Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73986074-5987-456f-be55-de7b83cf29b8/79b96f46cba5acaa7d6ed88a6c0ec5725216a3b5.roa
File:                     79b96f46cba5acaa7d6ed88a6c0ec5725216a3b5.roa (raw, json)
Hash identifier:          587jo6Ix/YzlY/l0zdtUBh7Nv+NkWB1bnj7eaTqLS6c=
Subject key identifier:   33:DB:2D:AA:1C:74:1C:03:E5:66:29:A0:EA:68:BD:1B:1C:A1:6F:F7
Certificate issuer:       /CN=08caeb84dfb10286400c4cb46ba18fe18ba68866
Certificate serial:       209B81
Authority key identifier: FA:CB:73:51:7C:B4:F5:2B:D1:56:09:A4:74:61:A7:2F:D0:D7:24:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08caeb84dfb10286400c4cb46ba18fe18ba68866.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73986074-5987-456f-be55-de7b83cf29b8/79b96f46cba5acaa7d6ed88a6c0ec5725216a3b5.roa
Signing time:             Thu 26 Oct 2023 07:30:02 +0000
ROA not before:           Thu 26 Oct 2023 07:30:02 +0000
ROA not after:            Sat 25 Oct 2025 07:30:02 +0000
asID:                     269917
IP address blocks:        45.191.176.0/22 maxlen: 24
                          2803:2e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136961 (0x209b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08caeb84dfb10286400c4cb46ba18fe18ba68866
        Validity
            Not Before: Oct 26 07:30:02 2023 GMT
            Not After : Oct 25 07:30:02 2025 GMT
        Subject: CN=79b96f46cba5acaa7d6ed88a6c0ec5725216a3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:01:1c:8c:1e:77:65:57:8e:55:08:f0:a5:
                    ed:9a:56:23:8f:74:73:64:5a:64:a9:64:97:05:3a:
                    8e:ea:84:99:f0:c6:54:c3:1f:7c:45:13:3d:3b:a8:
                    dd:b9:b2:cf:19:56:83:5b:21:8b:2f:23:31:42:5a:
                    86:88:d0:e1:b6:1a:4e:2f:13:c0:b8:d4:fc:45:76:
                    00:12:6b:d9:c6:fc:e2:97:6c:68:87:51:65:a4:21:
                    f2:eb:10:e0:85:ac:67:0d:df:b6:a4:04:02:c4:be:
                    eb:33:ed:7b:6d:95:6e:4a:0c:9b:64:1a:ca:5d:0b:
                    54:79:b5:0f:43:87:dc:98:fd:df:c1:6c:ae:c1:52:
                    24:4b:dc:1b:88:99:b7:03:ad:69:51:82:b4:74:fb:
                    36:9e:68:f8:6e:4d:47:b5:58:0a:9a:35:7f:c9:97:
                    bc:03:87:d7:0f:78:a2:7c:36:e8:df:20:72:55:9e:
                    8f:b4:78:a9:5e:4b:c7:40:43:ad:df:a8:ae:f9:ef:
                    65:e2:8f:35:b9:b6:91:8a:ca:a8:f6:a0:4b:fa:90:
                    79:bb:7d:4d:7b:11:14:7f:76:6a:3c:3d:7e:80:65:
                    93:e9:ff:9d:c5:84:2b:53:6f:4f:6e:c8:44:50:49:
                    0e:41:2b:63:f9:c5:21:8a:96:b3:aa:09:25:52:ae:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:2D:AA:1C:74:1C:03:E5:66:29:A0:EA:68:BD:1B:1C:A1:6F:F7
            X509v3 Authority Key Identifier:
                keyid:FA:CB:73:51:7C:B4:F5:2B:D1:56:09:A4:74:61:A7:2F:D0:D7:24:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08caeb84dfb10286400c4cb46ba18fe18ba68866.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73986074-5987-456f-be55-de7b83cf29b8/79b96f46cba5acaa7d6ed88a6c0ec5725216a3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73986074-5987-456f-be55-de7b83cf29b8/08caeb84dfb10286400c4cb46ba18fe18ba68866.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.176.0/22
                IPv6:
                  2803:2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:25:33:44:d6:6e:5b:84:68:f5:1d:13:f5:92:d8:3b:da:
         d3:64:bd:10:d4:dd:d7:2d:06:73:da:0b:1e:73:b6:5f:09:ad:
         57:df:f6:f7:72:d9:66:39:0b:fa:b7:ee:d0:df:02:f6:f1:9e:
         41:37:ef:e9:23:06:2c:3b:6c:ee:00:ce:6f:0c:4a:1b:4f:81:
         ff:80:5c:ba:43:99:34:92:d8:27:6c:82:8e:6a:da:43:0a:5f:
         fc:69:f8:df:0f:e9:92:db:fd:0c:72:d2:80:8e:d6:a5:ab:f8:
         7e:3c:e7:b5:48:d5:e2:57:92:98:79:58:22:e0:f3:4f:27:ba:
         06:f5:9c:d4:2f:04:14:5e:a4:dc:3a:d1:f1:3d:49:ca:52:8d:
         87:72:19:30:e0:92:b2:7a:a2:f8:bf:d3:41:bc:62:44:88:ef:
         71:e9:be:d6:1c:ce:36:a9:15:2d:90:0e:a0:3f:4d:33:02:09:
         e5:39:4c:48:3c:50:be:84:1b:9c:ae:42:9e:6c:16:17:51:b8:
         60:21:99:46:bc:b8:05:3e:c0:01:22:5c:00:c4:cd:fa:72:5d:
         46:b4:ce:1b:ba:35:57:42:53:37:bc:47:ba:d8:18:27:c4:6e:
         2d:6d:bf:9c:8d:87:4f:a6:6e:76:bc:bb:7a:3f:6c:b0:f5:6e:
         51:54:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----