Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/45c7d4ab20fb5b56e9be5779a8ccf85dd9fc8ba2.roa
File:                     45c7d4ab20fb5b56e9be5779a8ccf85dd9fc8ba2.roa (raw, json)
Hash identifier:          f1TeLxsd/wfC5sauhsqjLPSeI2wnx/+1/SmHbTBiyKU=
Subject key identifier:   54:47:38:EF:27:69:E7:22:05:0A:C0:3A:B4:BE:93:8B:22:4C:5E:56
Certificate issuer:       /CN=18578d1d6434fa77964783314509fc7818281b0a
Certificate serial:       1CD09B
Authority key identifier: 97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/45c7d4ab20fb5b56e9be5779a8ccf85dd9fc8ba2.roa
Signing time:             Thu 11 May 2023 23:50:08 +0000
ROA not before:           Wed 10 May 2023 23:50:07 +0000
ROA not after:            Sun 11 May 2025 23:50:07 +0000
asID:                     265613
IP address blocks:        45.189.252.0/22 maxlen: 24
                          2806:36a::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888411 (0x1cd09b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18578d1d6434fa77964783314509fc7818281b0a
        Validity
            Not Before: May 10 23:50:07 2023 GMT
            Not After : May 11 23:50:07 2025 GMT
        Subject: CN=45c7d4ab20fb5b56e9be5779a8ccf85dd9fc8ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:45:a7:46:a9:c6:95:c6:bb:ae:8f:0e:9a:
                    21:9e:63:ee:a2:bd:ae:d9:37:66:42:4a:ca:0b:fc:
                    67:75:fe:4d:d4:c9:76:5c:61:4d:b5:a1:69:07:43:
                    48:be:d8:de:ba:dd:6b:01:cb:e1:3e:52:3a:cd:05:
                    72:1b:67:f8:43:66:66:8d:d8:d8:33:8a:ed:a8:99:
                    10:b5:7a:e7:1e:cd:59:f2:f3:36:28:7f:d7:a3:5f:
                    38:c4:7d:d6:ff:39:cb:be:2f:a2:f8:db:fa:f1:be:
                    2c:04:8b:81:41:a7:b6:02:dd:5b:3a:75:20:5e:93:
                    22:e6:bb:68:93:3e:65:dd:e0:a6:6f:33:df:2f:25:
                    8a:02:98:79:52:02:b1:7c:f1:e9:44:7f:7d:13:4d:
                    a5:d1:df:92:12:96:86:1b:9d:30:d3:b5:a7:75:65:
                    85:78:4e:5a:66:7a:ab:44:48:b9:7c:3d:38:e1:a7:
                    be:be:f7:57:ff:98:60:5f:e2:9f:7a:90:a8:af:78:
                    e4:5e:d0:5a:62:d3:42:f9:8b:f1:0d:99:a3:4e:df:
                    c9:f5:8c:79:2f:f8:4c:6e:68:0a:a9:ed:46:b8:15:
                    69:7e:c4:95:5d:b9:36:34:3b:ac:fd:05:88:be:ae:
                    d5:f0:2a:40:0e:86:13:71:3b:12:74:57:a9:e9:ec:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:47:38:EF:27:69:E7:22:05:0A:C0:3A:B4:BE:93:8B:22:4C:5E:56
            X509v3 Authority Key Identifier:
                keyid:97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/45c7d4ab20fb5b56e9be5779a8ccf85dd9fc8ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/18578d1d6434fa77964783314509fc7818281b0a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.252.0/22
                IPv6:
                  2806:36a::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:fa:f1:56:87:e4:1a:14:0a:d3:c4:f0:eb:09:d2:dd:f0:
         02:15:d8:68:d3:cc:eb:07:29:90:a6:9f:5f:d9:37:66:17:a3:
         c4:7c:21:6f:87:12:cc:f0:23:8b:ca:75:e8:3f:e7:0f:5e:82:
         6e:9e:d7:12:74:aa:e1:01:e6:f4:ba:85:fc:3e:66:92:26:10:
         43:23:8d:99:5f:56:2a:72:70:8b:56:8e:72:1e:b3:02:af:d8:
         0b:a9:11:6a:d3:ee:6f:cc:8a:10:04:06:95:c0:b5:36:52:00:
         c7:f4:cd:14:b1:15:9f:2a:29:14:8e:80:ad:04:e2:64:30:b1:
         cb:3a:19:52:98:56:22:69:47:85:aa:8a:28:bd:5d:c3:91:54:
         03:65:e1:f7:c3:8c:08:78:39:6b:81:e7:29:40:6f:89:8c:b7:
         3d:d7:89:7e:2e:e5:c4:9e:7e:39:e9:a0:cf:d1:03:f0:c9:b6:
         bf:83:3b:dd:7c:78:28:38:c8:63:09:17:ba:b2:5e:dd:06:28:
         89:54:61:48:4b:0f:7e:9f:22:20:ab:76:b6:30:dc:b4:a3:2c:
         27:93:55:09:31:1b:46:53:99:0b:35:37:52:55:33:87:18:da:
         99:2c:8e:5c:4b:48:4d:f5:fe:1a:ae:f8:be:b3:26:b2:b1:e4:
         1e:de:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----