Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/07041d9f1d957de9b71f547569a3523d667957d5.roa
File:                     07041d9f1d957de9b71f547569a3523d667957d5.roa (raw, json)
Hash identifier:          ++fp3J6VfmH+rzlh00Xp3F6XQ602wc7XUCyR7Gaf25w=
Subject key identifier:   8B:01:BB:39:EF:5D:14:30:30:94:4E:3A:CB:DD:DA:83:BD:6C:B8:B7
Certificate issuer:       /CN=f26964717aee328aa075133d358d96bd312b9bed
Certificate serial:       27411C
Authority key identifier: 69:D7:29:83:99:8B:1B:75:D8:B6:0B:7A:37:6D:43:F3:D3:FE:AF:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f26964717aee328aa075133d358d96bd312b9bed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/07041d9f1d957de9b71f547569a3523d667957d5.roa
Signing time:             Thu 21 Mar 2024 19:14:30 +0000
ROA not before:           Thu 21 Mar 2024 19:14:29 +0000
ROA not after:            Sat 21 Mar 2026 19:14:29 +0000
asID:                     265684
IP address blocks:        45.228.232.0/24 maxlen: 24
                          2803:d20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572572 (0x27411c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26964717aee328aa075133d358d96bd312b9bed
        Validity
            Not Before: Mar 21 19:14:29 2024 GMT
            Not After : Mar 21 19:14:29 2026 GMT
        Subject: CN=07041d9f1d957de9b71f547569a3523d667957d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:44:b5:38:77:c0:2f:60:e0:0b:48:79:c5:
                    51:36:42:a0:a1:e2:d8:7d:09:cf:58:96:99:55:08:
                    3c:ed:cb:a5:27:3f:da:de:53:2b:cf:9b:f4:94:a9:
                    ef:1f:a2:02:1e:1c:8a:b2:b0:e1:7b:33:6c:07:a1:
                    dc:63:41:32:2c:a3:47:2f:b2:03:5f:d9:f6:d0:67:
                    13:bf:b7:7b:52:5e:a0:c9:89:c6:ad:29:40:05:c9:
                    4e:fd:13:d9:34:d3:78:db:34:8a:59:d8:c8:2d:07:
                    d6:8a:7f:0d:a1:5c:2e:09:56:c3:1d:dc:e1:e8:48:
                    91:91:fe:f2:5b:66:db:81:ac:5b:5c:4e:e4:b4:be:
                    dd:36:78:53:66:c3:57:70:16:49:74:83:1d:9d:75:
                    54:22:25:9b:24:0a:19:c5:6a:8e:8b:0a:77:73:6d:
                    ef:6d:3f:f9:6e:85:46:42:f0:f8:e2:98:fd:f3:28:
                    dd:51:0a:9b:64:2b:a9:73:ad:9b:dc:00:72:29:bf:
                    65:54:0e:a7:0b:29:4b:7e:8b:95:0b:48:27:8d:a4:
                    fb:d4:14:71:17:c1:3d:92:70:c4:9c:7f:6c:ae:e9:
                    b1:b0:4f:3b:a5:a7:64:88:dd:93:17:b7:5c:c0:91:
                    40:71:c0:51:69:39:2c:c2:ae:e3:a4:d8:1f:7d:c2:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:BB:39:EF:5D:14:30:30:94:4E:3A:CB:DD:DA:83:BD:6C:B8:B7
            X509v3 Authority Key Identifier:
                keyid:69:D7:29:83:99:8B:1B:75:D8:B6:0B:7A:37:6D:43:F3:D3:FE:AF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f26964717aee328aa075133d358d96bd312b9bed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/07041d9f1d957de9b71f547569a3523d667957d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/f26964717aee328aa075133d358d96bd312b9bed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.232.0/24
                IPv6:
                  2803:d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:4f:14:a5:11:6c:24:88:a9:d6:87:03:4b:e3:6b:80:87:92:
         ef:06:a0:16:b9:c7:54:52:54:e6:72:8c:13:59:f8:a1:44:51:
         c9:8f:59:fa:df:1e:21:87:24:4c:0d:36:f9:43:40:71:7c:2c:
         65:3e:95:dc:26:64:5f:a3:c8:71:07:ea:e4:dd:1b:84:9b:24:
         fc:da:89:b1:bb:29:32:7f:ae:89:6f:2d:0f:ed:83:20:75:3b:
         25:28:4b:b2:e4:d6:4b:f1:a0:3f:c3:d8:81:42:48:89:60:7f:
         7c:e5:fd:8f:6b:5b:3b:5d:aa:13:17:75:4f:8c:bb:62:f8:95:
         76:cc:ba:6e:54:88:9b:c6:ca:f0:0c:01:8c:5b:af:8d:b8:92:
         d6:46:5c:17:d4:a1:67:98:7e:4a:5f:5f:7c:7e:65:07:30:f7:
         f6:aa:c1:24:02:53:8b:c6:55:a7:ff:ee:be:9e:1a:ed:08:c9:
         80:1c:33:a4:84:57:aa:f6:12:6d:47:5e:4d:88:cf:88:d2:7f:
         93:50:1c:8e:ed:0f:98:73:ec:56:39:d0:ad:0f:f4:2b:4a:f4:
         94:aa:d2:d0:ae:b0:5b:2c:8d:3d:55:8e:2b:e7:ed:2b:c9:b1:
         00:7f:83:2e:a6:8f:29:ff:24:63:e0:40:a4:0e:c8:ed:59:1f:
         3c:f7:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----