Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/8af89b56301872f9c7aaaacfb53f46370bdc98e5.roa
File:                     8af89b56301872f9c7aaaacfb53f46370bdc98e5.roa (raw, json)
Hash identifier:          eqmXyqDSsPWPJ5o0N0eJQJr8Yn7GdT79uZhMx3LaLaI=
Subject key identifier:   14:E4:BA:51:7E:FB:68:3B:DF:64:CB:38:76:21:40:0D:68:D7:96:C7
Certificate issuer:       /CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
Certificate serial:       25E39E
Authority key identifier: F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/8af89b56301872f9c7aaaacfb53f46370bdc98e5.roa
Signing time:             Wed 13 Dec 2023 00:11:06 +0000
ROA not before:           Wed 13 Dec 2023 00:11:05 +0000
ROA not after:            Sat 13 Dec 2025 00:11:05 +0000
asID:                     263238
IP address blocks:        45.4.200.0/22 maxlen: 24
                          2803:81c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2483102 (0x25e39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
        Validity
            Not Before: Dec 13 00:11:05 2023 GMT
            Not After : Dec 13 00:11:05 2025 GMT
        Subject: CN=8af89b56301872f9c7aaaacfb53f46370bdc98e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:fd:46:2f:88:ba:b8:47:ae:5c:40:b0:f0:
                    9a:09:64:74:22:da:50:a8:f3:98:34:1d:4e:17:f7:
                    41:f3:4b:01:f9:05:74:9d:3f:4d:29:54:93:93:4c:
                    38:32:bd:81:44:ce:74:b8:a5:a6:16:51:e6:a3:64:
                    4a:59:4a:18:dc:e3:c9:0a:55:42:90:51:1d:0f:25:
                    f1:dd:63:b4:5e:63:e2:e5:70:fc:0c:76:14:6e:f7:
                    93:49:72:f3:3e:a9:36:d5:17:1c:a8:97:e9:10:e0:
                    27:a6:51:49:5c:b6:fc:1a:2a:97:d8:a7:f7:61:19:
                    4a:be:34:e5:ee:5e:68:8d:97:7d:4f:23:34:3b:0d:
                    e1:57:5c:40:b0:90:ee:98:db:e5:e8:12:f7:34:cb:
                    bc:4c:93:79:1e:6b:22:29:13:8a:f9:05:d4:f3:29:
                    29:4c:b2:f2:f0:db:b4:4b:82:ce:c5:cf:3c:cf:08:
                    cf:15:98:aa:a9:28:d2:f1:af:76:90:ed:ec:bd:59:
                    ad:f9:ca:16:6b:8d:4a:5f:8a:ca:c8:45:2b:c5:83:
                    68:a7:59:a1:b2:50:cc:16:04:ea:83:11:15:eb:2c:
                    c1:9e:be:ca:bc:8e:16:1b:19:a2:22:de:4e:40:fb:
                    83:d5:3e:15:b3:2e:cb:56:01:da:a3:82:d7:bc:9f:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E4:BA:51:7E:FB:68:3B:DF:64:CB:38:76:21:40:0D:68:D7:96:C7
            X509v3 Authority Key Identifier:
                keyid:F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/8af89b56301872f9c7aaaacfb53f46370bdc98e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.200.0/22
                IPv6:
                  2803:81c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:bc:2c:57:0e:a4:3b:66:95:6d:68:39:a0:5e:d8:22:e7:
         f2:30:07:1f:af:53:4f:36:df:42:8d:ae:b4:19:78:8d:13:20:
         6d:b1:40:48:3a:9f:10:ce:12:82:9b:20:c7:ab:51:2c:1d:1b:
         30:c6:11:26:e1:ef:d2:b3:5a:bb:8c:51:e3:69:25:66:0b:41:
         51:04:7a:23:0b:cb:87:48:47:12:5c:2c:6a:cc:1b:5e:41:27:
         43:cb:6d:79:ca:ff:2b:65:72:ff:db:cd:60:9c:99:2f:c0:1f:
         81:96:b0:1c:4a:da:7c:e1:87:46:a3:22:92:69:98:3e:26:1d:
         91:08:be:cf:1d:83:e9:5c:42:99:c2:ad:9d:75:c7:d1:8b:00:
         33:5a:3f:f0:98:e1:7c:5c:69:90:20:89:50:7d:68:91:49:25:
         6d:44:e3:30:29:3d:b0:16:72:c9:f7:6b:f5:d3:11:cb:7c:9e:
         88:d8:74:03:cd:de:40:0d:66:ad:66:eb:37:6b:05:8f:61:e7:
         7d:9f:73:a6:f1:b6:fe:9f:8b:6f:8f:62:f9:50:58:b1:1f:77:
         2b:fd:c5:69:bc:b2:12:60:51:2b:b3:a0:06:0d:22:6c:da:e2:
         c2:82:70:5d:83:d4:5f:4a:cb:c7:13:11:6a:98:ba:85:67:f2:
         73:21:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----