Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/02f76df781f71751074075d6c36dfc4b30c9733f.roa
File:                     02f76df781f71751074075d6c36dfc4b30c9733f.roa (raw, json)
Hash identifier:          hNZF4n4cBbpRV/sc439Tmxl6idzwZlb6lKaH62Kp9sA=
Subject key identifier:   30:9F:52:9B:A8:85:BB:62:22:51:26:77:0F:2C:32:25:D6:F6:0B:F2
Certificate issuer:       /CN=e5978807b07e58b52b1198ef3101e155c00a7924
Certificate serial:       22F5ED
Authority key identifier: 81:58:E7:02:78:01:5F:4E:FA:04:58:C3:3A:11:A4:C2:EA:7A:48:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5978807b07e58b52b1198ef3101e155c00a7924.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/02f76df781f71751074075d6c36dfc4b30c9733f.roa
Signing time:             Sun 17 Sep 2023 02:22:31 +0000
ROA not before:           Sat 16 Sep 2023 02:22:31 +0000
ROA not after:            Wed 17 Sep 2025 02:22:31 +0000
asID:                     266904
IP address blocks:        45.162.72.0/22 maxlen: 24
                          2803:f6a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291181 (0x22f5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5978807b07e58b52b1198ef3101e155c00a7924
        Validity
            Not Before: Sep 16 02:22:31 2023 GMT
            Not After : Sep 17 02:22:31 2025 GMT
        Subject: CN=02f76df781f71751074075d6c36dfc4b30c9733f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:52:f2:cf:12:08:20:73:2f:d3:8f:c0:2c:10:
                    72:f6:d4:b1:d1:2d:a2:03:2a:17:5d:e9:a7:49:05:
                    10:56:8e:0d:8c:ed:17:2f:43:17:1b:f3:fc:b1:ff:
                    a2:62:32:43:fa:7c:59:85:c1:b7:68:f8:ed:02:f1:
                    98:ed:9b:87:df:b9:0b:0d:28:96:03:f6:d2:38:c1:
                    ba:98:55:91:06:f7:7c:63:cb:33:1a:d7:c4:86:af:
                    b2:0a:a7:4a:f0:0d:0f:16:ea:5f:fc:50:d1:49:db:
                    35:26:55:89:ff:13:95:4c:8d:42:bc:1b:73:75:29:
                    d9:3e:12:23:28:8c:cc:c0:2c:88:be:5d:22:d8:cf:
                    0d:df:45:a7:74:95:4e:2a:eb:61:b9:89:a8:5d:18:
                    f3:1c:82:ed:ff:c9:b7:88:e6:15:28:74:81:f1:59:
                    03:9b:10:92:8b:ea:59:0b:00:32:76:9a:7e:0a:05:
                    64:ba:79:06:21:81:71:1f:4d:57:ec:d4:c9:01:02:
                    6f:12:c0:a5:23:90:e8:b1:be:0d:57:39:f8:72:96:
                    6a:4f:04:1d:d7:4b:0a:f6:e2:06:55:e3:d7:ae:a5:
                    ab:d2:59:37:35:e3:3c:0e:60:6f:89:08:d4:3e:d1:
                    97:af:fe:ee:0e:af:68:15:dd:b4:26:d5:c4:d7:f4:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:52:9B:A8:85:BB:62:22:51:26:77:0F:2C:32:25:D6:F6:0B:F2
            X509v3 Authority Key Identifier:
                keyid:81:58:E7:02:78:01:5F:4E:FA:04:58:C3:3A:11:A4:C2:EA:7A:48:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5978807b07e58b52b1198ef3101e155c00a7924.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/02f76df781f71751074075d6c36dfc4b30c9733f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/e5978807b07e58b52b1198ef3101e155c00a7924.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.72.0/22
                IPv6:
                  2803:f6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:57:84:c1:a0:fa:ec:67:ac:72:db:72:36:f7:1e:5b:da:39:
         22:c4:9c:a6:3b:75:2a:3f:33:63:1e:ab:20:f2:93:7d:6b:05:
         cf:55:15:06:e0:57:07:26:ab:54:19:9e:e7:d3:4e:d2:d1:66:
         88:da:8d:8d:fb:c5:36:3e:56:d8:a8:02:57:4f:94:35:14:15:
         d9:9f:9f:27:49:95:02:5b:51:3a:06:1e:f9:a1:01:95:fc:6c:
         8c:b1:41:45:e0:fc:cc:15:78:a3:a7:60:7a:88:a9:05:f8:14:
         c2:7e:8b:45:2b:2c:f3:8a:e2:0e:12:4a:af:c8:d0:67:7e:09:
         e8:c2:75:23:8c:df:fe:3e:cf:bd:3e:50:4b:67:e2:77:f5:82:
         a1:fc:76:ca:1e:c3:ec:01:ec:96:18:e5:f4:66:4b:e2:64:22:
         a8:ea:f8:fa:9a:4a:db:62:bd:85:e5:65:53:36:d0:00:ab:a8:
         25:be:de:3c:7e:dc:cf:df:3f:37:6d:38:16:7c:26:3f:35:61:
         bc:66:2c:a5:6a:0b:9f:c2:49:01:86:da:7e:66:bc:38:d7:ac:
         ce:67:bf:28:c8:0b:e6:a3:a7:c5:ee:82:c3:92:8c:fe:4d:0a:
         98:fa:20:6f:f3:91:f1:98:c6:67:bc:5d:a8:0b:66:7d:87:53:
         ad:b2:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----