Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/52b18ed38a6e29c82f44a62271be504ef22f9a85.roa
File:                     52b18ed38a6e29c82f44a62271be504ef22f9a85.roa (raw, json)
Hash identifier:          ZFuppLu1hGzHPwo0MXwKztorIZOwqRJWVCYcWTRpHSc=
Subject key identifier:   8A:42:95:B2:D4:51:C3:B9:83:E7:74:6E:7E:AD:43:1B:40:46:85:0F
Certificate issuer:       /CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Certificate serial:       18929C
Authority key identifier: C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/52b18ed38a6e29c82f44a62271be504ef22f9a85.roa
Signing time:             Mon 31 Jul 2023 20:19:32 +0000
ROA not before:           Sun 30 Jul 2023 20:19:32 +0000
ROA not after:            Thu 31 Jul 2025 20:19:32 +0000
asID:                     267815
IP address blocks:        45.173.72.0/22 maxlen: 24
                          2803:b060::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610396 (0x18929c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beb9fd789670f1c0912cb57347edb76d8534d3
        Validity
            Not Before: Jul 30 20:19:32 2023 GMT
            Not After : Jul 31 20:19:32 2025 GMT
        Subject: CN=52b18ed38a6e29c82f44a62271be504ef22f9a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:7b:2c:cd:ec:60:0c:1c:43:77:07:6d:59:
                    88:f0:01:ec:e7:cc:f5:69:78:1e:c7:eb:86:24:db:
                    43:b9:80:fe:b7:7d:7d:56:e6:62:93:c2:cf:09:24:
                    dd:2b:01:ef:fb:db:fd:98:e8:a7:50:37:ff:91:33:
                    88:4f:06:98:25:c0:e4:98:d4:f2:71:7b:ad:70:20:
                    ed:0f:5b:e5:e2:93:b2:1e:43:c8:6f:04:c2:c3:e0:
                    b1:de:4b:c7:93:1f:e3:ef:77:6c:7f:15:58:d7:c6:
                    e1:30:b7:79:b1:97:eb:b5:5f:b0:ca:2b:f3:83:87:
                    af:02:4d:bb:bb:d3:80:bb:b7:9a:f5:ed:c5:be:75:
                    62:3b:63:4b:7f:4b:a7:38:b0:35:cd:00:b9:27:11:
                    7f:d0:46:4c:6f:d3:96:db:55:41:2d:ab:ad:a3:c5:
                    99:cd:13:c9:6f:35:f8:18:08:e9:39:e2:56:ff:a8:
                    99:6f:e9:3d:86:db:d3:8d:c1:8b:f1:35:66:43:bd:
                    66:a6:89:ca:21:8f:36:85:a1:8c:22:6d:03:ae:51:
                    a4:ed:40:76:6d:e3:f3:8d:99:be:a0:08:47:76:17:
                    97:f4:79:fa:4d:47:0a:f4:f8:32:81:d9:5e:42:63:
                    31:bc:29:ef:19:d7:09:1f:72:7f:56:32:4e:4f:69:
                    c7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:95:B2:D4:51:C3:B9:83:E7:74:6E:7E:AD:43:1B:40:46:85:0F
            X509v3 Authority Key Identifier:
                keyid:C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/52b18ed38a6e29c82f44a62271be504ef22f9a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/62beb9fd789670f1c0912cb57347edb76d8534d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.72.0/22
                IPv6:
                  2803:b060::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:7b:56:2d:d6:7f:d1:45:6a:3a:a1:37:2a:d6:7d:f2:e5:
         f4:09:54:17:b6:15:9d:ae:87:68:e3:71:3d:36:39:f9:50:44:
         b8:0a:58:31:91:5b:e0:e1:af:9f:2d:21:02:c4:27:7f:4e:9c:
         93:a6:24:d5:0c:d6:ed:a1:45:d2:64:7c:e1:c1:0c:1b:cf:9c:
         77:68:8c:75:70:86:92:0e:54:9c:08:9f:4a:ba:9c:96:1a:6a:
         2e:6f:95:f1:5b:15:53:08:1a:7f:58:4b:0b:21:d2:e0:15:01:
         62:06:d0:1f:1d:65:2a:81:36:6e:8a:e9:8d:e9:5b:08:92:a8:
         5f:44:35:00:f2:4c:e0:96:cc:f9:26:94:b0:ca:74:01:fb:85:
         06:eb:49:64:06:82:d2:0e:83:4b:ad:99:1f:17:f9:3e:54:3e:
         62:bf:b6:16:bf:1d:69:a5:3c:12:78:06:28:4b:d1:2b:d3:0f:
         f4:60:28:f2:ed:de:6b:85:81:07:ff:c1:90:81:5e:fa:64:ec:
         10:e2:6f:7c:56:fd:1c:36:e5:e9:d3:32:ba:0d:3e:7b:a3:d2:
         ff:38:79:c4:5f:9b:72:b1:ac:07:6b:50:0d:48:a8:55:9f:af:
         d0:9d:7b:eb:e6:3c:5e:dd:d6:23:c6:d3:39:e1:57:71:5b:f2:
         99:fc:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----