Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/17f2cf85b12ca5507f74820640185e7d85a03a50.roa
File:                     17f2cf85b12ca5507f74820640185e7d85a03a50.roa (raw, json)
Hash identifier:          FamgKSYNodU+YiyVRcbsiIZ3KMylFY5h/De/tlHufno=
Subject key identifier:   87:AE:D7:CE:61:FD:52:CF:95:24:96:13:B2:F9:59:27:B7:2C:2B:DB
Certificate issuer:       /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial:       1F4298
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/17f2cf85b12ca5507f74820640185e7d85a03a50.roa
Signing time:             Wed 13 Dec 2023 04:41:36 +0000
ROA not before:           Wed 13 Dec 2023 04:41:35 +0000
ROA not after:            Sat 13 Dec 2025 04:41:35 +0000
asID:                     266845
IP address blocks:        45.239.32.0/24 maxlen: 24
                          45.239.33.0/24 maxlen: 24
                          2803:3ca0::/32 maxlen: 32
                          2803:3ca0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048664 (0x1f4298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
        Validity
            Not Before: Dec 13 04:41:35 2023 GMT
            Not After : Dec 13 04:41:35 2025 GMT
        Subject: CN=17f2cf85b12ca5507f74820640185e7d85a03a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3c:06:b4:1e:e7:4c:e8:c5:67:29:55:13:f7:
                    5b:aa:5d:59:1d:53:1e:43:b9:65:4d:5c:54:34:f3:
                    b1:1c:a8:71:61:e0:fc:b6:0e:bf:16:97:d1:88:ee:
                    7e:9d:7c:8f:e3:4e:b3:5a:b7:92:82:3c:26:1e:30:
                    34:c9:7d:1f:e3:b2:bb:16:f8:23:77:02:06:00:fa:
                    d1:61:65:2e:9b:61:0a:2d:4f:4f:8a:9a:20:c3:51:
                    85:4d:17:38:43:29:34:78:d0:74:e4:2f:84:f9:bf:
                    b7:3a:2e:98:4e:f0:63:cc:0c:d0:f2:53:99:bf:70:
                    90:4b:f7:3a:3e:9c:89:eb:99:7a:20:42:38:b8:36:
                    f9:55:60:9b:bf:d7:09:f2:cc:23:c6:2e:78:c0:6e:
                    35:8e:60:34:5e:b9:d4:2e:de:9d:bf:94:65:da:db:
                    90:ff:c3:21:d1:74:98:e5:f7:f3:06:0c:42:20:e0:
                    e8:f9:37:e4:33:b8:49:21:00:10:af:11:7d:23:7a:
                    bd:a0:22:23:db:d9:c8:52:cf:76:d8:db:a9:43:52:
                    ca:fc:a1:b8:9a:7d:a8:21:fd:99:d6:15:d9:bf:a3:
                    c4:b1:f4:dd:60:f6:29:83:e9:d4:51:72:c4:10:aa:
                    63:0b:e1:c1:a7:7d:42:7f:28:93:95:af:06:a7:5e:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AE:D7:CE:61:FD:52:CF:95:24:96:13:B2:F9:59:27:B7:2C:2B:DB
            X509v3 Authority Key Identifier:
                keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/17f2cf85b12ca5507f74820640185e7d85a03a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.32.0/23
                IPv6:
                  2803:3ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:16:8e:18:75:d1:38:5f:36:97:a8:9d:db:56:13:54:63:
         86:29:2a:6f:6e:a8:ab:e6:90:6c:19:4e:d7:4f:74:01:c0:90:
         90:87:88:3e:78:02:30:1c:b0:b2:82:5f:bf:42:00:91:31:2e:
         0b:45:5e:77:4c:fb:c5:fe:ff:b2:53:cb:25:f1:ed:36:b0:94:
         42:e2:23:f6:d5:4a:5e:5f:5f:3e:2c:f1:24:f3:52:a7:f5:85:
         2f:40:46:a4:6b:07:90:a9:e7:05:f7:b1:2a:4a:04:ae:1f:1f:
         b0:ec:0b:77:45:1f:a8:56:f5:a2:6c:85:ad:08:e0:62:06:ff:
         88:2f:2f:fe:12:52:41:98:d5:5c:3e:c3:6a:34:26:4d:01:a8:
         ea:69:fa:13:0a:95:25:c4:b7:ee:db:dc:2d:cb:ec:0c:aa:b5:
         ea:91:ac:a0:99:0c:04:c6:3e:ca:c1:bc:38:a1:6c:77:00:18:
         13:95:f2:b7:c7:ca:5a:a2:ba:35:c9:79:ac:0b:71:3f:55:9c:
         02:7a:4c:fb:95:51:c9:57:85:16:17:af:ca:5b:fb:0e:8b:1d:
         5b:c9:a0:23:c8:f0:b8:27:36:1e:15:6e:76:36:59:b9:0e:c3:
         7e:d4:46:76:53:bc:c3:b2:88:c8:17:7a:9d:03:07:36:ad:9e:
         b1:2a:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----