Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/6398cb4038b60142159bc3f9fed5cd9ed9444a43.roa
File:                     6398cb4038b60142159bc3f9fed5cd9ed9444a43.roa (raw, json)
Hash identifier:          Kcdow7wBhiW+Av7EIFmC2z4lVl3lDpjuiY9mE35Sn/w=
Subject key identifier:   57:3D:BD:CC:4E:20:5E:7B:6F:E4:77:0B:3A:00:0F:9E:63:09:07:2C
Certificate issuer:       /CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
Certificate serial:       22DC08
Authority key identifier: E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/6398cb4038b60142159bc3f9fed5cd9ed9444a43.roa
Signing time:             Tue 24 Oct 2023 21:02:59 +0000
ROA not before:           Tue 24 Oct 2023 21:02:58 +0000
ROA not after:            Fri 24 Oct 2025 21:02:58 +0000
asID:                     269805
IP address blocks:        45.184.224.0/22 maxlen: 24
                          2803:ab60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284552 (0x22dc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
        Validity
            Not Before: Oct 24 21:02:58 2023 GMT
            Not After : Oct 24 21:02:58 2025 GMT
        Subject: CN=6398cb4038b60142159bc3f9fed5cd9ed9444a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:c6:3b:9e:41:27:49:4d:1a:23:c0:4e:b7:
                    7b:39:71:e6:11:4a:89:b4:c3:74:b5:12:7f:17:98:
                    31:29:3e:31:4a:c3:7a:43:3c:b5:81:8a:3b:bf:de:
                    69:52:4b:79:70:19:98:80:82:34:8d:28:2f:74:3d:
                    88:d7:77:e6:32:91:78:72:3f:15:11:85:53:36:ac:
                    86:2d:07:f7:70:1d:02:bb:82:38:69:bf:35:fc:ab:
                    9f:ad:05:b9:86:95:e4:00:f7:ac:05:c7:bd:82:ff:
                    a1:9a:62:41:4e:74:d1:8b:84:a6:8c:59:3b:fa:08:
                    9a:00:5d:da:a6:cc:78:0b:0b:fe:af:f0:c3:c4:d0:
                    4a:d9:72:74:ae:34:14:66:bd:a3:04:b8:65:fa:81:
                    dc:c3:39:e5:6c:bd:bf:fb:14:d7:aa:b1:21:09:9c:
                    58:70:b7:11:0b:23:21:ee:df:26:4a:0a:ba:8c:c2:
                    45:c3:d4:ec:84:e4:ba:be:01:67:92:e5:35:6a:6f:
                    e2:59:4b:6f:ea:ec:4a:46:2e:87:39:07:ee:5e:ff:
                    35:6b:fc:d0:f0:a9:c0:7f:de:19:c0:84:ee:bc:e4:
                    67:66:09:0d:92:62:8d:53:bb:19:79:2f:3b:e6:b8:
                    b8:a5:d9:33:60:e6:7d:ab:d8:7e:fa:cf:62:1f:4b:
                    3d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:BD:CC:4E:20:5E:7B:6F:E4:77:0B:3A:00:0F:9E:63:09:07:2C
            X509v3 Authority Key Identifier:
                keyid:E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/6398cb4038b60142159bc3f9fed5cd9ed9444a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.224.0/22
                IPv6:
                  2803:ab60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:cd:d8:96:17:5d:70:18:58:d8:7e:7f:97:fa:5a:6e:aa:af:
         9b:17:f2:6c:fb:a6:bf:58:f8:a3:af:3f:da:7d:1c:50:e1:00:
         15:f1:4c:29:d4:bf:93:77:43:6a:f9:33:75:7e:76:86:24:9e:
         5c:82:6f:1c:66:c3:46:9c:a2:2a:50:7f:10:5a:aa:b0:7c:15:
         aa:71:d3:3a:6a:5c:f4:93:91:28:90:db:f8:6c:fe:1e:6d:02:
         46:98:72:b0:5a:78:0c:7c:e4:3d:06:f1:3c:44:cd:57:3e:7d:
         e0:64:99:b4:4d:8f:44:21:96:29:87:cf:31:4c:d8:0f:7f:b5:
         7a:35:e8:4a:c9:d4:9e:42:97:8f:36:0a:84:df:00:f4:26:b3:
         40:cb:49:6d:c1:60:a9:55:38:5c:ae:f5:fe:24:77:4c:9a:e1:
         fe:8a:e9:6c:2a:c9:d2:74:63:75:9f:f1:3b:6d:a1:e3:b1:24:
         60:01:12:75:71:42:72:f3:40:e6:30:32:7f:08:ef:6c:89:82:
         31:8c:71:3c:19:ab:67:2b:9a:c7:b7:2a:23:16:d1:7e:57:e1:
         ef:ec:68:c0:be:41:82:dd:15:c8:2b:a5:f3:b1:0d:5b:2b:57:
         12:40:fc:ed:b0:3e:ab:1c:24:46:99:87:0b:b9:1a:3f:aa:9b:
         4f:59:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----