Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/0323156e2ae3163e958d94c24c8a0a825da69082.roa
File:                     0323156e2ae3163e958d94c24c8a0a825da69082.roa (raw, json)
Hash identifier:          0HvVnKCKMbtEVPvnMgqNY46Vtk9ASHl/V2SdLM0PTXg=
Subject key identifier:   D3:C8:18:B3:85:C2:6B:D0:7B:8F:AA:E7:01:30:9F:32:9F:7F:A2:DF
Certificate issuer:       /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial:       23AD76
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/0323156e2ae3163e958d94c24c8a0a825da69082.roa
Signing time:             Tue 03 Oct 2023 20:25:15 +0000
ROA not before:           Mon 02 Oct 2023 20:25:15 +0000
ROA not after:            Fri 03 Oct 2025 21:25:15 +0000
asID:                     266802
IP address blocks:        45.236.168.0/22 maxlen: 24
                          2803:a8a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338166 (0x23ad76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
        Validity
            Not Before: Oct  2 20:25:15 2023 GMT
            Not After : Oct  3 21:25:15 2025 GMT
        Subject: CN=0323156e2ae3163e958d94c24c8a0a825da69082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:2c:a4:17:43:8a:d6:18:78:89:0e:01:af:
                    df:4f:66:2f:61:57:5b:03:be:da:1b:9d:29:5a:67:
                    31:1c:5d:f4:e6:e0:5f:a9:fd:87:46:fe:c1:b6:d3:
                    26:a1:09:ce:ec:0e:49:7b:1b:3f:e5:7f:b1:f2:ca:
                    10:7e:6e:29:64:0e:87:4c:f8:7a:0d:5c:e5:17:21:
                    e4:dc:c7:30:da:47:18:ac:45:4a:94:58:12:ae:9a:
                    f8:20:65:36:bd:31:ef:6b:ff:40:fd:c4:08:ca:da:
                    a6:bc:63:40:95:84:2e:60:5b:bc:4f:48:f6:31:93:
                    6d:ca:cb:f5:d8:3a:ed:ff:e9:37:55:a2:e2:88:59:
                    7e:2b:4d:73:78:b8:f0:b2:87:83:c2:3b:22:1a:31:
                    81:26:5b:cb:98:88:59:59:a3:02:64:09:b5:4e:49:
                    35:14:c6:a0:35:89:e0:90:0c:4e:7b:75:86:d3:3d:
                    47:41:25:c4:85:eb:de:dd:6e:18:f4:66:71:ba:6b:
                    14:8f:2f:f6:6f:c4:56:97:78:08:ef:38:b5:f5:5f:
                    78:63:81:47:00:46:97:f7:a0:76:41:6a:bc:ce:af:
                    38:d8:0b:bb:bc:75:7c:0d:8c:03:1e:7d:ba:b8:a7:
                    5d:72:36:e7:e6:fc:7f:cc:31:aa:fa:98:8f:81:41:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C8:18:B3:85:C2:6B:D0:7B:8F:AA:E7:01:30:9F:32:9F:7F:A2:DF
            X509v3 Authority Key Identifier:
                keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/0323156e2ae3163e958d94c24c8a0a825da69082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22
                IPv6:
                  2803:a8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:06:25:1e:e7:8f:00:9c:b9:7c:5c:8e:04:10:02:aa:06:
         d3:c7:40:56:55:ed:30:2f:88:f2:c1:c3:94:58:dc:d5:c5:e6:
         f0:24:4b:51:b1:81:03:ca:5f:63:52:cf:39:1f:00:39:48:5f:
         8a:8e:d1:ea:90:52:0d:cc:48:a4:eb:4e:f6:7e:ec:36:62:ca:
         43:35:2e:0d:55:5d:b7:0b:a4:dc:5d:d0:75:f9:7d:6b:ae:4c:
         a7:ed:c6:20:64:67:06:1c:f0:f9:42:68:e5:f5:b1:eb:93:18:
         1a:e3:fb:d4:59:e3:5d:2e:29:3a:83:9d:8c:a2:d5:2a:c1:c9:
         ca:10:83:2f:7f:2f:c5:f8:9f:29:a6:41:c0:d0:91:61:10:4e:
         de:31:4e:59:00:4a:c6:9e:3d:b8:49:ef:b6:85:85:c4:83:23:
         87:9e:e3:8d:76:c2:09:c4:9b:f9:41:f2:67:73:f0:ff:8f:be:
         cf:ae:12:51:e9:15:e7:d1:e8:45:da:e5:b7:e3:61:d2:bf:c7:
         65:cb:c5:08:70:70:70:dc:76:c8:8e:ab:f2:1b:16:fb:fc:33:
         c2:de:e9:14:44:a5:f6:13:e5:8d:6b:03:61:3a:8d:c7:79:6f:
         ea:61:04:e9:f8:a8:ea:1a:af:cc:99:dd:92:42:8f:e4:9e:4a:
         23:21:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----