Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/10886cc9f75931df08f78820f9481da3bc479f85.roa
File:                     10886cc9f75931df08f78820f9481da3bc479f85.roa (raw, json)
Hash identifier:          7Mu4x9d13jZKXy+79CwjztGJsJS6R8Q1ERXUm3i392U=
Subject key identifier:   20:63:06:10:AF:2D:73:46:E0:2D:4D:6C:9A:F5:14:F4:0C:03:5C:A8
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       196257
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/10886cc9f75931df08f78820f9481da3bc479f85.roa
Signing time:             Thu 18 May 2023 16:07:58 +0000
ROA not before:           Wed 17 May 2023 16:07:58 +0000
ROA not after:            Sun 18 May 2025 16:07:58 +0000
asID:                     262589
IP address blocks:        45.162.76.0/22 maxlen: 24
                          2803:aea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663575 (0x196257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: May 17 16:07:58 2023 GMT
            Not After : May 18 16:07:58 2025 GMT
        Subject: CN=10886cc9f75931df08f78820f9481da3bc479f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:5b:55:16:ac:96:07:c4:34:cf:8b:57:f4:
                    35:31:de:d6:3a:fe:d9:9a:13:a8:15:48:fe:b7:b1:
                    89:70:b1:58:6d:4c:9b:bc:b4:ce:aa:bc:4b:4d:d1:
                    72:47:56:76:29:cf:d8:80:6d:ec:27:25:7d:48:a9:
                    96:1a:b4:d3:0b:5b:88:b9:19:5f:f1:27:a0:89:a3:
                    d7:b4:96:23:63:26:f9:f8:f6:ae:f7:9a:e9:13:cc:
                    5e:66:85:63:c5:72:ba:e5:8b:c5:3c:60:30:23:ca:
                    1f:57:71:c4:8c:66:b5:58:04:72:b6:34:95:1a:80:
                    81:5e:d1:f3:eb:4a:e6:cb:5b:23:d0:d4:11:0d:8d:
                    54:7b:38:9e:87:45:d8:d4:31:7c:5f:e0:62:7d:db:
                    79:c5:a6:73:ec:b1:04:da:c5:bd:46:6d:d8:53:3a:
                    97:e1:05:41:08:7f:16:5d:ca:7c:fc:28:48:7b:51:
                    e8:61:c4:39:ec:7f:16:4c:45:3e:75:9e:79:0c:92:
                    13:ff:18:8f:73:54:fd:99:e5:b9:14:1f:56:69:c8:
                    df:99:98:43:eb:58:52:36:e9:30:8b:48:39:3a:9f:
                    c7:02:9f:c8:e6:55:be:52:f7:68:a3:eb:b7:a3:b1:
                    61:15:c9:f6:64:27:75:93:7b:04:a9:7d:c0:92:43:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:63:06:10:AF:2D:73:46:E0:2D:4D:6C:9A:F5:14:F4:0C:03:5C:A8
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/10886cc9f75931df08f78820f9481da3bc479f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:47:e8:6e:5e:29:c1:22:db:5e:23:ab:d6:dd:05:a7:01:38:
         03:70:b3:81:07:d8:b4:d0:9d:69:aa:e0:29:a9:a7:3d:3e:bc:
         c2:02:62:e3:7d:4f:5d:39:33:ae:1e:c2:1a:6c:85:4c:37:df:
         20:18:6b:10:cd:f0:4c:6c:7f:9f:1e:c0:04:35:72:e5:a0:1e:
         42:de:5e:db:43:a2:0c:1e:be:81:b5:57:57:c6:06:38:4a:5c:
         42:e8:6f:34:53:f6:14:e4:5a:13:3c:30:7d:12:15:8a:2a:95:
         8d:1f:c5:bb:71:55:c8:80:fd:90:f9:a4:f9:a4:f9:a8:76:fb:
         14:59:97:78:a7:a4:61:d8:d4:a7:48:3c:58:95:53:46:03:78:
         f6:38:2a:7b:9b:c5:7d:7a:b8:f7:c6:08:c8:87:e8:37:30:7f:
         e8:d4:00:9a:1f:34:3b:30:5a:3b:a1:99:5d:34:33:72:6d:6d:
         e1:a0:46:aa:1d:b7:be:4a:b9:08:e1:ee:b4:83:0d:ff:8b:f7:
         21:6a:ce:b1:1a:4a:7a:ca:25:ec:c9:28:13:c1:ea:4d:10:e0:
         29:56:8f:79:06:08:3f:34:ad:a2:be:b6:11:c6:61:77:63:60:
         78:1d:19:7f:15:95:e2:97:cb:f5:f2:d1:87:40:83:8a:05:4b:
         33:1b:31:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----