Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/8c926e9644abd4cea69e4e5d778bfd09fbac0e5d.roa
File:                     8c926e9644abd4cea69e4e5d778bfd09fbac0e5d.roa (raw, json)
Hash identifier:          H9OgfbX9W2Uy58KTj51BIQD6XDlH+gHpSaWSJDEdOm0=
Subject key identifier:   8F:ED:10:C6:A9:64:03:74:AB:DE:09:EF:42:DC:91:59:7F:12:FB:B3
Certificate issuer:       /CN=f056ff181e8a36b117e826806311244d7a47db80
Certificate serial:       240ACA
Authority key identifier: A5:D6:AC:49:50:33:7A:48:BF:76:31:43:0A:DF:EB:37:15:F1:77:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f056ff181e8a36b117e826806311244d7a47db80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/8c926e9644abd4cea69e4e5d778bfd09fbac0e5d.roa
Signing time:             Thu 04 Jan 2024 20:42:23 +0000
ROA not before:           Thu 04 Jan 2024 20:42:23 +0000
ROA not after:            Sun 04 Jan 2026 20:42:23 +0000
asID:                     269792
IP address blocks:        45.182.118.0/24 maxlen: 24
                          2801:1e:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362058 (0x240aca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f056ff181e8a36b117e826806311244d7a47db80
        Validity
            Not Before: Jan  4 20:42:23 2024 GMT
            Not After : Jan  4 20:42:23 2026 GMT
        Subject: CN=8c926e9644abd4cea69e4e5d778bfd09fbac0e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:45:f0:ba:ce:52:d8:9f:61:a3:b3:84:68:
                    8a:1f:fd:ec:de:18:d0:de:ee:e7:54:5a:cb:7a:d8:
                    92:93:fd:ba:1e:72:78:4a:04:fb:0e:aa:6f:d6:31:
                    30:30:0e:15:70:7f:ca:02:d1:cd:ec:14:61:73:3b:
                    cc:72:6d:ae:ff:77:c3:00:5c:b2:46:4f:bb:6e:3b:
                    fe:ee:bd:e8:5f:74:e9:3a:e3:11:7a:fe:63:07:30:
                    8a:b4:0b:2d:43:1f:5e:e2:6e:89:23:cf:f3:d3:64:
                    6b:4a:8b:b0:a7:f1:b9:04:de:8c:97:b7:f6:e2:2b:
                    64:e4:1b:ca:91:1d:bc:e6:85:41:23:ca:bd:63:3c:
                    e2:58:b5:db:dc:ee:d9:8b:43:05:5c:0b:81:9a:d2:
                    0b:c1:41:5a:ea:da:f2:68:02:ab:4b:e3:e4:8c:2a:
                    3d:b3:e2:9f:4d:50:9d:1d:fd:c3:f0:53:6c:5d:3e:
                    7b:17:03:03:c5:2f:f2:23:b8:14:6d:f1:a7:79:39:
                    44:36:5f:61:27:46:9e:e2:9d:73:a5:4f:6b:aa:50:
                    03:16:be:d5:ae:60:ed:de:54:e2:75:c3:e4:23:86:
                    1c:d2:36:e8:ca:26:e0:99:35:e8:bd:8c:dc:c1:08:
                    60:32:96:a4:0e:0c:78:2c:39:e6:c8:e0:7d:d8:f4:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:10:C6:A9:64:03:74:AB:DE:09:EF:42:DC:91:59:7F:12:FB:B3
            X509v3 Authority Key Identifier:
                keyid:A5:D6:AC:49:50:33:7A:48:BF:76:31:43:0A:DF:EB:37:15:F1:77:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f056ff181e8a36b117e826806311244d7a47db80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/8c926e9644abd4cea69e4e5d778bfd09fbac0e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6cf28d0c-d8bb-4d08-9c9a-f4b64080a218/f056ff181e8a36b117e826806311244d7a47db80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.118.0/24
                IPv6:
                  2801:1e:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:94:f0:c1:5c:4e:cd:5d:c3:6f:92:da:88:f0:64:b0:4e:
         a4:60:1c:3b:ab:05:c6:13:59:f5:1e:4d:dc:8a:53:d1:90:fe:
         13:9c:a9:85:5a:3e:a1:c2:bc:79:10:bd:2c:1b:f2:87:c1:cb:
         0f:21:93:46:3d:e3:18:58:e4:1f:69:f3:2d:ba:27:00:47:35:
         c6:b0:d1:e5:3d:50:e9:c2:ea:6d:a7:83:25:de:8d:da:a0:ca:
         72:e9:f6:1e:bd:0c:f4:79:52:01:4e:fa:43:35:e7:ed:a1:bf:
         ba:64:49:dc:4b:94:1b:55:19:a8:bd:8b:f7:56:de:e6:19:75:
         f5:bb:9c:ad:0f:25:1b:8e:cf:91:74:f8:62:27:09:dd:38:8d:
         ff:2e:ce:97:45:d0:c0:85:4a:9b:c2:ca:1f:aa:51:a7:36:6b:
         39:7f:fb:6f:69:f7:fb:a1:ff:9a:15:78:78:0d:bf:8e:63:92:
         16:e4:0d:eb:79:f6:ff:d6:1c:ee:26:db:55:35:68:49:5a:9c:
         ba:8d:8e:64:c2:08:1d:20:9b:f4:fb:9a:75:77:8f:d9:93:ca:
         61:80:aa:31:eb:e6:42:8a:00:16:40:ab:8f:0d:b1:5d:8b:cd:
         cc:d1:3b:9e:04:d1:c4:b5:fc:96:0b:fd:87:18:31:f8:10:e4:
         b6:bc:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----