4:8C
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       24823F
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa
Signing time:             Wed 31 Jan 2024 00:48:12 +0000
ROA not before:           Wed 31 Jan 2024 00:48:12 +0000
ROA not after:            Sat 31 Jan 2026 00:48:12 +0000
asID:                     269893
IP address blocks:        45.190.86.0/24 maxlen: 24
                          2803:94e0::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392639 (0x24823f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Jan 31 00:48:12 2024 GMT
            Not After : Jan 31 00:48:12 2026 GMT
        Subject: CN=a067e3cfe266fb33cea86b6c6685c1f994b842cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:3f:96:6d:1c:f7:d5:aa:17:a3:26:4b:1c:
                    ce:13:46:4a:4e:7f:6f:f7:2d:f1:cb:01:da:7b:61:
                    eb:2d:00:30:15:46:7b:f0:05:57:59:51:91:83:bd:
                    57:3c:45:1b:de:dc:c4:ee:dd:d4:42:1b:39:c7:43:
                    d2:ba:fc:20:27:92:61:18:a5:9a:df:f4:55:21:eb:
                    dd:13:fc:f4:dd:9a:96:8d:78:e0:dd:f0:fe:fe:13:
                    b7:ea:2c:55:55:24:15:b6:5f:b4:d8:1c:f5:67:d1:
                    45:13:80:cc:2d:52:85:82:c4:6c:d2:6f:ba:42:47:
                    f2:16:95:f7:a0:93:67:96:6d:8a:f6:71:2f:20:71:
                    2d:eb:67:7d:1e:7c:02:97:33:e9:61:69:1a:16:b0:
                    98:77:3b:77:5e:c9:54:dd:4f:f7:a0:4b:46:bd:5f:
                    32:08:b1:28:20:37:8e:07:12:63:79:41:14:04:cd:
                    b1:7f:11:28:0f:a2:2d:dd:d0:88:52:d8:b5:79:cb:
                    fc:b3:d9:41:f3:3f:b0:ad:f3:4b:23:95:10:9c:ab:
                    ec:59:e1:53:46:b2:99:10:af:a3:d5:c0:2b:3e:a5:
                    a7:6e:42:1b:ae:fa:e4:f8:01:d0:b6:c8:2a:b3:2f:
                    b1:49:ae:89:08:da:10:8f:f1:24:52:fa:80:67:81:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:E0:52:E6:25:F4:A6:EF:32:FB:51:22:7C:6F:9D:BD:44:A4:8C
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a067e3cfe266fb33cea86b6c6685c1f994b842cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.86.0/24
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:45:0d:1b:c8:92:9c:a7:08:b0:c8:0a:31:28:96:bf:08:b9:
         da:a3:dc:1c:a4:7e:c4:23:52:45:78:d9:20:7f:69:d9:c1:3a:
         a7:42:ed:c7:00:c1:dd:ba:82:4c:36:4d:25:41:92:18:48:b1:
         08:a6:49:bf:b0:d4:68:23:e5:5b:c9:45:ff:96:59:f5:ed:0a:
         28:65:13:de:a9:3a:54:5b:d3:49:c6:c0:ca:92:0f:b3:f8:a0:
         a1:b9:8e:a3:c9:cc:b4:a6:ff:e4:fc:16:08:d8:91:0a:c2:a9:
         fa:f4:a0:0a:5d:cd:42:24:d7:d5:70:69:8d:bf:e5:63:4f:2d:
         2f:de:99:e4:ec:65:f8:6f:4c:69:79:a3:a2:8a:50:68:b5:b9:
         b9:7b:00:71:3b:e1:e7:1e:df:0c:d4:78:a9:05:0e:bb:73:49:
         df:af:59:47:33:07:0a:63:b5:f7:57:be:36:09:89:86:c1:ca:
         0a:9a:75:78:8c:26:60:3c:47:02:16:53:82:07:d8:17:74:0e:
         f8:10:df:d3:4b:93:70:14:74:66:89:e8:e3:b6:96:9b:bc:d3:
         96:26:8d:d9:67:25:8d:78:8e:04:95:56:5e:27:a5:85:d6:3a:
         6a:fa:b2:bb:82:9b:71:08:8a:6d:b0:22:2d:02:69:ef:4b:33:
         c4:45:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----