Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cfb89a7-ecdb-4e5c-94cc-35015d07cdd6/06c6bb88d6bfc1732b77349980b7b7f92f340a99.roa
File:                     06c6bb88d6bfc1732b77349980b7b7f92f340a99.roa (raw, json)
Hash identifier:          VBEssBermG3iMUQ2OckJw8GIs1w1VLwypYLnbNJJOIU=
Subject key identifier:   D4:9F:CC:38:94:64:FC:F3:05:4E:BC:3C:BE:81:39:48:09:55:90:D6
Certificate issuer:       /CN=966b7880e11979be8b7d101fdfe9b797930b1a51
Certificate serial:       11D61D
Authority key identifier: 76:9D:BF:1D:E8:3A:BE:85:6B:62:5C:D1:C4:EC:9F:31:AB:9B:FA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/966b7880e11979be8b7d101fdfe9b797930b1a51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cfb89a7-ecdb-4e5c-94cc-35015d07cdd6/06c6bb88d6bfc1732b77349980b7b7f92f340a99.roa
Signing time:             Thu 01 Jun 2023 08:30:00 +0000
ROA not before:           Wed 31 May 2023 08:30:00 +0000
ROA not after:            Fri 30 May 2025 08:30:00 +0000
asID:                     269911
IP address blocks:        45.187.208.0/23 maxlen: 24
                          2803:a0e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168925 (0x11d61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966b7880e11979be8b7d101fdfe9b797930b1a51
        Validity
            Not Before: May 31 08:30:00 2023 GMT
            Not After : May 30 08:30:00 2025 GMT
        Subject: CN=06c6bb88d6bfc1732b77349980b7b7f92f340a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:9e:42:3f:f0:11:30:3e:e9:a4:a4:4a:b3:
                    97:2d:58:0e:b9:79:82:d3:26:84:7a:1a:b4:1c:2c:
                    7d:39:e0:9d:e1:62:50:ef:b0:bd:60:9a:84:05:db:
                    81:ba:b1:ab:59:6e:70:44:ea:b6:ec:82:35:a9:4c:
                    b1:16:15:af:cb:0e:6c:b2:fa:d0:48:e8:79:e9:ca:
                    d4:e1:56:3f:6a:65:e1:67:01:83:33:f2:f1:61:9e:
                    a4:d6:cf:54:c8:31:b8:3e:b0:76:d9:8a:ed:43:26:
                    e8:7c:a1:5a:c6:64:03:6d:3b:ac:5f:3a:1f:b7:93:
                    a6:7e:6f:71:3b:eb:c6:16:d7:75:d9:0c:af:0d:00:
                    33:80:7e:e3:a6:60:48:e7:9e:97:b4:10:3b:e5:c0:
                    1f:4c:19:3a:26:af:c4:2c:3c:c2:01:63:7c:bc:4e:
                    82:39:80:e8:c9:08:24:e5:7c:75:97:4b:f5:5a:5a:
                    44:33:b4:55:e9:0e:30:34:ea:2d:cb:94:36:97:0b:
                    bf:88:36:21:74:53:0d:06:2e:27:63:2f:1a:35:ec:
                    51:cb:24:e6:62:1f:f3:51:45:5e:c5:e1:42:cf:8c:
                    de:15:7e:dc:3f:e2:2c:13:66:f5:b8:1b:5e:ab:3e:
                    3b:46:e7:5a:ae:c3:10:ec:f9:9a:dd:cc:3d:de:32:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:CC:38:94:64:FC:F3:05:4E:BC:3C:BE:81:39:48:09:55:90:D6
            X509v3 Authority Key Identifier:
                keyid:76:9D:BF:1D:E8:3A:BE:85:6B:62:5C:D1:C4:EC:9F:31:AB:9B:FA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/966b7880e11979be8b7d101fdfe9b797930b1a51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cfb89a7-ecdb-4e5c-94cc-35015d07cdd6/06c6bb88d6bfc1732b77349980b7b7f92f340a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cfb89a7-ecdb-4e5c-94cc-35015d07cdd6/966b7880e11979be8b7d101fdfe9b797930b1a51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.208.0/23
                IPv6:
                  2803:a0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:36:2e:c8:03:23:e4:25:50:18:24:53:42:d6:fe:96:63:
         42:3e:a6:b9:a0:dd:58:08:c4:48:65:93:07:c7:d7:e5:ef:2f:
         fa:c2:2e:a0:58:a6:56:4a:21:cb:b8:d1:e5:c6:d5:46:98:83:
         a5:31:74:82:bb:9e:4f:7b:27:71:eb:0c:ff:a7:6b:c4:2c:2a:
         d0:f8:53:95:aa:95:20:a6:2e:a0:d5:b5:95:be:6a:88:e9:e8:
         35:60:e2:64:9a:3f:e2:f1:0e:92:04:f3:ce:56:3a:72:72:7d:
         f7:69:44:ef:32:86:33:67:b3:e9:e6:6f:70:76:99:21:3a:ca:
         cc:fb:8f:37:1d:7e:53:3b:1a:31:37:86:1b:77:89:b3:b7:bd:
         45:63:be:29:03:a5:bb:ce:ce:f5:6b:8f:9f:b5:0c:07:6e:9a:
         89:ea:d7:04:3e:d4:a2:06:e2:43:e3:ae:0c:ed:0b:0f:4f:9b:
         59:95:2e:df:3e:6d:23:07:c0:1b:80:58:91:2d:86:58:9c:46:
         ac:8c:8e:12:1c:83:3b:80:ed:19:7b:fa:e7:7b:ce:eb:57:7f:
         d4:ad:0d:5b:26:7e:e1:26:34:ba:a4:23:b8:e2:be:85:13:a6:
         9e:48:6a:35:d9:38:46:fe:45:b1:0e:c3:fa:d0:63:30:b0:a4:
         ad:71:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----