Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/f0a63a072da2ee0c3c397b294ba332056d6c20d9.roa
File:                     f0a63a072da2ee0c3c397b294ba332056d6c20d9.roa (raw, json)
Hash identifier:          C1D3QJTQHmKs2yhH+3rDZT36nMG6dIXM2uSphPeyHzI=
Subject key identifier:   BB:28:4F:BD:B0:59:7F:EA:0F:7E:D5:77:84:F0:2D:59:BE:F3:86:FD
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       1959DF
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/f0a63a072da2ee0c3c397b294ba332056d6c20d9.roa
Signing time:             Thu 18 May 2023 16:06:47 +0000
ROA not before:           Wed 17 May 2023 16:06:46 +0000
ROA not after:            Sun 18 May 2025 16:06:46 +0000
asID:                     267678
IP address blocks:        45.162.79.0/24 maxlen: 24
                          45.162.76.0/22 maxlen: 24
                          2803:aea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661407 (0x1959df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: May 17 16:06:46 2023 GMT
            Not After : May 18 16:06:46 2025 GMT
        Subject: CN=f0a63a072da2ee0c3c397b294ba332056d6c20d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:ff:51:7f:b4:24:4c:ff:f1:79:91:15:5c:
                    97:5e:48:28:41:4a:d5:62:e3:c6:bd:b1:42:a0:01:
                    52:2d:e0:ff:90:eb:63:a1:23:31:73:19:dc:85:66:
                    b3:ac:a7:b1:4f:79:84:54:a6:b0:1a:a6:f0:0e:e6:
                    12:53:d0:cf:a4:b5:de:ef:2b:2a:e9:c4:34:08:24:
                    37:65:c7:4c:19:05:72:14:eb:e1:fc:a7:11:b0:a1:
                    5c:0c:3c:c1:c5:f6:68:32:62:56:34:84:fa:1f:eb:
                    34:0c:34:bb:48:7b:8e:8c:ba:d7:09:e6:04:45:c8:
                    fd:ba:59:43:15:7f:61:a3:a4:fb:0e:a0:b8:2a:a8:
                    ce:a1:4d:ef:50:c4:97:7c:f9:d0:70:14:79:4a:c9:
                    75:58:4e:04:dd:14:8d:b6:59:73:d3:bd:ec:e2:ea:
                    b5:1c:e2:e4:e1:18:41:c8:8d:bb:c7:e2:b6:7b:7b:
                    37:02:b3:55:d3:10:3f:b5:f0:10:54:39:cd:64:05:
                    6e:d4:d3:ef:a5:a6:6c:45:16:a9:7a:c3:15:b5:2c:
                    a7:92:bb:8b:a2:78:bd:9c:97:a1:00:17:6f:3f:26:
                    25:d7:7f:20:a7:08:0f:0b:a9:d1:af:5a:d9:ad:0e:
                    9c:b0:fe:1d:75:3f:30:02:06:ad:43:f6:11:de:60:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:4F:BD:B0:59:7F:EA:0F:7E:D5:77:84:F0:2D:59:BE:F3:86:FD
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/f0a63a072da2ee0c3c397b294ba332056d6c20d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:f4:c3:73:a2:6b:06:71:a4:99:b4:23:e5:ba:d7:fa:43:
         96:94:26:99:f2:7a:58:4a:6d:94:bf:35:d3:d1:95:5b:93:ee:
         9e:44:c1:87:5e:c2:df:36:bc:ed:70:aa:1d:e2:fa:1f:96:58:
         00:6c:2a:8a:6d:43:ab:8d:0b:66:09:cc:6b:8e:55:b4:c7:a1:
         e7:1f:9e:c5:28:d2:ac:ea:96:e2:dc:ea:45:36:0e:76:49:73:
         be:0a:9c:23:f9:d2:a5:cf:ae:94:a5:bb:66:8f:fd:fb:a1:b7:
         09:97:cf:6f:0e:3d:5a:73:61:9f:ca:95:a5:06:5b:d0:0f:de:
         cc:0e:18:5a:4a:e6:4a:d7:db:4a:d7:4d:85:14:3e:5a:97:0c:
         06:45:13:ad:47:32:b2:30:25:fc:5a:22:63:16:24:2e:ff:99:
         4d:bd:ac:0a:45:ce:e2:c8:3b:ee:54:d0:2f:c1:c3:c7:00:c8:
         b1:97:c3:21:e5:7e:82:8a:02:3e:6e:ba:4c:d2:19:7a:8e:b7:
         aa:90:72:7e:a5:89:3b:14:6c:9e:9f:e0:e8:09:45:01:55:76:
         2b:a6:83:c8:d9:a7:a7:e8:3e:50:36:38:59:62:64:2d:8b:03:
         59:0e:99:42:f6:dd:64:83:44:36:35:45:08:35:4f:9d:c6:00:
         7a:3e:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----