Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/278b7333ae6a04603f66a649fe7769da50eda4ec.roa
File:                     278b7333ae6a04603f66a649fe7769da50eda4ec.roa (raw, json)
Hash identifier:          5bGbqxhqs6pg4C6T8c6PNRzkXggYsbXiI7Y/z8zVQ9o=
Subject key identifier:   D7:47:12:48:81:CD:F5:20:5E:61:BF:60:DB:33:80:36:59:69:BA:7D
Certificate issuer:       /CN=b9e848857972dee0d3d38e41a74b15ad61c4be16
Certificate serial:       18B836
Authority key identifier: 37:3B:01:89:9B:C8:95:81:27:E8:32:3C:83:9E:CF:B5:75:EC:ED:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9e848857972dee0d3d38e41a74b15ad61c4be16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/278b7333ae6a04603f66a649fe7769da50eda4ec.roa
Signing time:             Fri 24 Mar 2023 08:30:25 +0000
ROA not before:           Thu 23 Mar 2023 08:30:25 +0000
ROA not after:            Sat 22 Mar 2025 08:30:25 +0000
asID:                     267894
IP address blocks:        45.176.164.0/24 maxlen: 24
                          45.176.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620022 (0x18b836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e848857972dee0d3d38e41a74b15ad61c4be16
        Validity
            Not Before: Mar 23 08:30:25 2023 GMT
            Not After : Mar 22 08:30:25 2025 GMT
        Subject: CN=278b7333ae6a04603f66a649fe7769da50eda4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b5:bf:a5:1b:df:92:7a:d3:ac:73:c8:89:90:
                    02:d6:8f:ce:9d:0f:f3:72:6c:11:2b:ce:1c:03:99:
                    2c:0d:1c:90:cf:d6:83:51:58:dc:db:f0:06:76:dd:
                    d2:fe:59:a4:01:8d:30:d5:4f:4a:4e:e0:a3:5a:a4:
                    e9:bb:47:6b:65:5e:c9:39:74:f3:8a:74:53:c9:5c:
                    2a:88:90:9f:fe:7b:66:2f:a7:4e:c8:bd:7f:11:ca:
                    b7:59:78:88:0d:af:98:18:4e:f3:7e:31:09:61:b9:
                    3f:93:17:53:30:62:37:74:f0:6d:0a:fb:fc:94:e9:
                    76:01:da:ee:47:0d:ef:4c:06:d2:56:02:08:83:74:
                    32:38:94:25:d9:e8:2a:43:1f:e5:d5:76:11:be:36:
                    ef:6a:75:14:0d:60:f0:50:72:58:6c:07:2d:c5:c2:
                    5d:cf:08:ea:7d:f3:e7:b2:41:aa:37:9b:ce:14:ab:
                    84:41:6c:10:ba:19:92:c1:dc:9e:22:0c:c0:c8:79:
                    6c:42:52:6a:31:ee:3a:74:12:0b:62:d9:19:80:3f:
                    6f:99:02:71:5a:dc:88:e7:c1:d4:ab:44:de:03:e4:
                    ba:a4:f2:a3:0f:4e:c1:37:af:0f:37:81:11:6b:f2:
                    48:c5:98:af:1c:0d:a2:8b:c0:b8:d8:57:9c:2e:62:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:47:12:48:81:CD:F5:20:5E:61:BF:60:DB:33:80:36:59:69:BA:7D
            X509v3 Authority Key Identifier:
                keyid:37:3B:01:89:9B:C8:95:81:27:E8:32:3C:83:9E:CF:B5:75:EC:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9e848857972dee0d3d38e41a74b15ad61c4be16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/278b7333ae6a04603f66a649fe7769da50eda4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/b9e848857972dee0d3d38e41a74b15ad61c4be16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:96:e8:52:36:95:4a:e1:6b:b0:99:56:f8:52:4e:89:bb:
         6c:e1:a0:6d:be:86:70:69:5a:40:bd:df:f0:eb:01:3d:a2:04:
         c0:59:16:20:bd:b4:c5:1f:d0:f5:b2:d2:1e:cb:01:eb:27:c0:
         11:cd:bf:0e:23:ed:f5:48:f7:c2:45:f7:d7:f3:2c:3f:19:77:
         43:84:92:13:33:47:b6:75:2f:02:4b:9e:7a:c6:08:8e:85:b4:
         64:4f:7f:e2:73:a1:43:d1:c2:26:0d:fd:a6:0e:67:7c:13:0b:
         fe:62:b0:d8:92:0f:a5:8b:a2:9a:ad:83:44:40:4c:42:53:c7:
         8f:86:e4:f2:36:94:c8:62:a2:24:f7:e4:a5:0c:b8:5d:42:62:
         52:f6:cb:f4:1d:7f:fc:89:2d:05:3b:58:b9:f3:12:65:1c:51:
         a2:3f:de:f6:af:48:13:ea:2d:ec:21:0e:c8:0a:a8:31:37:51:
         93:48:4e:15:1f:4f:ff:39:28:e5:08:19:99:70:61:8d:a8:85:
         78:95:fe:2b:c7:69:09:a5:9f:ef:58:1b:e9:d1:7d:a1:17:39:
         ee:69:f2:9e:ac:5c:0a:db:34:26:1f:60:73:08:ba:9a:07:7a:
         44:6f:92:9d:93:fc:09:f5:a3:37:d0:61:04:22:8a:bd:79:d1:
         2b:cc:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----