Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/acd697e1298242fe2881dba78449822b7db231e7.roa
File:                     acd697e1298242fe2881dba78449822b7db231e7.roa (raw, json)
Hash identifier:          z9rwG7/aVfSv7+RyITgqCde024oeSTRg9Bg9CMB2jmg=
Subject key identifier:   56:32:A9:9D:51:52:A4:0F:70:4D:D2:34:18:0B:6D:AA:72:68:BE:FB
Certificate issuer:       /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial:       255F17
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/acd697e1298242fe2881dba78449822b7db231e7.roa
Signing time:             Thu 28 Dec 2023 16:54:32 +0000
ROA not before:           Thu 28 Dec 2023 16:54:31 +0000
ROA not after:            Sun 28 Dec 2025 16:54:31 +0000
asID:                     271795
IP address blocks:        45.169.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2449175 (0x255f17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
        Validity
            Not Before: Dec 28 16:54:31 2023 GMT
            Not After : Dec 28 16:54:31 2025 GMT
        Subject: CN=acd697e1298242fe2881dba78449822b7db231e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:d2:82:83:b1:49:8e:ac:66:89:b5:ac:7b:
                    6d:3d:07:1c:92:dd:3f:85:38:b4:a1:1f:11:e0:b6:
                    7a:e9:f6:0c:4a:62:ad:9b:cd:1e:19:1d:cc:44:21:
                    d9:6e:8d:1b:a1:7e:a6:c5:4c:eb:30:40:44:aa:55:
                    e6:84:4a:ce:f0:62:33:b8:b0:ed:20:de:84:20:11:
                    5b:49:ad:93:ff:d9:a4:d5:8e:1d:86:85:96:85:ec:
                    9b:47:16:1d:a4:f6:ea:47:46:0f:a6:70:81:4e:37:
                    fe:dc:cd:45:d7:fd:b1:bd:35:93:40:bc:15:de:f3:
                    7d:d0:87:68:7a:4f:5c:83:8d:7a:b9:23:c6:91:ad:
                    be:67:22:cd:01:9d:0c:55:25:d6:64:16:74:6c:d8:
                    1f:8c:0a:89:56:de:0a:f1:45:38:7e:6e:02:c9:85:
                    e4:ef:5f:de:dc:b3:42:75:cc:fd:0a:88:a2:33:5f:
                    0f:11:f8:6f:e3:f9:88:4d:72:80:25:2a:23:45:05:
                    a9:ae:2b:2a:ad:77:43:88:0b:22:a2:ec:14:5b:39:
                    b1:28:9d:98:42:9b:f9:fd:70:e6:bc:d3:76:3a:3e:
                    f2:ff:99:2d:49:f1:c4:d5:e8:62:1f:64:d0:ad:2f:
                    59:47:5c:70:68:35:74:d3:5e:57:f3:25:ec:bf:bb:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:A9:9D:51:52:A4:0F:70:4D:D2:34:18:0B:6D:AA:72:68:BE:FB
            X509v3 Authority Key Identifier:
                keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/acd697e1298242fe2881dba78449822b7db231e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:21:1a:db:cd:80:67:d1:67:bb:81:1c:9b:8d:e3:51:9b:0e:
         87:98:d5:d1:51:7b:a9:93:1f:21:34:7a:b6:bc:6a:5c:36:f6:
         99:0d:d2:cf:f0:a6:7c:eb:d7:5f:a5:cd:e7:2b:1d:70:f5:66:
         6e:05:f4:ec:9a:db:6c:2a:30:f6:2a:93:9f:d8:58:a1:0d:3e:
         f3:74:6a:ac:8c:39:c7:a3:cc:5f:87:a6:43:61:9c:3e:57:92:
         fd:23:ba:3f:b6:47:6a:d4:62:77:a9:b9:fd:68:99:52:f2:56:
         a3:91:22:d5:27:88:e8:52:d7:5d:a1:06:18:0c:22:e9:85:ad:
         c3:ed:a2:fa:89:64:e7:d6:a5:42:55:27:e4:c8:11:0d:a4:83:
         05:35:c7:89:36:52:d8:a1:0d:c8:68:82:f9:18:e1:4c:36:75:
         97:7b:61:f9:e3:7f:9a:8d:a7:2e:7b:8b:e0:70:f3:21:86:f7:
         aa:69:d9:ee:4d:2a:04:70:b9:e3:4b:c8:9b:14:f9:37:c7:01:
         52:d6:6b:c7:77:c9:b7:d7:7c:e2:9c:95:ec:64:d8:dd:49:c5:
         4b:30:9e:5b:40:0d:c6:44:be:56:8d:c1:41:c9:5a:8c:2d:60:
         13:13:da:fc:83:e0:91:58:cd:39:9f:37:3d:68:20:c5:44:f2:
         c0:1f:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----