Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/e7903dec7309ccf51254ea9d09f8c03c38a2843a.roa
File:                     e7903dec7309ccf51254ea9d09f8c03c38a2843a.roa (raw, json)
Hash identifier:          Wl/BnIx1sU9JOKgo/MEV6dqyo6sqguU2vGB8RXrBAV4=
Subject key identifier:   51:E6:48:8A:43:F8:45:FA:4B:52:CF:5C:42:57:9B:2D:24:69:BB:FC
Certificate issuer:       /CN=c1dc2333d1a049c4e8b328286573de8024220c17
Certificate serial:       24DF11
Authority key identifier: B5:79:94:3F:42:C6:25:1A:23:84:80:D5:12:8C:89:9B:97:3A:F0:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1dc2333d1a049c4e8b328286573de8024220c17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/e7903dec7309ccf51254ea9d09f8c03c38a2843a.roa
Signing time:             Fri 08 Dec 2023 14:44:21 +0000
ROA not before:           Fri 08 Dec 2023 14:44:21 +0000
ROA not after:            Mon 08 Dec 2025 14:44:21 +0000
asID:                     266831
IP address blocks:        45.238.36.0/22 maxlen: 24
                          2803:ca0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416401 (0x24df11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2333d1a049c4e8b328286573de8024220c17
        Validity
            Not Before: Dec  8 14:44:21 2023 GMT
            Not After : Dec  8 14:44:21 2025 GMT
        Subject: CN=e7903dec7309ccf51254ea9d09f8c03c38a2843a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:1f:be:37:b7:ee:e8:cc:9b:1f:55:9d:1c:
                    96:76:09:11:6a:93:31:69:82:85:df:81:d5:b2:d2:
                    de:48:1d:49:38:42:93:30:ae:e8:49:0b:a1:ef:85:
                    4c:8d:a0:0f:64:f6:ac:32:8d:6d:43:fa:2f:07:cc:
                    5d:74:f3:c1:47:c4:4d:f3:0d:20:cd:3a:09:20:65:
                    18:5f:ff:b2:18:e0:77:3f:b5:7a:55:b1:93:16:d9:
                    10:d5:0b:9e:e4:c4:65:e7:40:04:9e:31:05:f4:9e:
                    78:4d:1f:ef:20:4a:2f:6a:4e:6c:6e:3e:f3:56:06:
                    57:a5:16:32:36:37:e0:de:52:63:e5:73:4a:7a:d2:
                    91:72:87:78:3e:5f:48:fb:ba:dd:d8:ad:4b:b5:b7:
                    0c:20:2a:e3:dd:24:9d:01:19:b7:70:26:87:ef:ef:
                    95:71:d5:dc:2f:d0:5e:39:88:a7:33:fb:9e:7c:a6:
                    f0:8a:f2:57:eb:a1:e4:d8:c1:f8:94:f0:b3:3c:2d:
                    ad:54:b0:36:e0:64:6a:77:77:29:c2:4b:02:77:e9:
                    8d:2d:5e:fb:ef:34:0c:e3:b1:b8:eb:ad:a9:dc:6b:
                    a9:2c:60:1e:43:55:06:9d:9d:fd:02:17:7e:50:3a:
                    b1:40:d5:4c:03:e8:ca:d8:dc:f6:db:a9:b0:53:d0:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E6:48:8A:43:F8:45:FA:4B:52:CF:5C:42:57:9B:2D:24:69:BB:FC
            X509v3 Authority Key Identifier:
                keyid:B5:79:94:3F:42:C6:25:1A:23:84:80:D5:12:8C:89:9B:97:3A:F0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1dc2333d1a049c4e8b328286573de8024220c17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/e7903dec7309ccf51254ea9d09f8c03c38a2843a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/c1dc2333d1a049c4e8b328286573de8024220c17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.36.0/22
                IPv6:
                  2803:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:19:11:56:6b:9b:3a:d5:1c:94:71:3a:df:a6:7b:f3:55:fc:
         a8:6c:7b:45:be:4e:83:1f:db:97:94:74:f0:c2:ee:69:a6:54:
         87:4b:b4:2f:56:e6:52:87:f9:f0:e3:29:ce:f8:26:95:30:1d:
         2d:db:78:81:33:a2:b2:b8:00:3c:7a:e0:b5:96:3a:4e:44:bb:
         7a:2a:fb:df:00:46:38:5d:41:4b:cf:ee:4d:f5:1f:c4:71:f5:
         8b:ba:8f:15:47:5d:73:b8:e0:72:e7:77:ea:ae:0b:8d:1b:4b:
         16:4c:94:42:9b:46:38:93:80:20:43:44:5d:2f:84:fb:f2:63:
         74:bb:98:76:cf:c5:40:80:9d:9c:59:e4:54:c8:a9:d8:1f:29:
         06:e6:06:0e:33:53:4c:a1:d0:ae:70:f6:42:e6:c8:cd:a0:33:
         1b:5f:4b:d2:3d:fd:08:11:57:57:73:66:12:0b:59:c4:11:59:
         31:c1:4a:76:4a:9c:77:dd:90:68:90:50:d0:7a:22:63:aa:39:
         1a:45:0d:db:de:f2:61:a8:5b:09:ae:a4:68:d4:04:b4:5c:bd:
         9d:9f:98:1f:98:3c:43:de:3b:8d:d6:fa:a7:52:c7:a5:78:87:
         60:7e:2d:36:18:09:43:da:87:6d:f6:4d:06:be:ed:71:ef:0f:
         0a:d9:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----