Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/a00279143773e236a726b7ac6162c2b4fc9748f4.roa
File:                     a00279143773e236a726b7ac6162c2b4fc9748f4.roa (raw, json)
Hash identifier:          4wv11BJ9qQ6FQQDsE432mT25D2DI4KDJZmapH6Z38Nw=
Subject key identifier:   B0:91:A9:5C:41:71:C0:1E:54:4C:29:8B:CA:09:89:05:E9:40:C6:9E
Certificate issuer:       /CN=4d446954aafa3d753308d3a0466a8574d0f27367
Certificate serial:       1A6A48
Authority key identifier: 54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/a00279143773e236a726b7ac6162c2b4fc9748f4.roa
Signing time:             Thu 31 Aug 2023 20:26:38 +0000
ROA not before:           Wed 30 Aug 2023 20:26:38 +0000
ROA not after:            Sun 31 Aug 2025 20:26:38 +0000
asID:                     28441
IP address blocks:        45.164.108.0/22 maxlen: 24
                          2806:30c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731144 (0x1a6a48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d446954aafa3d753308d3a0466a8574d0f27367
        Validity
            Not Before: Aug 30 20:26:38 2023 GMT
            Not After : Aug 31 20:26:38 2025 GMT
        Subject: CN=a00279143773e236a726b7ac6162c2b4fc9748f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:36:9b:a5:cc:aa:d7:e0:10:50:1e:e1:3c:
                    82:84:17:5d:36:58:fd:07:b2:54:12:82:47:55:ac:
                    42:62:52:59:57:f6:d7:a4:64:04:60:b1:4b:57:ba:
                    71:42:74:bf:c9:19:cd:b9:87:3f:7a:13:a3:23:a2:
                    8a:a7:fe:98:9e:54:e5:d6:1c:81:1d:bb:3f:80:ec:
                    fc:da:15:13:d8:f6:6c:45:f8:00:88:3c:c3:c3:32:
                    25:bb:21:8a:aa:6c:b9:92:5f:5c:b6:5d:e4:bf:bf:
                    74:56:5a:9a:98:d7:e5:e3:49:6e:47:e0:2b:39:82:
                    e1:c6:36:bd:56:9e:e2:98:bb:22:fa:9e:e9:8c:5f:
                    7e:32:56:04:be:0c:bb:80:c8:9c:02:60:03:e7:da:
                    66:7b:ad:51:9d:ff:e3:88:5f:8b:a9:c9:34:88:c8:
                    61:51:b6:8e:01:2a:89:bb:dc:80:6f:a2:f6:4b:f1:
                    f3:26:33:1c:ac:0c:d4:b2:17:df:5e:15:d9:e3:16:
                    b1:f8:b5:21:3f:01:00:a0:13:35:c0:22:31:f9:34:
                    ad:85:1f:11:32:d0:dc:ec:38:5a:83:b8:a9:4f:3f:
                    2f:e0:65:42:54:e7:df:c5:e6:73:81:4b:b3:65:62:
                    de:28:66:9a:ca:71:98:b5:a0:61:7d:40:47:2c:d9:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:91:A9:5C:41:71:C0:1E:54:4C:29:8B:CA:09:89:05:E9:40:C6:9E
            X509v3 Authority Key Identifier:
                keyid:54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/a00279143773e236a726b7ac6162c2b4fc9748f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.108.0/22
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:41:c3:a1:be:8f:9c:5c:55:f7:58:e3:d3:a7:13:4a:16:
         1f:93:31:d7:18:ca:a5:02:5e:d4:86:2d:c8:84:4f:31:6a:eb:
         3a:95:77:7c:51:43:57:11:07:f9:f4:d5:56:e7:66:5d:78:d3:
         95:f4:51:b1:8b:e3:73:e4:fb:20:3c:35:09:0b:1f:4b:cd:e9:
         a8:03:d4:42:cb:d1:cd:05:b4:0e:c3:ac:be:36:ae:c5:24:f0:
         63:7e:e2:49:2f:69:9c:aa:5a:fd:98:82:a5:bf:15:32:0f:2e:
         7d:e1:e6:ca:45:3a:29:2a:ab:77:a5:ce:a1:8a:25:af:28:d7:
         84:d1:bc:09:da:43:d6:dd:18:43:f4:ad:eb:7d:0f:11:65:a4:
         2d:2b:37:90:10:3c:7b:31:9f:a8:8d:3d:cf:06:1e:7d:a3:a0:
         7e:43:65:1a:20:85:91:03:5d:83:a8:16:d2:90:bc:4a:ab:dc:
         d6:8b:1c:a1:ec:4f:66:45:0d:5c:ba:0b:54:9c:a3:bb:44:59:
         ae:b6:12:84:e3:37:10:e2:35:dc:be:ae:5d:60:6f:4d:5a:e0:
         8f:47:bc:77:a1:e1:e8:be:13:df:64:5a:8c:f4:ae:15:bd:86:
         ef:61:7a:1d:71:0d:89:7b:17:bd:a0:42:21:97:b1:26:1d:98:
         e8:da:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----