Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/4e3e7b716cd025c289190341ff038e778c129310.roa
File:                     4e3e7b716cd025c289190341ff038e778c129310.roa (raw, json)
Hash identifier:          12GlkIgK/ScZ7jK0rQZJ33Nn50fua/uG4C7pY664BHE=
Subject key identifier:   E5:D3:E2:DD:08:E4:4E:81:35:69:4D:2A:B1:67:D4:E0:22:3B:C6:FB
Certificate issuer:       /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial:       21E012
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/4e3e7b716cd025c289190341ff038e778c129310.roa
Signing time:             Mon 14 Aug 2023 07:01:13 +0000
ROA not before:           Sun 13 Aug 2023 07:01:12 +0000
ROA not after:            Thu 14 Aug 2025 07:01:12 +0000
asID:                     265554
IP address blocks:        45.170.132.0/24 maxlen: 24
                          45.170.134.0/23 maxlen: 24
                          2803:aba0:2000::/39 maxlen: 40
                          2803:aba0:2200::/40 maxlen: 40
                          2803:aba0:2300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220050 (0x21e012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Validity
            Not Before: Aug 13 07:01:12 2023 GMT
            Not After : Aug 14 07:01:12 2025 GMT
        Subject: CN=4e3e7b716cd025c289190341ff038e778c129310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:f5:0e:5e:83:0f:bf:1d:89:50:8e:b5:20:
                    c4:a1:e6:da:a3:56:b8:d3:67:d5:d6:e6:b7:4b:e3:
                    e0:35:06:2b:84:b8:4a:91:8a:84:61:37:98:a9:a1:
                    6e:9f:e2:f5:69:0c:f6:52:d4:f6:05:2f:97:51:f3:
                    ff:02:bd:92:61:8c:bd:b2:be:dc:7d:63:a5:ad:b4:
                    11:04:2e:97:4a:66:a9:74:bb:2c:7f:2b:1c:28:9a:
                    1f:55:32:07:32:c9:1d:a3:09:37:7e:07:2a:26:71:
                    3c:dd:cb:c2:9b:ca:b1:72:1a:3e:36:7b:ef:58:b1:
                    f1:8f:a6:d2:1c:92:3d:d4:22:ec:40:ab:7b:21:43:
                    20:13:f0:62:c1:da:a4:8b:65:07:8d:82:ea:11:f0:
                    63:a9:a3:9d:3c:3a:c1:11:96:80:a4:94:7a:33:b2:
                    0e:74:e1:e1:f8:8d:7f:d3:1d:41:6c:90:34:5a:e7:
                    2c:51:a1:e7:d9:58:35:3a:f2:f3:d3:94:63:b6:0b:
                    c8:3a:bb:89:5a:49:c7:ec:17:f3:59:9e:4c:91:38:
                    79:16:a7:ba:02:71:e9:3a:cf:70:cd:ee:6d:ad:cf:
                    dc:0a:e8:36:86:6e:a8:71:70:86:de:29:b9:63:f5:
                    a0:4a:77:d1:34:1a:45:ba:be:a2:7d:ee:ad:96:bb:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D3:E2:DD:08:E4:4E:81:35:69:4D:2A:B1:67:D4:E0:22:3B:C6:FB
            X509v3 Authority Key Identifier:
                keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/4e3e7b716cd025c289190341ff038e778c129310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.132.0/24
                  45.170.134.0/23
                IPv6:
                  2803:aba0:2000::-2803:aba0:2300:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:18:27:18:56:c2:2d:37:f9:1f:80:6a:96:8f:bb:04:82:
         4b:59:5c:89:c0:64:c9:b7:8f:0b:f6:e4:a6:40:6d:8c:64:43:
         94:89:f2:53:06:0b:a1:93:71:f8:fa:a3:17:82:4a:57:03:74:
         0c:64:20:d5:2f:c3:b7:11:29:78:2f:44:d2:98:da:6e:10:06:
         31:b4:48:02:13:5a:22:66:e7:b0:8b:e1:af:d3:a7:7a:f4:81:
         e1:04:80:94:d8:59:5a:6c:8d:dc:4e:1d:e2:5f:de:72:33:5e:
         52:fe:da:c0:3a:7f:68:7f:a2:7d:4d:4b:84:9f:65:bb:84:e0:
         11:55:0f:d4:58:09:f1:5c:13:5f:f2:4d:54:92:66:fb:21:bd:
         c1:92:7b:72:03:aa:c9:fb:df:d8:de:99:25:17:8d:9c:3f:fe:
         08:0e:30:4a:d2:5d:74:2e:6f:7d:da:f3:26:70:f2:cf:0e:1f:
         88:77:2c:dd:5c:bf:8b:68:fb:94:53:85:1f:bc:a4:f7:89:d4:
         a9:bf:de:8d:3a:4c:1a:2e:c0:dd:db:36:a1:44:05:c5:17:b6:
         82:2f:20:0a:37:77:bb:e4:d9:17:45:aa:14:0f:b4:b1:d1:b0:
         f8:5c:e7:77:02:87:8b:88:4c:ac:c3:01:2d:6b:d1:ce:82:52:
         d3:a1:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----