Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/79aed25ff1988300a3fd3379874eacaa07acfe21.roa
File:                     79aed25ff1988300a3fd3379874eacaa07acfe21.roa (raw, json)
Hash identifier:          Sp0KRWxxAA39wB4OwBW20sAE96+r1hHihjbdXEq5zBM=
Subject key identifier:   42:25:96:6E:B1:1D:8D:A3:7E:E8:F3:E0:F2:07:A9:DC:07:AD:CB:F4
Certificate issuer:       /CN=53eb04993eae451128bf77fb62927c254beec65e
Certificate serial:       1326EA
Authority key identifier: E3:40:1A:4D:A4:55:FA:5E:47:1B:D2:AE:AD:78:2B:88:87:63:F4:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53eb04993eae451128bf77fb62927c254beec65e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/79aed25ff1988300a3fd3379874eacaa07acfe21.roa
Signing time:             Thu 23 Nov 2023 07:30:00 +0000
ROA not before:           Thu 23 Nov 2023 07:30:00 +0000
ROA not after:            Sat 22 Nov 2025 07:30:00 +0000
asID:                     272009
IP address blocks:        45.226.59.0/24 maxlen: 24
                          2803:910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255146 (0x1326ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eb04993eae451128bf77fb62927c254beec65e
        Validity
            Not Before: Nov 23 07:30:00 2023 GMT
            Not After : Nov 22 07:30:00 2025 GMT
        Subject: CN=79aed25ff1988300a3fd3379874eacaa07acfe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:00:41:0d:65:bb:4c:8e:ec:ba:96:3f:82:
                    e6:0d:df:25:31:8e:cf:ed:5f:fb:7a:27:37:b6:9a:
                    31:43:7e:1f:12:c4:ca:97:e5:27:a8:fa:33:a1:a6:
                    73:b9:a7:30:c6:8a:4a:65:72:d8:b1:21:18:27:e2:
                    35:72:4f:7c:0b:a8:7d:45:e3:f7:6f:fd:32:eb:ab:
                    b9:7a:1f:d6:b4:bf:19:95:3c:e8:a4:a1:cb:77:00:
                    b0:38:dd:bd:a5:0c:a4:77:98:e8:0a:91:2e:9c:bd:
                    74:77:6b:43:94:37:b9:59:7e:55:17:48:8c:9a:55:
                    32:32:87:7f:e8:75:c3:d7:7a:d3:86:e2:48:a7:3d:
                    df:8a:05:08:1d:39:64:f2:b3:d6:14:8d:18:fa:b7:
                    79:fa:59:3e:d6:27:cc:54:75:14:73:ae:f4:d8:ed:
                    29:1e:eb:b6:8e:93:41:46:3e:ba:7b:4c:1f:78:e2:
                    03:8e:6b:f2:d4:c2:3b:0d:b0:c3:1c:20:7d:73:ca:
                    29:e7:5e:83:1d:b5:31:cf:09:a8:31:22:7b:f9:40:
                    c5:b0:01:99:5f:20:23:bc:0d:be:da:7c:7a:47:18:
                    16:2a:ac:11:3c:aa:a0:d7:cc:44:e2:65:0e:e6:28:
                    4b:79:3c:a8:c1:9e:95:cb:c7:77:2f:b2:09:4d:fa:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:96:6E:B1:1D:8D:A3:7E:E8:F3:E0:F2:07:A9:DC:07:AD:CB:F4
            X509v3 Authority Key Identifier:
                keyid:E3:40:1A:4D:A4:55:FA:5E:47:1B:D2:AE:AD:78:2B:88:87:63:F4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53eb04993eae451128bf77fb62927c254beec65e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/79aed25ff1988300a3fd3379874eacaa07acfe21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/53eb04993eae451128bf77fb62927c254beec65e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:c1:45:88:14:41:8f:2a:d7:87:ae:f1:2b:c5:96:6f:da:
         75:1b:7a:96:3a:c4:7d:49:45:6d:db:ae:9a:cb:78:ae:b4:31:
         cf:8b:06:14:b5:f9:1c:6e:d6:aa:a2:e9:5e:dd:f4:8c:f5:b3:
         bf:8b:42:19:4b:9a:33:2c:c3:5e:58:7c:ca:4a:94:30:fb:4d:
         8f:c9:02:d6:38:7a:62:fc:4f:a6:d3:6f:b7:d5:48:5d:fc:f1:
         6f:b7:85:d4:ef:0e:56:fd:38:31:a0:f4:fe:5d:75:ab:5a:cc:
         a5:d2:a4:62:1a:f5:09:69:6d:e9:72:0b:28:b6:04:98:7d:df:
         9a:14:f3:e4:c2:d8:ce:b3:35:d9:df:1c:15:f6:8b:d4:22:19:
         9a:a4:c2:c4:3d:de:ec:d7:d6:a3:f5:d7:4b:9f:04:3f:77:6f:
         10:5c:db:24:b0:72:99:a6:64:b5:95:5e:10:db:23:97:60:0c:
         25:ca:22:8d:bb:e4:a8:26:a7:85:60:b1:32:00:58:f1:2a:29:
         0e:10:b3:f8:29:4d:1c:5f:00:1d:22:19:1b:24:a4:53:79:a4:
         5a:b1:3f:46:ef:e4:15:f6:e1:57:2d:a6:df:d4:2c:14:11:f3:
         bd:ab:4b:74:fe:0e:6b:34:91:e4:4d:a3:09:cd:14:1b:a1:34:
         8f:e2:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----