Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/2e350a491b02e49fb10e73062255085deb050892.roa
File:                     2e350a491b02e49fb10e73062255085deb050892.roa (raw, json)
Hash identifier:          iFSI0l/vsLR+fOzubpUe+gj5vgsfpyqZlXw2s1WHZkw=
Subject key identifier:   47:38:18:94:20:C2:8B:AA:8C:C3:5D:DD:D3:7F:2D:54:36:3C:66:05
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       18E523
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/2e350a491b02e49fb10e73062255085deb050892.roa
Signing time:             Tue 31 Oct 2023 00:25:06 +0000
ROA not before:           Tue 31 Oct 2023 00:25:06 +0000
ROA not after:            Fri 31 Oct 2025 00:25:06 +0000
asID:                     267857
IP address blocks:        45.173.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631523 (0x18e523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Oct 31 00:25:06 2023 GMT
            Not After : Oct 31 00:25:06 2025 GMT
        Subject: CN=2e350a491b02e49fb10e73062255085deb050892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:82:4d:b1:29:ba:da:26:d9:0b:9c:66:0a:
                    6a:48:46:d3:52:64:42:20:25:41:52:2a:8a:7e:27:
                    e7:36:45:30:0c:71:ed:50:e2:42:90:ce:b0:0e:90:
                    bb:19:e6:2c:ad:55:41:d9:77:eb:71:46:a8:e1:59:
                    50:36:e4:3d:bc:48:d3:b1:9c:68:bf:a4:00:fc:c0:
                    48:b2:03:64:e6:3e:d1:d3:99:13:f2:e2:d7:ba:e2:
                    64:d6:87:9d:3b:5c:dc:57:c3:2b:af:af:9c:d5:e2:
                    bf:ab:3e:ee:f7:63:16:73:8a:d5:dd:b5:be:31:a3:
                    72:33:dd:92:55:33:1e:26:e0:44:61:60:35:2d:c8:
                    d1:b3:98:63:d6:c4:f5:02:6f:df:29:8f:ab:a6:ee:
                    29:b3:ba:56:e4:eb:38:81:d5:0c:24:ed:72:57:d5:
                    2a:40:18:7c:04:da:b1:94:d7:1d:e6:37:0b:1e:d7:
                    61:79:11:18:09:3d:50:c2:57:e6:eb:d6:08:b5:b0:
                    d0:78:a5:08:e0:4a:0e:06:46:a9:36:1b:51:13:6c:
                    a4:38:69:b9:70:69:bc:b2:89:f9:62:e6:8d:29:5c:
                    38:9e:bf:66:db:0f:b1:df:23:27:4c:2b:17:52:36:
                    38:76:fa:bc:05:29:72:d2:a0:35:ac:f6:fc:7b:1d:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:38:18:94:20:C2:8B:AA:8C:C3:5D:DD:D3:7F:2D:54:36:3C:66:05
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/2e350a491b02e49fb10e73062255085deb050892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:29:ee:d0:41:01:f9:6b:c6:7c:d1:5e:b7:3e:9d:e0:46:65:
         4e:0b:59:e1:b6:87:bc:d6:1d:ce:2f:e5:40:6a:17:46:55:ca:
         df:ce:b6:35:96:d4:f5:36:a1:30:0f:4a:a3:de:33:41:55:56:
         ee:f0:62:d5:ea:cd:90:d8:5f:c8:ad:10:05:11:3e:f7:d1:e8:
         21:cc:7a:0d:6f:40:50:14:84:60:48:89:6a:70:61:0e:05:40:
         6f:b1:25:8e:7a:39:c5:ff:d8:3f:e0:ac:f8:7b:45:4a:c5:52:
         b4:c8:1a:2b:90:5f:e4:90:7e:fa:7c:78:c3:c8:81:a1:32:fe:
         54:75:5b:75:89:9a:22:15:7c:c9:e0:60:fe:6a:e7:7b:2f:d4:
         32:72:72:f4:9a:0c:99:43:67:6d:45:2a:f9:88:b8:c5:18:36:
         f6:55:d8:7d:82:9c:91:d2:6b:11:88:b7:c9:95:46:fc:3f:a8:
         e6:2c:64:77:cf:75:b1:9f:12:2d:6c:35:40:86:da:4b:65:d0:
         aa:68:e5:03:7c:af:94:50:1c:8e:60:41:ba:65:0e:1e:20:1b:
         31:23:15:1d:11:0d:84:d5:86:b6:f4:33:48:d3:46:74:3b:d8:
         20:f4:5b:03:1d:37:1d:77:c7:b0:7a:e6:7d:bb:66:84:60:a5:
         de:58:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----