Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/0f0fc66cac071db17101d64c80714b7c0de525e2.roa
File:                     0f0fc66cac071db17101d64c80714b7c0de525e2.roa (raw, json)
Hash identifier:          vRhof8MkGcaJlMvDAhhvu09EYHUYUaMZHEcUp9hwO3Q=
Subject key identifier:   81:5E:34:00:3D:9F:8A:87:AC:A3:4C:49:A8:D4:0C:08:52:F6:38:EC
Certificate issuer:       /CN=da7e27e0f50f435ffa84dfe35fec4a82d9aabc74
Certificate serial:       122450
Authority key identifier: 84:F9:41:5E:C6:0C:E3:5D:42:25:DA:3F:3E:03:ED:55:5F:DC:FE:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e27e0f50f435ffa84dfe35fec4a82d9aabc74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/0f0fc66cac071db17101d64c80714b7c0de525e2.roa
Signing time:             Tue 03 Oct 2023 08:30:07 +0000
ROA not before:           Mon 02 Oct 2023 08:30:07 +0000
ROA not after:            Wed 01 Oct 2025 08:30:07 +0000
asID:                     266827
IP address blocks:        45.237.168.0/22 maxlen: 22
                          2803:d4a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188944 (0x122450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7e27e0f50f435ffa84dfe35fec4a82d9aabc74
        Validity
            Not Before: Oct  2 08:30:07 2023 GMT
            Not After : Oct  1 08:30:07 2025 GMT
        Subject: CN=0f0fc66cac071db17101d64c80714b7c0de525e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:60:dd:0a:3e:30:e0:f5:2b:2d:ba:65:bc:
                    b1:6f:c9:4d:78:c0:2b:91:1f:1e:c3:14:d5:6c:81:
                    0c:bf:04:e1:d2:1d:92:20:e6:91:14:07:e9:e8:46:
                    93:81:7c:2c:bd:3e:5e:14:dc:0e:52:d0:30:f3:7b:
                    4d:e5:69:08:c3:d8:65:05:dc:64:e3:8c:15:a6:ed:
                    4d:b6:3d:f3:29:22:30:56:6b:0e:7f:91:f4:91:02:
                    4d:41:79:35:e8:50:b9:45:f2:e3:90:bd:72:ca:7f:
                    58:36:fb:7c:67:55:0a:e5:91:85:d4:b2:5d:de:b1:
                    4e:4e:80:4a:59:6d:95:ba:87:b6:0b:da:d1:76:d3:
                    03:27:78:9f:09:2c:04:5c:81:cd:f4:c4:6f:ba:10:
                    d9:2a:35:11:82:a3:68:9b:7c:3a:4b:bf:f6:50:da:
                    05:39:c3:8a:69:4f:ac:90:08:57:01:a0:04:c0:be:
                    2f:f9:9b:7c:36:6b:38:c2:30:d0:51:a1:02:c4:cc:
                    2b:a4:7a:22:02:c6:9d:3d:8d:25:b3:0d:7b:18:e2:
                    53:1d:12:7a:ef:14:ac:5a:53:25:7f:f4:70:79:43:
                    40:65:51:a7:7c:11:af:f0:d8:9b:78:5e:11:4f:1e:
                    e4:1f:bf:47:48:7e:f1:d8:7c:ba:8b:41:0d:72:eb:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:34:00:3D:9F:8A:87:AC:A3:4C:49:A8:D4:0C:08:52:F6:38:EC
            X509v3 Authority Key Identifier:
                keyid:84:F9:41:5E:C6:0C:E3:5D:42:25:DA:3F:3E:03:ED:55:5F:DC:FE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e27e0f50f435ffa84dfe35fec4a82d9aabc74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/0f0fc66cac071db17101d64c80714b7c0de525e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/da7e27e0f50f435ffa84dfe35fec4a82d9aabc74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.168.0/22
                IPv6:
                  2803:d4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:45:8b:68:fc:b5:b5:30:a5:ca:3a:8f:e9:fd:c9:b3:cf:a7:
         37:b8:ca:90:0a:56:8e:44:bd:dc:13:69:18:67:c6:bc:0f:6f:
         2c:ad:37:97:2b:c1:ee:79:4a:94:fa:ed:b8:61:38:0e:fb:99:
         28:6c:58:87:be:5d:6a:0a:b4:81:07:ac:75:6b:99:9e:bd:47:
         e6:37:cc:4f:94:c0:90:0f:d1:9b:6c:9e:d7:bd:6d:2a:0c:35:
         37:70:fc:ee:de:e5:6f:39:94:d8:b3:70:17:81:4e:6d:27:ca:
         fb:28:86:5d:8a:38:63:97:a2:8f:da:14:ae:d5:58:63:0f:5f:
         28:08:7f:8f:7b:8c:d3:ef:de:bb:1a:8d:00:2e:31:fa:3b:91:
         ec:9f:28:b8:ec:24:09:a8:e0:f8:d0:80:a9:f6:24:8a:48:de:
         36:2f:a1:30:f2:62:14:b4:7e:86:d6:2d:d5:8e:7e:9f:59:5c:
         a3:87:67:96:6d:74:1e:3a:7d:91:ea:88:b0:ea:7f:98:b2:99:
         a7:22:0d:9a:bf:4e:ed:08:9b:b8:75:d4:3d:13:54:ce:9a:d2:
         e0:69:25:15:45:a4:45:1a:2c:64:8a:33:07:8c:9d:3c:cf:94:
         71:3e:af:d5:45:a7:45:b7:e7:e9:3e:f3:e8:6a:6d:d3:d1:10:
         c9:8c:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----