Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/0f9698b72cc92b82af50d349c5bb6f5de36c6daa.roa
File:                     0f9698b72cc92b82af50d349c5bb6f5de36c6daa.roa (raw, json)
Hash identifier:          1w9+GdnH9GSQ25yVbQ3hn+7mzDXRV7Hv44WXAcuOGTo=
Subject key identifier:   73:D1:16:90:00:D9:ED:1B:63:08:9B:D8:09:02:3F:6C:3F:79:CF:7A
Certificate issuer:       /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial:       1DC0BB
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/0f9698b72cc92b82af50d349c5bb6f5de36c6daa.roa
Signing time:             Thu 11 Apr 2024 14:43:33 +0000
ROA not before:           Thu 11 Apr 2024 14:43:33 +0000
ROA not after:            Sat 11 Apr 2026 14:43:33 +0000
asID:                     41095
IP address blocks:        45.236.172.0/23 maxlen: 24
                          2803:c240::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949883 (0x1dc0bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
        Validity
            Not Before: Apr 11 14:43:33 2024 GMT
            Not After : Apr 11 14:43:33 2026 GMT
        Subject: CN=0f9698b72cc92b82af50d349c5bb6f5de36c6daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:60:ca:04:70:50:07:01:b0:a6:13:f1:cf:69:
                    90:70:ee:fc:be:08:b7:93:58:bc:53:fe:67:2e:1e:
                    cf:da:b2:d9:0f:e6:63:4b:cb:48:a1:4d:61:3b:ed:
                    c6:33:9b:46:c3:c6:30:3d:6c:24:0c:a9:ca:9c:c9:
                    a1:a2:83:c5:b2:9b:de:97:0e:68:59:2a:89:c6:d4:
                    43:23:6b:2d:cd:df:3d:92:15:1d:4f:ee:51:f7:79:
                    66:f7:c3:62:d8:df:a1:99:ee:db:52:50:09:ae:60:
                    9e:40:a2:fc:91:c3:dd:1f:cd:52:84:d2:83:ac:18:
                    32:0a:71:fc:fa:c1:b3:d3:fc:9a:62:61:75:2f:a7:
                    c0:06:35:81:1c:35:13:a1:fb:e9:0f:f6:cc:1a:5c:
                    05:59:df:31:a3:89:5e:bc:80:a0:7f:ef:30:6a:27:
                    3d:92:b8:3a:3a:80:0d:cc:f6:93:56:28:d4:12:95:
                    6b:63:4e:99:2e:1b:c7:48:aa:d6:67:b3:30:6b:ca:
                    2b:10:03:08:00:df:1d:44:d7:23:19:3d:dd:4b:c7:
                    7a:57:d5:cd:c5:d0:5c:15:3a:34:49:b5:d2:51:e0:
                    6f:ad:83:95:08:04:e7:3f:1b:44:fe:1f:f6:79:1c:
                    ef:d0:2c:6b:6a:30:e4:a7:33:42:ef:21:99:75:87:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D1:16:90:00:D9:ED:1B:63:08:9B:D8:09:02:3F:6C:3F:79:CF:7A
            X509v3 Authority Key Identifier:
                keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/0f9698b72cc92b82af50d349c5bb6f5de36c6daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.172.0/23
                IPv6:
                  2803:c240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:fb:3b:f1:0b:4f:09:35:33:34:ce:de:13:fb:2d:c0:90:
         27:04:b5:0a:62:5b:7b:62:32:9d:f1:d2:d1:97:d1:1d:a2:e9:
         1f:11:7e:24:35:8e:ef:ee:b8:d9:f1:a2:50:32:4d:48:62:bc:
         9c:77:4a:0b:4e:78:0d:e4:0c:ff:3f:91:41:8d:c3:45:6a:c7:
         02:39:a8:d6:7f:3a:31:54:19:dd:15:f4:46:38:62:00:ce:dc:
         30:94:cc:26:75:74:f3:2b:27:3e:45:7d:14:6a:6a:fa:ce:91:
         bb:ba:1b:b4:a9:b4:2e:37:de:e6:83:2d:30:a6:69:c3:ff:54:
         04:3c:6b:90:00:e6:2d:cc:df:94:60:0d:95:51:75:14:ff:f5:
         e6:27:03:17:07:08:46:25:ec:6c:30:bb:c7:dd:17:cf:8d:29:
         df:12:91:b5:b5:98:57:43:3c:3b:4f:19:cf:ba:4f:af:b5:9e:
         ef:0b:98:b0:02:35:c0:8a:db:6c:b7:6a:90:3c:82:a5:14:47:
         64:3f:75:85:67:02:f1:9d:ba:38:b5:24:d8:83:ec:65:ef:8c:
         c5:42:ee:c7:85:e9:ab:a1:dd:6b:8d:e6:9b:3b:72:1f:38:c8:
         88:0c:c5:3a:44:bb:37:b7:f1:3e:a8:f6:41:30:b2:ec:1e:8d:
         e6:ed:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----