Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/439484a6b3a65c49e8e498004410f265c2743775.roa
File:                     439484a6b3a65c49e8e498004410f265c2743775.roa (raw, json)
Hash identifier:          aGmJMl44n16EbwZ8ZlNNk3TcBHpu6hII+VeVskDtXQg=
Subject key identifier:   70:CC:67:6E:CC:1F:98:95:67:52:C5:86:85:22:A2:FB:08:D8:11:B6
Certificate issuer:       /CN=b77f9c61d953c15bb1d3a967c6d9a2e76d26c241
Certificate serial:       AA08
Authority key identifier: 08:5F:77:A9:4F:40:0D:61:F7:97:11:41:48:E4:5A:D0:9D:3B:B7:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b77f9c61d953c15bb1d3a967c6d9a2e76d26c241.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/439484a6b3a65c49e8e498004410f265c2743775.roa
Signing time:             Fri 02 Jun 2023 01:02:57 +0000
ROA not before:           Thu 01 Jun 2023 01:02:57 +0000
ROA not after:            Mon 02 Jun 2025 01:02:57 +0000
asID:                     267691
IP address blocks:        45.162.126.0/24 maxlen: 24
                          2803:41a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43528 (0xaa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77f9c61d953c15bb1d3a967c6d9a2e76d26c241
        Validity
            Not Before: Jun  1 01:02:57 2023 GMT
            Not After : Jun  2 01:02:57 2025 GMT
        Subject: CN=439484a6b3a65c49e8e498004410f265c2743775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:30:d6:68:af:15:52:e6:2f:af:d6:39:b2:
                    aa:e6:73:ab:c9:1d:a8:3b:79:f4:06:bf:4c:7c:47:
                    f1:38:29:b4:ce:c9:2b:f3:b2:ad:92:e1:dc:61:d6:
                    8e:e6:46:a4:7b:f5:1d:96:df:b9:0f:9a:d3:99:0a:
                    57:19:1b:54:bb:c0:05:39:17:1a:29:d0:6b:31:24:
                    e7:45:03:4e:66:f7:01:83:99:24:d5:d7:9a:9c:53:
                    30:65:97:20:a3:fb:e8:db:1f:a6:18:94:0d:1f:08:
                    0f:46:fb:f6:40:ab:c5:08:99:24:6b:e4:1b:0a:26:
                    93:3f:8e:75:56:2f:51:48:c1:9a:99:37:28:45:9b:
                    b5:c6:3f:e8:19:6c:5d:1e:8b:f0:7b:79:71:85:70:
                    e8:30:d1:8b:65:68:97:82:9f:07:83:69:09:75:ef:
                    93:9a:70:81:70:91:0d:13:9c:98:f6:3e:74:c3:fc:
                    04:66:e6:95:15:d1:cf:0c:af:48:c9:89:72:66:c9:
                    d0:d6:ed:95:72:f0:bf:e8:2a:a3:ea:dd:a4:8e:c4:
                    19:09:fc:ab:d9:50:9e:56:4f:95:f0:2d:d8:09:37:
                    61:cc:37:fd:5b:1a:45:49:12:47:5a:58:ea:55:3b:
                    22:0a:71:10:49:f7:7e:fe:fa:09:9f:96:c8:0f:56:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:67:6E:CC:1F:98:95:67:52:C5:86:85:22:A2:FB:08:D8:11:B6
            X509v3 Authority Key Identifier:
                keyid:08:5F:77:A9:4F:40:0D:61:F7:97:11:41:48:E4:5A:D0:9D:3B:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b77f9c61d953c15bb1d3a967c6d9a2e76d26c241.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/439484a6b3a65c49e8e498004410f265c2743775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/b77f9c61d953c15bb1d3a967c6d9a2e76d26c241.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.126.0/24
                IPv6:
                  2803:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:9d:1c:6f:42:6a:84:b8:46:87:02:94:a3:24:9f:c3:16:
         ac:16:9d:d2:a0:2c:86:5a:09:3f:fd:04:72:ca:88:8e:d4:c1:
         bf:ed:a2:8b:72:15:72:d5:fd:fa:4e:f4:80:a5:06:bb:b6:57:
         1d:84:85:d9:f8:d7:48:18:6c:de:03:71:fa:25:57:17:b4:02:
         45:e6:ff:20:0f:b2:73:86:ed:1d:49:fe:24:7c:3a:85:40:76:
         90:2b:e1:7a:0a:74:d3:d2:23:23:59:d8:90:37:97:d7:60:54:
         a6:c9:e4:33:1f:01:e5:dd:cd:48:de:2f:14:fd:ff:66:17:5b:
         20:0d:15:55:2b:b3:92:76:63:3c:61:86:4d:01:e1:48:27:e7:
         78:9b:59:b4:4c:05:f8:05:02:a8:f6:cf:1f:f6:d1:23:b8:22:
         30:a3:cf:3e:b8:72:6f:c9:e5:6c:00:e4:3c:96:d6:c8:13:4a:
         df:1f:e7:6e:2d:ac:6b:57:df:f0:1e:29:61:9a:57:e2:50:52:
         26:3b:4d:7e:5b:3b:f8:50:9e:c6:5a:e2:4d:57:42:52:41:a1:
         c4:03:e0:3d:7e:ed:88:58:84:ef:19:5f:07:0c:b5:10:24:5f:
         ff:6d:db:15:21:aa:dd:1b:7a:02:2f:c5:eb:98:2c:6a:aa:9f:
         77:b3:66:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----