Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/0a3c29d6b0f4935a087690bbeedd43cdfd3ed46d.roa
File:                     0a3c29d6b0f4935a087690bbeedd43cdfd3ed46d.roa (raw, json)
Hash identifier:          qLKZnjrYWQa7mUXlk14EUFALNC3gepXZgegrGTaC4cA=
Subject key identifier:   5D:37:35:74:AE:58:6C:63:BC:B0:0A:E2:73:C2:E6:56:EC:0D:C9:EB
Certificate issuer:       /CN=7e3bfa55647c1f71803278f9d912326ef9efb144
Certificate serial:       1767A8
Authority key identifier: 2F:A1:CD:32:C2:97:48:E8:A0:D2:EE:4E:7C:8E:F5:B5:89:18:5A:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e3bfa55647c1f71803278f9d912326ef9efb144.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/0a3c29d6b0f4935a087690bbeedd43cdfd3ed46d.roa
Signing time:             Fri 24 Mar 2023 08:31:27 +0000
ROA not before:           Thu 23 Mar 2023 08:31:27 +0000
ROA not after:            Sat 22 Mar 2025 08:31:27 +0000
asID:                     265696
IP address blocks:        45.5.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533864 (0x1767a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3bfa55647c1f71803278f9d912326ef9efb144
        Validity
            Not Before: Mar 23 08:31:27 2023 GMT
            Not After : Mar 22 08:31:27 2025 GMT
        Subject: CN=0a3c29d6b0f4935a087690bbeedd43cdfd3ed46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:1d:c1:a4:c8:35:a2:2a:97:54:dd:7b:47:
                    45:2c:94:0d:6d:9f:80:c5:f4:c3:f9:bb:cf:b2:a8:
                    32:4b:5f:f3:12:7a:74:1e:64:21:63:5d:64:cd:0f:
                    82:e0:bc:e3:c0:f4:aa:4e:0f:61:dc:77:a8:6a:db:
                    79:ef:da:09:7b:70:d5:c8:67:90:49:4f:31:ce:f8:
                    98:ae:2d:5f:e8:37:09:62:9c:0e:0f:1b:e6:8b:1b:
                    9a:7e:58:45:ba:e3:a1:73:1b:7a:ca:68:b5:0a:c3:
                    5c:04:bb:1e:bb:c2:38:90:37:08:ed:20:24:66:97:
                    fe:a1:71:66:fe:06:6d:d2:2c:49:ba:3e:48:63:97:
                    b1:a6:9d:44:fd:e5:d4:e9:b3:1c:24:7f:8f:76:d7:
                    9d:29:1a:5a:d6:cc:b0:c2:d7:4d:4c:35:a5:d3:76:
                    5d:a6:e7:fa:a3:d0:88:09:50:8c:4a:d7:b4:73:f5:
                    d8:2f:6c:96:c3:68:7a:b1:09:11:60:b5:28:68:62:
                    93:e6:31:1d:4c:14:f3:de:91:42:4a:6d:5b:37:2c:
                    8c:e9:da:7e:81:df:3d:9f:cb:3d:38:dd:3e:d8:0a:
                    3f:32:50:cd:aa:52:70:e3:da:6e:3a:0d:a7:25:82:
                    ad:f4:49:6f:99:77:e0:f3:ba:21:13:39:a2:87:00:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:37:35:74:AE:58:6C:63:BC:B0:0A:E2:73:C2:E6:56:EC:0D:C9:EB
            X509v3 Authority Key Identifier:
                keyid:2F:A1:CD:32:C2:97:48:E8:A0:D2:EE:4E:7C:8E:F5:B5:89:18:5A:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e3bfa55647c1f71803278f9d912326ef9efb144.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/0a3c29d6b0f4935a087690bbeedd43cdfd3ed46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7a9397b9-1b43-4e52-ba41-509a28695f5c/7e3bfa55647c1f71803278f9d912326ef9efb144.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:ea:bd:2b:d5:b1:22:e9:af:2d:40:62:5c:1f:07:65:8e:
         c7:2e:19:c7:35:f3:63:37:f0:5c:66:88:f8:6f:65:96:2a:43:
         ea:ae:81:34:30:58:8d:dd:c0:ec:41:34:f9:6a:9d:df:a6:a4:
         68:08:ad:82:8e:bc:f5:07:95:54:9e:a7:06:9d:8f:a9:a7:2c:
         a6:ce:69:d4:30:c3:49:c7:b9:cf:94:af:73:48:22:78:77:3d:
         c4:14:ea:01:91:06:b0:94:21:e9:f7:14:3e:f7:b2:23:df:54:
         01:c0:ed:d7:27:f3:13:5c:1d:99:d5:bf:75:bf:31:29:cc:f8:
         c2:80:9c:11:05:df:2e:ed:d8:88:48:43:fe:c9:da:a4:1e:b8:
         82:97:20:b0:de:82:29:c9:f4:a9:d9:89:83:a1:8a:31:ae:85:
         5a:bf:50:f4:79:e2:e8:a2:5e:ab:60:a1:54:01:f4:1b:fb:fe:
         ac:2a:2e:af:45:92:8a:78:87:dd:a3:52:09:eb:15:0d:5d:f4:
         97:34:b2:21:02:be:07:96:a9:a7:3b:7c:4a:a6:e0:26:82:df:
         c0:f7:6d:ed:e5:71:f4:ad:de:b3:62:ed:db:61:80:48:9c:0e:
         d4:f2:fa:b2:e4:40:6a:43:d5:3a:39:ee:23:91:19:0c:f3:7d:
         55:36:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----