Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/996eddab672f7bba99248471af6e8209be00cde8.roa
File:                     996eddab672f7bba99248471af6e8209be00cde8.roa (raw, json)
Hash identifier:          F4ltQdGwjUVk0Ls+u6DLPDP38xAh3v9jB2FdudM5yqw=
Subject key identifier:   6D:50:D9:B2:28:BA:33:FE:41:37:E2:A0:A6:B3:45:CB:EB:60:56:C9
Certificate issuer:       /CN=aba98f92d75773ce486003b4ad13562a026abb7d
Certificate serial:       121DDE
Authority key identifier: B8:74:DC:AD:16:7A:F2:9F:BD:95:C4:AB:16:7C:B1:C0:B3:82:09:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba98f92d75773ce486003b4ad13562a026abb7d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/996eddab672f7bba99248471af6e8209be00cde8.roa
Signing time:             Wed 15 Nov 2023 07:30:02 +0000
ROA not before:           Wed 15 Nov 2023 07:30:02 +0000
ROA not after:            Fri 14 Nov 2025 07:30:02 +0000
asID:                     265534
IP address blocks:        45.174.228.0/22 maxlen: 24
                          2806:32c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187294 (0x121dde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba98f92d75773ce486003b4ad13562a026abb7d
        Validity
            Not Before: Nov 15 07:30:02 2023 GMT
            Not After : Nov 14 07:30:02 2025 GMT
        Subject: CN=996eddab672f7bba99248471af6e8209be00cde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:13:6c:7b:9f:df:85:ea:f6:e5:aa:9a:98:
                    eb:52:39:6f:49:a4:1f:c0:1d:c2:bb:d9:c1:48:84:
                    04:ab:47:36:3b:94:52:20:55:d8:0c:6a:06:0a:d3:
                    eb:14:ad:33:12:08:8b:52:d0:31:6d:71:27:7a:23:
                    7f:c2:fc:f1:23:a6:91:f3:05:f7:b9:ea:0b:eb:8c:
                    dd:5a:45:09:c9:b1:9a:bf:80:0b:3f:a0:b9:12:52:
                    74:30:f3:bd:5d:95:54:56:3d:d0:96:93:e8:fc:96:
                    b3:00:85:70:8f:ba:98:ba:5e:77:71:2a:bf:80:8f:
                    e9:bb:b3:be:10:e4:c3:1c:eb:c3:17:9e:ef:d3:f4:
                    d3:90:dd:4f:ff:2d:0a:e3:be:ba:c2:c8:a7:3a:5c:
                    86:23:dc:bc:ac:e2:5f:cb:1d:78:58:e6:24:a8:cd:
                    90:4c:d5:50:81:ae:00:df:a7:d0:7a:eb:64:76:5e:
                    d9:a6:2d:a9:4b:26:83:4f:5f:d9:1c:74:47:cb:fd:
                    af:6d:92:8b:63:08:46:8e:f6:2f:5e:14:80:af:a5:
                    da:d5:00:c2:bc:5b:22:ce:74:d4:c9:ba:cc:64:c4:
                    5d:06:4d:aa:a8:4a:3b:6e:9b:51:f9:f9:40:d0:d1:
                    24:8e:4f:96:36:a4:26:0c:db:98:6c:b5:7a:1e:de:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:D9:B2:28:BA:33:FE:41:37:E2:A0:A6:B3:45:CB:EB:60:56:C9
            X509v3 Authority Key Identifier:
                keyid:B8:74:DC:AD:16:7A:F2:9F:BD:95:C4:AB:16:7C:B1:C0:B3:82:09:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba98f92d75773ce486003b4ad13562a026abb7d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/996eddab672f7bba99248471af6e8209be00cde8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/aba98f92d75773ce486003b4ad13562a026abb7d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.228.0/22
                IPv6:
                  2806:32c::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:b4:94:41:c2:62:54:51:56:ec:52:86:8a:fc:d7:0c:91:2b:
         7a:8a:2c:f2:58:ae:73:62:f9:04:39:66:1e:e5:b4:da:14:c5:
         39:e4:49:64:da:02:5a:44:97:7f:d2:69:c2:4a:74:47:c3:aa:
         06:2c:70:25:1c:e4:c1:c9:87:ec:13:00:52:d4:01:f0:d9:f7:
         c4:9b:d9:ed:27:96:56:2e:e5:08:cf:d0:9e:39:68:d7:78:d1:
         81:d3:c9:e8:3b:fb:6a:9c:81:47:1e:a0:d0:14:0e:05:e5:ae:
         1d:49:4b:4a:a6:d9:c1:db:78:8a:61:0d:46:e6:e4:39:ba:30:
         6e:b1:90:50:95:e4:37:6f:cb:55:6b:3c:93:f1:47:27:38:e9:
         1c:60:f0:21:ef:86:22:9e:14:fe:e5:80:95:21:6d:3e:17:18:
         a2:b0:60:eb:9b:88:bd:a7:54:53:d6:3a:6d:a1:31:e0:83:06:
         ff:d9:06:3e:7b:a1:9c:3b:e2:b2:32:30:d0:0b:ab:3a:eb:79:
         bb:6b:2c:bc:bc:45:e0:a0:df:af:f8:96:c3:b6:fe:6a:12:5f:
         39:73:bf:57:1f:fb:6c:9b:c4:ce:5b:19:22:85:0c:a8:24:b2:
         63:31:4d:7e:91:ac:46:0e:da:4c:48:f4:17:cd:32:02:3a:ed:
         34:55:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----