Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/f931bc377fc61f206b993926a1576a0c28cfffef.roa
File:                     f931bc377fc61f206b993926a1576a0c28cfffef.roa (raw, json)
Hash identifier:          2vmREqGYJ6rr9EOcpjmMl3M7X6OBGlR1hEpxBFU8Sj0=
Subject key identifier:   9B:49:BF:A0:1C:90:21:39:55:EE:84:B2:86:C3:E3:61:10:2F:AB:09
Certificate issuer:       /CN=5bd12ac43ee0fa27bacdeeb51a158f080b005465
Certificate serial:       24B627
Authority key identifier: AB:22:34:58:B3:62:1C:B5:68:13:10:E5:30:2C:9E:2F:1B:83:FD:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bd12ac43ee0fa27bacdeeb51a158f080b005465.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/f931bc377fc61f206b993926a1576a0c28cfffef.roa
Signing time:             Sat 25 Nov 2023 07:30:00 +0000
ROA not before:           Sat 25 Nov 2023 07:30:00 +0000
ROA not after:            Mon 24 Nov 2025 07:30:00 +0000
asID:                     266891
IP address blocks:        45.161.112.0/22 maxlen: 22
                          2803:66a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405927 (0x24b627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd12ac43ee0fa27bacdeeb51a158f080b005465
        Validity
            Not Before: Nov 25 07:30:00 2023 GMT
            Not After : Nov 24 07:30:00 2025 GMT
        Subject: CN=f931bc377fc61f206b993926a1576a0c28cfffef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:e8:9b:0f:3c:38:a1:bf:1f:03:c7:70:2d:
                    d5:fd:e2:95:ba:f2:2a:03:45:cb:4a:30:3e:79:5a:
                    44:95:c3:42:de:43:09:30:14:ee:a5:31:d9:ac:4f:
                    6e:f4:93:0f:36:85:09:25:64:f7:0b:f3:90:88:34:
                    f0:64:9f:fb:11:04:85:75:f4:df:57:5e:79:db:35:
                    ce:06:68:11:f8:d3:37:76:42:91:4f:17:e9:2e:97:
                    9a:8b:36:f9:83:b6:93:d6:32:0c:25:a9:4e:11:07:
                    13:20:78:b3:90:7b:b1:c1:1e:30:fe:99:6d:7a:46:
                    c0:76:b0:56:7c:f9:3d:c0:0c:31:8a:31:6e:f3:80:
                    e7:08:70:45:9a:39:40:bb:ca:46:62:52:95:33:25:
                    d9:f2:23:16:88:c8:3a:4c:be:e9:e4:46:68:2e:73:
                    bd:6f:d2:45:fc:48:ab:bb:65:bb:0d:12:b2:af:9e:
                    0f:04:7d:77:61:45:19:94:5a:16:23:88:ad:13:8f:
                    15:37:42:90:f1:94:59:c0:7a:cf:4a:7f:e7:e8:8b:
                    50:0f:50:c4:94:c3:93:32:2a:7f:3c:fd:5a:5d:17:
                    73:54:e5:bf:b2:90:cb:dc:2c:31:86:96:7d:f2:88:
                    52:70:d5:4a:58:c8:17:83:cb:32:a6:9e:64:c0:45:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:BF:A0:1C:90:21:39:55:EE:84:B2:86:C3:E3:61:10:2F:AB:09
            X509v3 Authority Key Identifier:
                keyid:AB:22:34:58:B3:62:1C:B5:68:13:10:E5:30:2C:9E:2F:1B:83:FD:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bd12ac43ee0fa27bacdeeb51a158f080b005465.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/f931bc377fc61f206b993926a1576a0c28cfffef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82cef165-3c9a-47ec-9da7-b1c93068009c/5bd12ac43ee0fa27bacdeeb51a158f080b005465.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.112.0/22
                IPv6:
                  2803:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:54:24:e6:dd:a2:02:83:eb:26:40:ca:ea:3a:72:42:14:
         19:48:0d:6e:20:a2:74:93:5c:f9:c9:db:79:22:d1:41:a6:d7:
         fb:02:dd:ac:ab:fa:09:c1:6b:45:90:e6:14:18:32:3b:64:57:
         80:5c:ec:b2:29:5f:a0:6d:b7:46:a3:76:2e:58:1f:77:71:7f:
         58:78:c2:fb:ae:01:60:c4:7e:0e:ab:bd:3f:98:35:d8:6d:17:
         ab:49:0d:1e:ed:22:c4:5e:51:f3:ab:b0:db:f7:0e:a7:04:3c:
         92:ac:aa:9f:71:d6:2b:26:8b:aa:69:69:27:54:44:a7:99:51:
         3e:49:5d:35:ff:0e:0c:c7:9c:2a:a8:04:ce:65:71:fb:86:03:
         10:46:5e:e1:4a:c2:e0:e8:ed:bd:bf:5a:f8:15:f2:05:41:d1:
         50:83:4f:1b:47:1a:f1:d2:c9:70:9b:f2:e5:57:ff:ab:e4:c4:
         c2:95:fa:db:56:f6:3e:7a:58:ca:db:d8:85:28:74:40:5a:18:
         7e:19:bc:d4:bc:5a:b9:5d:8e:2b:47:a9:c3:06:10:2d:fc:d3:
         14:4a:23:ea:c8:a0:ba:a0:b7:8b:77:04:b7:4b:24:96:28:d2:
         ec:6f:bf:32:b2:aa:1b:d0:4d:6f:75:6d:ee:5e:34:33:f6:99:
         3c:83:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----