Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/99d528c3db439d375dfbfb9d3537a01301bc6faa.roa
File:                     99d528c3db439d375dfbfb9d3537a01301bc6faa.roa (raw, json)
Hash identifier:          NLl9k7u75PGvLKRlu54mwYmgj33jM9V6kuZRxriNIz4=
Subject key identifier:   26:74:DB:6F:7D:12:08:DD:D5:60:4E:80:4D:52:8E:3D:5D:6B:0E:B4
Certificate issuer:       /CN=1732d7ce406bd7aa01b8752602eec7239b41c506
Certificate serial:       1E04BD
Authority key identifier: F1:FF:2F:A9:D2:24:F1:13:1B:DF:F3:B6:84:4D:84:98:31:4E:19:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1732d7ce406bd7aa01b8752602eec7239b41c506.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/99d528c3db439d375dfbfb9d3537a01301bc6faa.roa
Signing time:             Wed 17 May 2023 16:07:39 +0000
ROA not before:           Tue 16 May 2023 16:07:38 +0000
ROA not after:            Sat 17 May 2025 16:07:38 +0000
asID:                     269867
IP address blocks:        45.189.119.0/24 maxlen: 24
                          2801:15:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967293 (0x1e04bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1732d7ce406bd7aa01b8752602eec7239b41c506
        Validity
            Not Before: May 16 16:07:38 2023 GMT
            Not After : May 17 16:07:38 2025 GMT
        Subject: CN=99d528c3db439d375dfbfb9d3537a01301bc6faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:48:9f:6c:e2:3d:34:a3:3e:33:f4:ba:16:
                    f3:e5:3b:c8:1f:91:f7:27:81:3b:f4:7c:82:6f:d8:
                    d5:e4:d5:46:fd:9f:f5:ba:11:70:e2:9c:58:35:72:
                    2b:61:db:4e:fb:ff:f2:b9:65:cc:af:e1:75:1f:31:
                    19:f4:0b:a9:b2:24:90:8f:7c:5a:8e:9b:9e:1e:ba:
                    af:f4:c2:ac:7d:0c:6f:de:de:90:e9:26:03:a5:4e:
                    2a:f9:1a:ae:71:08:c3:8e:5f:d8:4c:da:fd:f1:20:
                    c5:38:a8:b0:9d:46:7e:53:7c:7c:11:fe:31:23:7d:
                    d0:55:9e:6b:bc:62:c4:44:c6:48:26:4e:fd:d5:d8:
                    4d:45:c5:1d:fb:54:db:c0:13:40:72:f9:62:c3:a9:
                    e3:fa:8c:12:09:71:e8:af:4c:d0:8d:d1:c7:42:13:
                    56:ee:cf:06:21:33:dd:f1:e6:20:e7:ba:35:b2:ed:
                    1d:49:f7:8b:51:f4:52:8b:12:60:57:0c:0b:72:76:
                    b9:ab:c6:4a:4b:a7:87:ef:f5:e6:53:82:df:67:60:
                    16:71:6d:7e:17:52:1e:dd:2c:0a:aa:92:37:0f:65:
                    34:3b:42:be:9e:8a:7c:2b:23:e6:f6:ae:df:38:7d:
                    d0:0a:55:b7:be:00:01:d3:33:eb:66:cb:a8:85:fe:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:DB:6F:7D:12:08:DD:D5:60:4E:80:4D:52:8E:3D:5D:6B:0E:B4
            X509v3 Authority Key Identifier:
                keyid:F1:FF:2F:A9:D2:24:F1:13:1B:DF:F3:B6:84:4D:84:98:31:4E:19:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1732d7ce406bd7aa01b8752602eec7239b41c506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/99d528c3db439d375dfbfb9d3537a01301bc6faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee0927b-ef75-430b-9bf2-be0e84a77fa8/1732d7ce406bd7aa01b8752602eec7239b41c506.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.119.0/24
                IPv6:
                  2801:15:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:4c:7c:24:27:2a:e2:55:1a:d7:33:62:1f:a3:7a:dd:d8:
         3b:e8:54:d7:9f:ca:06:3f:1d:91:ee:25:78:d9:1b:84:a5:88:
         96:f7:c3:38:c3:c9:41:b3:3b:3c:94:62:00:00:d1:b1:56:98:
         40:a4:c9:c0:f9:06:60:a2:84:9f:c2:42:0e:81:93:35:d7:10:
         92:9e:ed:76:a6:62:2d:da:fb:f3:f9:9d:41:23:74:b4:d0:c2:
         c9:f0:0e:a6:37:43:26:4e:af:60:bb:a0:9f:a5:d3:34:ad:07:
         04:ae:1a:cf:42:c8:db:6c:f2:18:34:b6:e6:38:8c:28:39:87:
         29:cb:ff:e3:5a:75:0b:33:63:49:56:ca:a3:5b:19:ba:59:f4:
         7b:a5:6a:1e:2a:b2:7f:a4:ef:66:da:83:1a:37:17:ef:92:96:
         ce:52:e4:8d:b6:f3:d2:e3:5e:a6:6a:43:dd:2e:0d:0a:4f:94:
         04:80:08:c7:52:b1:ee:62:ab:cf:c0:2c:65:2d:0f:b8:2a:c0:
         e4:c6:b1:fb:a1:1b:78:66:ac:a7:66:b5:ab:32:fd:7a:bf:f9:
         b5:cc:42:e6:8a:19:d3:0b:f7:f5:01:61:ae:c6:18:b6:cb:f9:
         a5:78:39:16:ca:e4:c8:b7:93:d9:c0:e0:4f:5c:fd:76:4c:dd:
         e4:35:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----