Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/0e01d1676da4ed67e1eb78154c17cd6e4c133d72.roa
File:                     0e01d1676da4ed67e1eb78154c17cd6e4c133d72.roa (raw, json)
Hash identifier:          bkaHi6WTs37rWpYk8MHMggngvKeduJ8iqYbMFyVXz7k=
Subject key identifier:   45:01:D1:75:6E:26:DD:3B:2F:83:7F:97:B5:6E:90:BC:36:C6:0C:70
Certificate issuer:       /CN=5a044060d76aae49d9f5899b3c3c2defe0c5837f
Certificate serial:       245676
Authority key identifier: FF:9C:51:EC:A4:42:C1:86:74:15:1A:AF:8A:0F:79:13:74:9B:D7:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a044060d76aae49d9f5899b3c3c2defe0c5837f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/0e01d1676da4ed67e1eb78154c17cd6e4c133d72.roa
Signing time:             Tue 12 Dec 2023 22:17:27 +0000
ROA not before:           Tue 12 Dec 2023 22:17:27 +0000
ROA not after:            Fri 12 Dec 2025 22:17:27 +0000
asID:                     266812
IP address blocks:        45.236.148.0/22 maxlen: 24
                          2803:d8a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381430 (0x245676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a044060d76aae49d9f5899b3c3c2defe0c5837f
        Validity
            Not Before: Dec 12 22:17:27 2023 GMT
            Not After : Dec 12 22:17:27 2025 GMT
        Subject: CN=0e01d1676da4ed67e1eb78154c17cd6e4c133d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:00:05:fe:0f:49:17:55:ac:1b:f4:28:09:
                    5e:ef:6b:62:6e:53:ce:fd:a3:6d:d9:25:c5:47:53:
                    c6:58:89:8a:6c:a3:fa:85:dc:27:bb:56:53:b8:94:
                    83:ea:65:00:7f:ea:44:12:ea:05:0a:98:da:18:3c:
                    f6:47:13:53:d5:2f:79:cc:ae:62:ca:d1:3f:f9:44:
                    fa:27:c2:d4:65:4d:71:20:1e:d3:3e:7a:59:cb:5b:
                    77:fc:da:09:5c:a1:61:bc:44:95:85:c3:59:c9:ad:
                    46:d6:2b:46:28:2d:b0:5d:08:ac:96:3c:2f:d7:59:
                    fe:40:0d:fb:3e:5a:1f:cc:44:e0:09:15:79:21:03:
                    2b:18:69:f4:cd:a3:a8:c8:fd:8e:72:cd:0d:f5:8d:
                    cc:47:1c:7d:dc:90:28:7b:a1:a4:a2:88:79:ba:ee:
                    92:48:2a:7c:fd:d7:f2:6d:ef:d3:12:14:0f:a2:b7:
                    e2:6b:59:88:9c:13:9f:67:1e:36:ab:c0:26:00:7f:
                    ca:c4:c3:59:80:c2:62:29:65:e0:4d:3c:ba:7f:07:
                    58:2e:93:51:72:e6:4a:5b:4a:85:bd:4a:91:d9:ec:
                    d3:d5:67:2b:d6:e3:f2:15:dd:e9:19:83:0c:2b:0c:
                    f5:0c:2a:ce:ee:be:96:bb:18:c3:52:88:c7:93:e7:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:01:D1:75:6E:26:DD:3B:2F:83:7F:97:B5:6E:90:BC:36:C6:0C:70
            X509v3 Authority Key Identifier:
                keyid:FF:9C:51:EC:A4:42:C1:86:74:15:1A:AF:8A:0F:79:13:74:9B:D7:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a044060d76aae49d9f5899b3c3c2defe0c5837f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/0e01d1676da4ed67e1eb78154c17cd6e4c133d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e51f467-1093-41b6-8044-24aa27d8e6aa/5a044060d76aae49d9f5899b3c3c2defe0c5837f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.148.0/22
                IPv6:
                  2803:d8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:64:c1:d1:2c:93:55:0e:65:7f:a2:15:f4:21:91:cd:b1:69:
         aa:11:63:93:89:e8:79:92:5c:d8:11:8a:1c:8d:85:c1:fa:72:
         6c:89:58:5c:f5:90:63:a3:50:43:80:9e:d1:e3:a2:5f:97:9b:
         9b:de:31:a2:10:88:2a:40:06:d4:2c:da:90:c9:f2:b9:ba:82:
         35:a9:22:2c:72:5c:47:08:83:61:7f:7d:a5:44:c1:2a:97:c0:
         ae:bc:38:e8:6b:cd:9b:ae:67:d1:72:d0:ce:aa:02:c6:39:f2:
         00:c7:e0:8e:2e:82:71:52:3d:41:b4:fc:da:e8:1c:7d:3b:27:
         f4:bc:03:d8:5e:fa:7f:85:03:57:eb:84:0e:b6:02:50:54:7e:
         0c:83:5b:68:37:25:3c:f3:52:27:b6:f3:1e:cd:dd:86:66:3a:
         3c:45:23:18:77:9f:92:e1:ef:86:15:d9:3d:d8:37:d6:c0:ac:
         84:01:02:6b:63:b1:2a:6b:f5:20:49:4a:9a:e2:57:47:1d:5f:
         5e:eb:81:6d:64:a3:b5:d5:a8:a1:b5:be:f6:1f:e4:51:08:59:
         c6:8b:0c:11:35:1d:32:74:08:67:da:82:14:7a:1b:23:41:76:
         d3:fb:43:18:36:1c:6a:9d:b8:f4:5a:00:8b:72:d7:63:8f:5c:
         e1:3b:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----