Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/5d3ebbaf1ed0e2cd4165afb0affd0eeca5076bdb.roa
File:                     5d3ebbaf1ed0e2cd4165afb0affd0eeca5076bdb.roa (raw, json)
Hash identifier:          ChcE+KWi0UVv/zZFCLTI9AdWi2s5OMslPxPHr1ChnWc=
Subject key identifier:   06:04:BC:C0:2A:19:6E:E3:C9:A2:3E:7A:9F:76:70:B2:5C:95:91:49
Certificate issuer:       /CN=9c0799877aecf01061f13687ad43c4c362608b6a
Certificate serial:       2181DD
Authority key identifier: 7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/5d3ebbaf1ed0e2cd4165afb0affd0eeca5076bdb.roa
Signing time:             Thu 27 Jul 2023 12:46:19 +0000
ROA not before:           Wed 26 Jul 2023 12:46:18 +0000
ROA not after:            Sun 27 Jul 2025 12:46:18 +0000
asID:                     266781
IP address blocks:        45.233.140.0/23 maxlen: 24
                          45.233.142.0/24 maxlen: 24
                          2803:df20::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195933 (0x2181dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0799877aecf01061f13687ad43c4c362608b6a
        Validity
            Not Before: Jul 26 12:46:18 2023 GMT
            Not After : Jul 27 12:46:18 2025 GMT
        Subject: CN=5d3ebbaf1ed0e2cd4165afb0affd0eeca5076bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:23:2f:a6:c9:95:2f:29:a9:62:c5:b5:54:09:
                    ca:d8:e3:60:d0:6e:2f:ab:61:00:c1:3f:9e:9b:bb:
                    4f:0c:26:79:54:72:4e:18:9a:13:e8:d3:0b:82:2a:
                    03:37:f4:d1:a3:9d:cf:9f:61:36:f3:28:26:fc:c2:
                    e2:05:93:76:72:bd:4f:1b:92:4f:c3:85:56:e5:21:
                    33:d8:88:31:e6:87:d7:a6:f6:99:e5:76:80:f3:1b:
                    a9:e7:cb:3e:45:72:f6:3b:63:f7:05:76:d5:bb:de:
                    a0:a2:47:04:e5:2f:67:c6:8e:74:43:98:83:79:49:
                    75:21:2f:e3:06:ac:4d:09:5c:80:08:04:d3:4f:7a:
                    a7:db:dc:9d:55:8e:1d:e4:c4:2c:ca:0e:cd:49:d0:
                    99:aa:a2:ef:ca:e6:b2:7c:47:c2:9d:19:93:a4:96:
                    63:90:9c:a8:73:5a:92:68:70:58:71:8c:4a:7c:b8:
                    65:47:6a:4c:75:c0:66:7d:e4:73:03:31:46:2a:f4:
                    8f:d9:cd:b1:1b:71:d5:be:90:34:ad:1a:73:9d:e3:
                    cc:de:51:c4:18:91:48:91:9d:50:57:f2:7e:99:8a:
                    0e:d4:95:9a:cc:c7:81:ca:27:e8:3a:32:9b:80:ee:
                    14:ad:0c:d1:ce:8b:a2:64:6b:cb:ab:5c:ca:1f:36:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:BC:C0:2A:19:6E:E3:C9:A2:3E:7A:9F:76:70:B2:5C:95:91:49
            X509v3 Authority Key Identifier:
                keyid:7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/5d3ebbaf1ed0e2cd4165afb0affd0eeca5076bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/9c0799877aecf01061f13687ad43c4c362608b6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.140.0-45.233.142.255
                IPv6:
                  2803:df20::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:82:42:f2:2a:1c:35:6f:f9:02:88:64:23:40:94:e0:d9:
         60:61:eb:39:e7:d9:82:33:5c:d4:c6:63:68:f7:1d:63:c2:fc:
         59:6f:73:b9:48:5e:00:97:c6:e8:0d:94:7e:f3:b4:51:fd:6e:
         24:a1:75:ae:03:d7:bb:ec:e0:f9:46:1e:4c:1a:88:ed:de:02:
         05:34:f1:be:c1:95:bf:8c:dc:59:c1:4d:02:b4:66:77:13:b2:
         a5:bf:49:f5:77:2d:bd:b1:fb:f9:0f:8f:07:78:ca:27:88:85:
         2f:0a:ac:32:68:7f:c0:4f:18:8f:4a:43:45:50:99:c7:12:64:
         b0:a5:23:56:21:a8:16:76:35:3c:3a:9f:a5:59:b8:6a:c0:ce:
         cb:ce:3e:a7:43:15:c4:04:98:fd:a8:31:97:68:37:3b:11:5a:
         64:38:1b:44:02:8e:9b:74:4c:ce:a8:99:d5:3b:5d:c6:1d:86:
         6b:ac:72:fa:67:ae:56:d1:dc:5f:98:1b:55:29:94:d3:59:7a:
         5f:f9:18:99:1e:75:0d:2f:0a:6e:a6:9d:17:c8:6e:02:68:dc:
         ce:00:10:dd:ad:77:70:80:fd:d5:5d:d6:a2:fb:c6:bb:65:6e:
         42:97:dd:c7:5c:9e:0c:11:bc:f8:47:f7:1b:07:c6:03:ad:f4:
         12:c3:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----