Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45683f38-0af7-4975-906b-eacc81510a56/b907b8424d92a7d2c9a96a0fcc5677025ac48701.roa
File:                     b907b8424d92a7d2c9a96a0fcc5677025ac48701.roa (raw, json)
Hash identifier:          4Op5cjY2r5dK7KRfBf6Mdwq+XjytGzQFsK+FOeOB6EI=
Subject key identifier:   B5:A7:D0:B1:ED:EF:4C:06:18:29:88:5F:E2:CA:DF:52:0A:61:70:1C
Certificate issuer:       /CN=a7de9bf86c9b5287bad7913d3c340f2267d596cb
Certificate serial:       11B121
Authority key identifier: 6E:A8:5E:61:C4:71:DB:4A:5F:EA:92:03:D4:D0:5F:A9:32:06:89:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7de9bf86c9b5287bad7913d3c340f2267d596cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45683f38-0af7-4975-906b-eacc81510a56/b907b8424d92a7d2c9a96a0fcc5677025ac48701.roa
Signing time:             Wed 02 Aug 2023 08:30:01 +0000
ROA not before:           Tue 01 Aug 2023 08:30:01 +0000
ROA not after:            Thu 31 Jul 2025 08:30:01 +0000
asID:                     266887
IP address blocks:        45.160.188.0/22 maxlen: 24
                          2803:46a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159457 (0x11b121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7de9bf86c9b5287bad7913d3c340f2267d596cb
        Validity
            Not Before: Aug  1 08:30:01 2023 GMT
            Not After : Jul 31 08:30:01 2025 GMT
        Subject: CN=b907b8424d92a7d2c9a96a0fcc5677025ac48701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:cd:de:37:bf:d6:08:dc:cf:8c:a6:46:86:
                    6d:53:66:0c:47:f9:27:b5:8e:ee:31:2f:2d:ae:c3:
                    84:0a:43:48:17:b8:70:31:ea:44:92:3e:49:20:53:
                    e9:bc:b4:e9:3d:17:a6:cf:42:bd:aa:ff:66:3e:cc:
                    af:59:81:90:b5:ac:35:14:08:8e:67:6e:c7:bf:6b:
                    17:8e:1d:30:f5:e3:25:56:d6:0f:5c:2f:ed:f7:1b:
                    50:bd:e3:8a:19:8a:e0:85:34:6d:62:29:5e:9b:cd:
                    5a:2b:90:69:28:e8:0b:7b:86:f3:71:7b:95:f5:ab:
                    57:d4:b4:6a:91:aa:e2:ba:57:0e:1e:76:bd:20:a0:
                    47:6a:10:3b:80:e3:37:b6:8b:d2:33:d5:77:33:5a:
                    90:77:22:3d:6b:c5:cb:3d:d0:0d:77:bf:31:ab:69:
                    ab:b6:f0:28:d7:81:bd:f7:f5:c5:f3:9f:e8:4c:4c:
                    37:09:bc:fb:98:65:86:d0:bd:96:1b:77:52:75:b8:
                    70:7f:a6:d8:86:fc:08:b0:d1:00:ae:45:85:df:e6:
                    3e:20:45:06:4f:36:aa:47:f8:eb:12:5b:dc:f0:a2:
                    22:c1:53:de:ce:73:10:fe:ed:5d:a2:7b:c6:21:40:
                    08:eb:4d:a9:94:da:8a:7d:9c:6d:90:a4:72:6c:98:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A7:D0:B1:ED:EF:4C:06:18:29:88:5F:E2:CA:DF:52:0A:61:70:1C
            X509v3 Authority Key Identifier:
                keyid:6E:A8:5E:61:C4:71:DB:4A:5F:EA:92:03:D4:D0:5F:A9:32:06:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7de9bf86c9b5287bad7913d3c340f2267d596cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45683f38-0af7-4975-906b-eacc81510a56/b907b8424d92a7d2c9a96a0fcc5677025ac48701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45683f38-0af7-4975-906b-eacc81510a56/a7de9bf86c9b5287bad7913d3c340f2267d596cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.188.0/22
                IPv6:
                  2803:46a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:da:ce:78:c5:cb:5a:83:a8:75:b9:de:57:c1:76:f9:84:
         7c:13:d6:e1:3f:cc:bd:a7:38:4c:87:52:ea:33:dd:d7:42:d6:
         af:dd:ee:83:c8:f8:db:06:38:10:f8:c8:41:3a:09:07:5f:b8:
         65:29:a0:e3:92:8e:91:9b:18:02:f8:c5:bf:80:b6:a6:a4:aa:
         8c:da:bf:a5:c7:a5:66:a5:cb:43:5e:c2:f1:ea:7d:05:70:e5:
         f3:c8:5f:3c:6b:5d:f5:c5:19:b5:11:4d:bd:91:47:d1:37:54:
         a8:e4:e1:16:6e:7f:39:65:32:5e:50:22:4f:bb:92:43:07:d8:
         38:e0:19:0d:96:b8:ee:86:26:46:79:8d:fe:c8:9b:57:29:ed:
         e6:d4:d2:ce:39:94:e9:20:1d:08:57:f1:28:de:f5:5e:af:72:
         d5:07:f4:31:27:44:9f:b7:ae:ae:ad:c5:9c:ab:69:f7:a2:a7:
         ce:99:d5:a8:31:71:d9:8c:9f:12:9a:97:88:a4:e2:28:d7:e0:
         64:c0:7f:8c:e6:fc:ee:04:1a:98:16:3b:53:81:6f:95:39:00:
         be:27:e8:08:e6:51:79:dd:36:ba:c5:67:c6:01:02:35:71:65:
         8b:1b:b6:bd:c0:a8:e1:a6:d8:07:9d:28:13:80:db:83:53:6e:
         8e:99:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----