Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/01380ff78937771d1b9501df7a22cec4e4f19312.roa
File:                     01380ff78937771d1b9501df7a22cec4e4f19312.roa (raw, json)
Hash identifier:          TiB1SzMgwRr8uKeE6lA8L/FUmDmJXC6/LV+9oka8GQA=
Subject key identifier:   C4:78:0E:6A:57:1C:11:46:A9:41:6B:04:0F:6F:BF:30:63:CF:31:BF
Certificate issuer:       /CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
Certificate serial:       01F835
Authority key identifier: F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/01380ff78937771d1b9501df7a22cec4e4f19312.roa
Signing time:             Wed 17 May 2023 15:46:21 +0000
ROA not before:           Tue 16 May 2023 15:46:21 +0000
ROA not after:            Sat 17 May 2025 15:46:21 +0000
asID:                     269746
IP address blocks:        45.182.41.0/24 maxlen: 24
                          45.181.204.0/23 maxlen: 24
                          2803:3960:1::/48 maxlen: 48
                          2803:3960:2::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129077 (0x1f835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
        Validity
            Not Before: May 16 15:46:21 2023 GMT
            Not After : May 17 15:46:21 2025 GMT
        Subject: CN=01380ff78937771d1b9501df7a22cec4e4f19312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:dc:a9:70:f7:ff:40:02:b0:21:a9:fe:f3:
                    69:a0:33:1d:01:c9:54:02:de:84:b0:98:d3:0a:1e:
                    f2:c8:fc:c0:d4:3f:a9:17:8b:3f:fe:1a:b7:26:ef:
                    e8:48:51:17:4c:ed:22:3b:8d:98:1b:99:af:94:8a:
                    27:f2:dd:d1:73:a9:13:14:7e:e1:b4:da:d5:9f:5c:
                    07:df:fc:41:b3:d5:f0:c4:da:83:0f:ee:50:6e:00:
                    e6:83:48:19:39:13:d4:f0:09:89:bc:98:63:8b:6f:
                    c6:19:ed:09:0d:c0:1a:53:b4:ae:cf:6f:6b:8b:69:
                    ce:d6:4b:89:d6:41:ba:87:d9:b1:48:9e:3a:d0:25:
                    0b:a3:be:e0:4a:14:d3:4e:b8:85:a2:e5:a1:dc:e6:
                    10:99:20:20:09:c8:06:93:4c:26:67:a0:89:b9:38:
                    3c:ce:6c:14:69:21:3e:a8:5c:b8:af:35:63:2c:0a:
                    3f:a2:85:e7:32:04:ed:fa:6d:a7:0e:b7:22:bf:55:
                    c3:32:b9:a0:cc:bc:bf:e2:08:ad:c9:6d:4f:d7:85:
                    f2:70:a9:7a:c5:08:52:ae:f2:75:62:96:86:5c:4e:
                    bc:fd:16:4d:1d:95:96:76:6b:10:5c:75:d6:55:59:
                    6c:ba:0f:ed:35:d7:12:cd:32:be:4f:6d:85:87:52:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:78:0E:6A:57:1C:11:46:A9:41:6B:04:0F:6F:BF:30:63:CF:31:BF
            X509v3 Authority Key Identifier:
                keyid:F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/01380ff78937771d1b9501df7a22cec4e4f19312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23
                  45.182.41.0/24
                IPv6:
                  2803:3960:1::-2803:3960:3:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:a6:dd:58:f7:dc:fc:1a:24:37:98:dc:21:5a:59:99:49:95:
         b9:66:5f:f0:79:09:04:3e:5a:f1:26:86:f8:7f:38:65:f5:53:
         1a:b4:84:83:e6:e5:48:88:f1:63:08:57:84:a2:cc:49:b1:dc:
         30:77:26:23:bb:55:66:8b:73:bb:3f:38:f1:c0:bb:31:32:4f:
         27:9c:70:94:97:e1:d3:47:20:cf:1e:ad:66:f0:8a:1b:c5:a6:
         49:5e:b7:51:a1:93:77:4a:1f:80:04:6a:3a:fb:c6:1e:c7:28:
         12:2b:6f:b4:af:6b:b9:73:95:85:4b:7f:d5:bb:3f:c8:9a:12:
         5b:57:ca:7f:19:0f:f5:43:b8:0a:a4:3e:c8:81:c3:01:54:24:
         c7:96:1e:d8:b4:45:5d:37:59:d5:71:8f:bd:97:7e:08:c2:ed:
         c1:5d:77:e4:9e:c3:69:b1:ef:ff:de:ea:09:4a:c3:bb:32:8f:
         b7:e8:b5:fb:02:ac:2d:53:c6:97:dc:ea:69:c2:2d:df:3d:6c:
         e7:2a:3e:b7:69:43:f5:d1:f0:d6:65:6e:f0:9e:61:da:ce:c3:
         a9:4a:5d:b0:66:5c:1c:37:8e:e2:75:dd:c3:03:e8:ee:1d:a8:
         de:88:15:78:77:7b:5e:4c:1f:e2:9f:5c:7b:dc:c2:35:1a:21:
         e4:6a:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----