Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/ea7b8bd4dadf71961459fab039757ac8baf3eb85.roa
File:                     ea7b8bd4dadf71961459fab039757ac8baf3eb85.roa (raw, json)
Hash identifier:          9XIPYI9yesx+RLBW4SahCRPNCM2rt/sb8/m60evGvKI=
Subject key identifier:   22:F3:E5:9E:A1:07:BD:E4:5B:FF:CA:3B:A5:B5:FD:F4:B3:CC:F3:C8
Certificate issuer:       /CN=07d51c51fa41f0daf492ff76adb2090700e83829
Certificate serial:       1F5A94
Authority key identifier: 8F:84:92:6D:72:61:C7:12:D8:FB:27:75:83:4E:F9:E3:D6:D3:85:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07d51c51fa41f0daf492ff76adb2090700e83829.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/ea7b8bd4dadf71961459fab039757ac8baf3eb85.roa
Signing time:             Sat 29 Apr 2023 08:30:06 +0000
ROA not before:           Fri 28 Apr 2023 08:30:06 +0000
ROA not after:            Sun 27 Apr 2025 08:30:06 +0000
asID:                     52327
IP address blocks:        45.224.156.0/22 maxlen: 24
                          2803:220::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054804 (0x1f5a94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d51c51fa41f0daf492ff76adb2090700e83829
        Validity
            Not Before: Apr 28 08:30:06 2023 GMT
            Not After : Apr 27 08:30:06 2025 GMT
        Subject: CN=ea7b8bd4dadf71961459fab039757ac8baf3eb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:69:0f:6b:1a:d8:1c:1a:42:ce:d3:19:62:
                    6f:c3:69:81:d5:98:d6:a6:7b:f5:75:af:75:70:d9:
                    8b:9c:68:c5:7b:4f:cc:2d:c8:da:bb:97:eb:d7:62:
                    12:2a:a8:b9:a0:66:10:fa:ac:a2:fc:0e:30:56:c4:
                    fe:31:9c:07:a1:b8:8d:ac:b2:c4:7a:2a:fd:2b:52:
                    c8:ea:39:bf:06:84:a2:4a:ae:4b:1c:45:d0:b9:f9:
                    f7:c8:ad:60:2e:d6:6b:b7:dd:ef:61:f4:88:a3:db:
                    c6:98:90:30:6b:b4:93:9f:05:c9:b5:0d:7b:27:2c:
                    99:c6:4a:29:c3:af:f8:ab:62:92:9d:d1:c1:92:61:
                    a5:29:c9:c7:64:f8:60:96:e3:21:77:b4:91:55:e1:
                    3e:1c:5e:ce:04:a6:19:2b:70:0e:c1:90:e3:5e:c8:
                    7d:26:22:cd:47:4c:8c:af:e1:c8:cb:c7:c6:97:79:
                    c9:ed:aa:f6:14:2f:ed:49:b7:fe:6f:5f:2d:87:65:
                    5b:d5:cc:ad:0f:27:72:04:5c:1f:de:51:b2:35:e6:
                    33:6f:28:3f:0a:dc:74:54:4a:15:27:bf:2a:13:ea:
                    6b:81:79:f5:07:c4:be:6f:7b:ca:6d:82:3d:0d:ae:
                    28:9c:2d:f8:64:aa:9a:99:0f:e4:e4:9d:7b:01:35:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:E5:9E:A1:07:BD:E4:5B:FF:CA:3B:A5:B5:FD:F4:B3:CC:F3:C8
            X509v3 Authority Key Identifier:
                keyid:8F:84:92:6D:72:61:C7:12:D8:FB:27:75:83:4E:F9:E3:D6:D3:85:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07d51c51fa41f0daf492ff76adb2090700e83829.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/ea7b8bd4dadf71961459fab039757ac8baf3eb85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95aafc61-2f63-4674-90b6-b116e4ccc566/07d51c51fa41f0daf492ff76adb2090700e83829.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.156.0/22
                IPv6:
                  2803:220::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:84:8b:97:fb:cc:15:be:26:f5:fd:47:c2:dc:33:04:1c:12:
         1c:e3:7f:3e:92:05:9d:0e:e8:f6:37:11:e7:b7:74:5b:fe:66:
         7b:fd:62:8c:bb:8e:4e:08:4a:29:f6:f4:b6:10:65:2e:04:a5:
         d2:cf:e5:62:25:90:b2:4b:3f:ba:7f:65:9c:75:79:0e:1f:f0:
         12:ba:af:f0:23:9e:48:09:b2:7e:a9:f8:54:a8:4a:1c:72:fc:
         2e:a7:6a:1b:d5:cc:56:b3:bc:7c:85:72:d8:91:5d:6d:c9:e2:
         e2:51:b2:aa:38:f9:38:37:58:31:4f:3c:fd:b6:6c:92:7f:5e:
         f0:3b:54:81:d6:19:4b:56:78:41:5a:8b:bc:0c:f7:9b:88:e3:
         09:5f:1f:e3:5f:df:6c:2d:cb:1e:5d:d1:9a:a8:0b:fd:0c:4f:
         b7:de:ef:39:fe:10:bd:22:d2:2b:2c:c4:dd:ee:78:57:55:9d:
         c5:ec:a4:04:36:b2:bd:9b:fc:f6:71:8f:60:6e:43:ae:7d:57:
         3d:ca:25:f3:60:6c:d4:68:c5:55:1f:0d:d0:18:6f:11:85:70:
         ba:a8:29:63:06:b7:db:df:cc:81:6b:e1:11:59:4d:80:5e:8b:
         48:da:0f:d7:df:b9:94:bd:98:0d:d8:c0:8b:98:e4:11:68:a0:
         bd:91:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----