Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa
File:                     acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa (raw, json)
Hash identifier:          HKSIRYw+yyTV0GNRtwShYUh7gaM9GH/ryjmVhZm9ppM=
Subject key identifier:   A8:EF:64:8B:37:5E:41:99:D5:F7:EF:EC:40:81:76:12:28:8E:F1:B0
Certificate issuer:       /CN=d8f699f3525b39056b0d16e9f4fb58026a19a277
Certificate serial:       1418FE
Authority key identifier: 69:38:49:00:80:EB:4C:0E:1A:D8:53:F7:3F:ED:A5:8C:98:62:CF:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f699f3525b39056b0d16e9f4fb58026a19a277.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa
Signing time:             Thu 03 Aug 2023 19:54:52 +0000
ROA not before:           Wed 02 Aug 2023 19:54:52 +0000
ROA not after:            Sun 03 Aug 2025 19:54:52 +0000
asID:                     265828
IP address blocks:        45.71.196.0/22 maxlen: 23
                          2803:4c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317118 (0x1418fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f699f3525b39056b0d16e9f4fb58026a19a277
        Validity
            Not Before: Aug  2 19:54:52 2023 GMT
            Not After : Aug  3 19:54:52 2025 GMT
        Subject: CN=acb677542f0dec1cbcc656f42cbf7923f673d0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:6a:c5:3e:8d:cd:b9:1d:6d:48:13:3e:7d:
                    c5:17:05:dc:bf:75:7d:60:74:d2:a2:63:65:1a:24:
                    44:55:01:26:59:2f:18:f4:cc:f7:48:ac:5f:fa:29:
                    e9:40:aa:ef:7a:a1:61:d1:7a:0d:e8:43:6b:30:6d:
                    55:af:88:6f:2d:dd:2a:f2:ad:57:05:23:8f:e0:1a:
                    32:d7:c8:f7:48:c8:5e:0e:7c:ae:58:8b:92:80:42:
                    5e:95:1f:be:34:e7:a9:ca:d3:a5:9f:4e:d2:e2:42:
                    31:90:9c:81:88:7e:d0:a3:01:eb:5d:b9:4e:44:79:
                    6c:0a:a3:c5:eb:ac:34:b7:2a:40:3c:b6:63:5b:e7:
                    fa:f7:10:ac:5f:a5:35:fa:20:0c:64:66:65:11:f5:
                    07:39:99:47:5b:55:4a:78:cf:be:e9:18:c3:83:6e:
                    4f:ba:26:b0:3b:04:04:2a:77:7e:44:34:06:f3:e4:
                    18:d1:51:0c:a3:e0:1b:e9:57:61:93:5e:a1:e5:20:
                    78:67:2e:62:4c:61:06:63:32:7a:50:bd:e9:78:14:
                    7e:cd:55:1f:57:dd:aa:88:86:e7:e6:d9:d9:08:e6:
                    e2:76:1a:1d:d1:d1:75:3e:0a:13:63:7f:a5:05:ea:
                    60:1d:d1:4b:4f:6d:cb:90:90:8b:fd:54:68:c3:e9:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:64:8B:37:5E:41:99:D5:F7:EF:EC:40:81:76:12:28:8E:F1:B0
            X509v3 Authority Key Identifier:
                keyid:69:38:49:00:80:EB:4C:0E:1A:D8:53:F7:3F:ED:A5:8C:98:62:CF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f699f3525b39056b0d16e9f4fb58026a19a277.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/acb677542f0dec1cbcc656f42cbf7923f673d0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a87288c-dc34-400d-ba64-dce6349ee941/d8f699f3525b39056b0d16e9f4fb58026a19a277.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.196.0/22
                IPv6:
                  2803:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:af:ae:e9:9c:db:76:de:f2:91:c9:82:3f:8f:77:9d:9f:
         da:19:5c:0f:15:ab:f2:79:7f:58:cb:6a:45:f7:67:84:03:58:
         98:cd:4c:1b:4c:6a:e0:a8:b9:90:92:f4:52:13:d7:57:4c:91:
         e8:7a:7b:84:fb:6f:75:b2:2d:69:7e:d8:bb:34:ff:51:37:af:
         a3:52:27:43:eb:b9:b3:be:fe:f6:62:9a:91:40:69:96:6a:eb:
         e8:af:60:e3:5b:c8:e0:0d:a9:9b:22:87:5f:ab:5d:76:61:a1:
         ff:ce:f5:54:33:d9:77:f0:c1:15:5e:36:ae:97:61:d7:00:17:
         53:a9:32:37:d1:3a:22:2b:0f:37:93:a5:ba:22:6d:8c:eb:c9:
         3a:ff:85:fd:5b:e2:f2:ac:37:07:f1:14:11:4a:fc:84:f8:d9:
         72:9a:8e:79:19:33:39:28:64:2b:ba:0b:b4:5d:97:89:ee:57:
         a6:c5:c4:3d:41:d7:14:ad:f9:ef:7b:0d:8c:79:1a:4c:b5:56:
         da:77:12:ec:3f:08:98:34:e2:67:dc:07:f3:d8:7e:74:ba:88:
         62:26:ee:8a:71:9d:df:f2:61:1d:56:b2:93:12:fc:6b:5e:e2:
         00:2a:c5:c9:d0:a4:ce:52:6d:ff:72:25:67:ec:74:6a:10:a4:
         cb:be:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----