Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/cb9a422a6e9c85ce33edfb053a9effeabd050206.roa
File:                     cb9a422a6e9c85ce33edfb053a9effeabd050206.roa (raw, json)
Hash identifier:          LzxvykrMaoiUq4UGUGmGqMPOAwKgHurH8nwoJ2F/mNc=
Subject key identifier:   EC:82:97:5F:71:17:69:85:70:9B:54:D0:9D:9B:5B:EC:39:B4:B8:6A
Certificate issuer:       /CN=a072744812c9d37a960b2eaee018f541354a6d6b
Certificate serial:       25D088
Authority key identifier: 13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/cb9a422a6e9c85ce33edfb053a9effeabd050206.roa
Signing time:             Wed 31 Jan 2024 21:17:27 +0000
ROA not before:           Wed 31 Jan 2024 21:17:26 +0000
ROA not after:            Sat 31 Jan 2026 21:17:26 +0000
asID:                     52471
IP address blocks:        45.169.192.0/22 maxlen: 24
                          2803:33a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478216 (0x25d088)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a072744812c9d37a960b2eaee018f541354a6d6b
        Validity
            Not Before: Jan 31 21:17:26 2024 GMT
            Not After : Jan 31 21:17:26 2026 GMT
        Subject: CN=cb9a422a6e9c85ce33edfb053a9effeabd050206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:c2:0b:26:6f:65:d6:97:86:e8:da:c5:37:
                    72:61:99:0c:b8:89:48:4d:fd:f8:51:52:3e:5c:38:
                    ee:4d:26:a6:a1:06:78:03:35:97:06:1b:3b:fc:4b:
                    ba:3e:5d:39:3c:19:01:a9:b4:d9:49:ca:4c:ef:6c:
                    ad:61:04:51:b7:23:1e:6c:fb:70:a8:c7:8c:63:21:
                    37:c3:07:8c:ae:72:a0:63:c2:43:c3:94:fa:b6:b4:
                    a7:60:f0:db:16:74:cf:66:b9:dd:7e:77:2a:b6:ef:
                    2d:c4:ed:0f:4c:35:29:b8:7b:6a:76:1c:1f:ba:50:
                    90:14:2b:f7:23:eb:68:6b:f8:28:e8:91:6c:b5:37:
                    91:f5:ef:52:83:12:92:ac:b3:66:70:bf:90:14:2b:
                    ff:dc:f2:a5:ec:36:62:e2:c3:58:f5:41:bf:2c:56:
                    51:0d:9b:71:67:96:51:df:92:f5:cf:12:54:bd:5b:
                    35:76:5e:c6:4c:fe:31:25:cd:ea:ec:3e:ff:db:9c:
                    67:75:ea:b0:68:f3:7f:2a:f4:f1:0c:1d:62:86:ca:
                    3e:b1:14:fa:4a:e9:78:29:4e:62:a1:ea:d2:81:99:
                    f4:9d:1d:bc:81:da:6a:6c:ab:d3:13:ec:d5:24:f9:
                    19:c1:40:ef:e6:1b:ce:84:58:73:4c:fc:bb:e6:2b:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:82:97:5F:71:17:69:85:70:9B:54:D0:9D:9B:5B:EC:39:B4:B8:6A
            X509v3 Authority Key Identifier:
                keyid:13:12:6F:A0:D7:42:92:D4:67:DC:18:AA:43:D7:8A:ED:22:D6:E6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a072744812c9d37a960b2eaee018f541354a6d6b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/cb9a422a6e9c85ce33edfb053a9effeabd050206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43153f92-a8f1-4794-bb75-d111cdf58cff/a072744812c9d37a960b2eaee018f541354a6d6b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.192.0/22
                IPv6:
                  2803:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:14:46:10:3b:88:ea:77:4c:0f:a2:19:d4:2b:ea:e1:18:71:
         04:a3:7c:b0:10:d4:db:b7:a7:53:7e:d0:c2:79:5f:57:82:e4:
         26:93:c6:ef:87:dd:35:ae:06:0e:b5:f9:21:64:89:72:75:bb:
         e8:34:31:27:7c:87:da:62:24:1b:4f:cb:5f:50:e5:ad:25:ad:
         a1:6e:05:1b:3c:e5:22:e4:10:bd:84:43:2f:95:6f:f9:34:84:
         72:08:7f:37:15:d7:2f:09:64:49:c4:be:e4:38:21:66:f7:3d:
         d7:2b:a8:65:20:bc:b6:7d:fa:cd:c3:21:e6:cf:84:c5:7b:e9:
         c7:94:95:6d:a0:c5:c8:31:80:23:fc:82:47:b0:2d:75:ad:4a:
         4a:d7:ed:1b:5a:f0:0e:c0:88:7d:b4:75:8a:b4:53:1c:36:d1:
         be:1c:a9:09:57:39:77:7f:9d:56:1d:bb:dd:f0:ea:90:37:ac:
         97:87:d6:29:d8:c1:57:0d:4f:e5:ef:5f:fb:ba:85:c8:6c:39:
         0e:56:ae:79:d7:c6:c0:c9:40:39:43:07:eb:86:5f:2f:a9:16:
         be:54:44:77:40:6b:e0:a9:61:be:a7:1d:56:bb:67:b8:30:a4:
         7c:32:fd:70:b4:d7:6d:03:1f:a7:96:cd:dc:1d:c7:6d:d8:fd:
         2b:c9:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----