Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa
File:                     383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa (raw, json)
Hash identifier:          zB3dF/TwGWMdrHGIR+aea5Uoz4+i9rc+AFBSvYJeU1w=
Subject key identifier:   E8:17:51:D0:0D:24:3D:15:86:34:B6:A8:77:F2:C5:90:9D:FE:DC:01
Certificate issuer:       /CN=451e0833b865e00364f8158e841786790d21e50c
Certificate serial:       2441B2
Authority key identifier: 50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa
Signing time:             Fri 29 Dec 2023 02:47:06 +0000
ROA not before:           Fri 29 Dec 2023 02:47:06 +0000
ROA not after:            Mon 29 Dec 2025 02:47:06 +0000
asID:                     20473
IP address blocks:        45.188.219.0/24 maxlen: 24
                          2801:1b:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2376114 (0x2441b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e0833b865e00364f8158e841786790d21e50c
        Validity
            Not Before: Dec 29 02:47:06 2023 GMT
            Not After : Dec 29 02:47:06 2025 GMT
        Subject: CN=383a08c95ace6a8cff4135e2ad65b267ec55ca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:49:e4:7b:dd:f0:95:d0:17:ee:c2:53:3c:
                    07:f8:25:14:b7:8b:3f:39:f6:c7:4d:4b:90:56:d2:
                    1f:80:b6:01:48:8c:fa:30:62:e6:f7:61:0f:4a:00:
                    67:35:3e:6a:a6:12:0f:16:d8:f9:e7:94:20:9a:36:
                    2e:7e:90:4e:b8:7f:0e:8c:93:ef:85:cf:a5:16:cc:
                    7e:73:74:82:f5:40:ca:ce:dd:05:f8:49:74:88:ad:
                    04:5a:7d:6a:bc:61:d6:b9:84:64:bf:17:e8:dd:9a:
                    8a:0a:86:35:06:ec:74:e3:dc:32:45:22:46:9d:3b:
                    fb:05:3a:fe:da:4e:6b:49:6a:a6:92:b9:8a:8f:a3:
                    f9:49:4f:29:2c:18:f3:62:2e:e1:09:56:8e:28:f4:
                    2e:b0:57:56:fd:fe:67:e5:a6:2f:7e:28:0d:bf:1b:
                    76:2c:27:a4:b5:89:fd:70:10:2a:2c:b1:99:64:eb:
                    1d:8f:c0:73:12:ba:2f:95:db:c4:48:1e:04:5a:a8:
                    fd:b6:6a:f1:15:20:ff:db:93:0b:2d:2c:ab:6d:89:
                    ab:ef:c7:bf:47:ca:06:cb:33:6d:3b:61:66:b3:36:
                    26:8c:7b:23:2b:b5:ae:2b:03:60:3b:e2:84:a8:bb:
                    ec:1e:18:7c:ef:61:21:13:93:d3:ad:4c:f4:07:18:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:51:D0:0D:24:3D:15:86:34:B6:A8:77:F2:C5:90:9D:FE:DC:01
            X509v3 Authority Key Identifier:
                keyid:50:B3:30:20:99:86:0E:13:7C:03:05:75:E9:89:7D:C3:C2:BB:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/451e0833b865e00364f8158e841786790d21e50c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/383a08c95ace6a8cff4135e2ad65b267ec55ca4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57092783-0211-433f-b6ea-15c3ef9a7701/451e0833b865e00364f8158e841786790d21e50c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.219.0/24
                IPv6:
                  2801:1b:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:0a:5e:a6:c8:9f:72:9a:e2:5e:62:a3:f6:c8:46:4f:9d:13:
         a2:d8:2d:55:1e:06:37:6c:8f:8f:43:a8:c4:ea:95:c4:01:d1:
         73:4b:1b:9a:32:f0:95:4b:c6:f7:44:ee:80:c8:cc:a7:16:0a:
         82:ad:69:73:21:c1:a3:40:67:1a:be:27:3a:eb:e1:1c:a2:ff:
         87:6a:c8:0f:64:ea:7c:12:4f:4b:31:f3:44:a7:6a:58:f4:e8:
         3a:dc:92:8f:40:6e:b5:05:3f:be:de:83:2f:6e:64:a5:2d:78:
         4e:60:bc:b7:96:ec:16:9c:38:dc:a3:a6:d8:d7:37:b8:60:92:
         d2:1a:f9:06:96:3b:d8:33:c4:f7:8f:21:68:7b:73:51:0a:69:
         39:ad:b9:eb:bd:66:42:fc:2b:80:44:f3:92:47:1e:2e:6e:ab:
         16:d9:38:6a:79:a6:d6:7d:24:3a:a7:b6:b0:68:e1:ea:7b:ea:
         41:37:c9:b5:e5:e6:ed:bc:6b:22:f2:9b:fd:ef:e5:62:30:c4:
         94:36:a6:8f:7d:a7:c3:a3:bc:e3:bd:6c:0f:3e:07:0a:95:f1:
         65:66:2f:3d:51:a3:d5:9d:c8:8f:fd:60:af:c5:0d:da:31:21:
         6a:43:e0:ec:8c:f6:e4:b8:a7:71:7d:b7:19:c9:f3:77:fa:55:
         20:8e:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----