Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/d0e6d278c031ecd5fe576bb3cd817be9d463d677.roa
File:                     d0e6d278c031ecd5fe576bb3cd817be9d463d677.roa (raw, json)
Hash identifier:          lc4L1/n6g3tbx/yy2KlEfekMVYxugwLn6OC0ryTmJ6A=
Subject key identifier:   A5:B1:06:F4:97:2E:26:88:44:87:C9:C2:D5:DE:BF:8E:19:51:35:D8
Certificate issuer:       /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial:       26032B
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/d0e6d278c031ecd5fe576bb3cd817be9d463d677.roa
Signing time:             Tue 23 Jan 2024 18:02:17 +0000
ROA not before:           Tue 23 Jan 2024 18:02:17 +0000
ROA not after:            Fri 23 Jan 2026 18:02:17 +0000
asID:                     271795
IP address blocks:        45.169.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491179 (0x26032b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
        Validity
            Not Before: Jan 23 18:02:17 2024 GMT
            Not After : Jan 23 18:02:17 2026 GMT
        Subject: CN=d0e6d278c031ecd5fe576bb3cd817be9d463d677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:b5:14:c2:af:e1:ad:af:3b:3e:6d:21:35:
                    f9:bd:8d:aa:fe:8c:e7:67:6c:79:ec:18:07:99:6c:
                    0f:e7:0a:16:1f:1f:14:e0:d0:8f:6d:19:ed:4f:b3:
                    4c:5a:4e:2f:f5:ec:7d:06:17:90:95:94:3b:5d:e4:
                    23:8d:67:c0:03:e3:de:9f:69:21:4f:2a:b5:88:00:
                    f7:06:00:40:c4:c0:ce:40:51:ff:fa:89:05:81:1c:
                    f0:c8:8a:15:37:6b:ce:17:55:5b:c8:57:73:47:9c:
                    80:8c:7d:d1:79:84:a6:21:ed:c9:a6:ba:11:24:95:
                    2b:ff:10:a7:0c:96:13:99:d5:5c:96:ba:c1:7a:27:
                    53:1b:f8:46:f0:c3:fb:c4:fe:c4:20:f3:ef:29:5a:
                    2c:0e:5b:1d:19:08:76:05:72:58:a7:12:9e:b0:8f:
                    ee:bf:2c:52:b5:ab:35:d0:32:b8:d4:d4:72:97:ae:
                    b3:55:b7:8f:06:9d:8f:da:16:ba:fb:98:8f:5c:c6:
                    e3:06:7b:9f:53:7b:7d:54:2e:47:0b:ee:68:04:c2:
                    1b:ab:ae:86:a9:96:fa:78:97:3a:d4:a0:ed:74:fd:
                    be:6d:89:09:33:fe:2b:cf:3e:20:92:22:83:d3:be:
                    5d:dd:83:9e:1f:05:dc:2a:96:72:37:f9:9c:41:2f:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:06:F4:97:2E:26:88:44:87:C9:C2:D5:DE:BF:8E:19:51:35:D8
            X509v3 Authority Key Identifier:
                keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/d0e6d278c031ecd5fe576bb3cd817be9d463d677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:83:90:5c:7b:47:4c:7c:62:62:37:1c:59:ce:7b:ef:c0:f0:
         63:a8:a3:a1:76:72:fe:80:e1:73:98:86:41:7f:de:e3:f2:37:
         14:2b:00:01:7e:e1:24:ab:9d:0f:ab:3a:04:82:0a:4e:6a:83:
         3e:ed:c0:a6:10:a5:6e:c9:82:ad:5f:9f:be:08:13:62:81:03:
         b3:0f:6f:a6:71:94:56:14:4e:32:1f:2c:d5:a3:6a:6b:0a:6e:
         b1:1d:eb:9d:6c:7e:1c:4c:61:7e:41:c9:97:6f:79:8d:8b:2e:
         07:8d:d5:d5:66:e7:04:71:5b:4a:de:71:73:e9:54:1e:80:d3:
         81:cc:3e:f8:b3:5c:0a:10:3f:c4:05:26:37:78:7c:64:7d:20:
         42:e0:8b:af:8b:a3:4c:d0:71:ab:0f:c7:fd:4c:d4:a2:17:a7:
         7a:f8:e1:7b:72:a7:64:f4:83:f8:40:6f:70:df:28:57:a2:4a:
         81:07:0c:9a:1b:41:d5:1b:5d:e7:91:76:00:d0:9b:df:2d:af:
         e2:23:fe:86:6e:3d:60:82:47:1a:ec:de:ab:bd:9b:1e:e4:28:
         7d:03:0d:da:01:5a:8b:1e:ff:98:63:c3:04:a2:5e:d3:f6:aa:
         f8:3c:c4:99:55:22:f4:0c:57:82:d4:c6:08:b3:3e:37:1f:93:
         6f:99:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----