Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/6eba7edc1442a944b52ecc7728ab30dced7187b1.roa
File:                     6eba7edc1442a944b52ecc7728ab30dced7187b1.roa (raw, json)
Hash identifier:          tcNr52V2ZlZVX5qJvjLIE2q0jnOvoLVZP6TesUYQbLI=
Subject key identifier:   4E:AF:7D:DF:5B:5B:D5:DB:6E:38:59:E7:67:4F:30:04:96:9D:12:62
Certificate issuer:       /CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Certificate serial:       259755
Authority key identifier: 4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/6eba7edc1442a944b52ecc7728ab30dced7187b1.roa
Signing time:             Fri 02 Feb 2024 16:41:14 +0000
ROA not before:           Fri 02 Feb 2024 16:41:13 +0000
ROA not after:            Mon 02 Feb 2026 16:41:13 +0000
asID:                     266834
IP address blocks:        45.238.56.0/22 maxlen: 24
                          2803:4ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463573 (0x259755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
        Validity
            Not Before: Feb  2 16:41:13 2024 GMT
            Not After : Feb  2 16:41:13 2026 GMT
        Subject: CN=6eba7edc1442a944b52ecc7728ab30dced7187b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:90:39:39:22:51:fb:e8:b3:c0:39:23:c6:
                    ce:59:a2:c1:ac:a3:22:e0:08:6a:e3:6b:b6:79:78:
                    42:29:da:e3:3c:3e:63:5d:dd:b3:b5:5c:9b:43:43:
                    de:f8:17:10:73:29:82:a8:2e:4b:2d:1e:2b:86:19:
                    d0:a1:27:8c:81:c7:f6:2d:c7:a0:ba:09:3a:a4:3d:
                    3b:74:d6:df:7a:19:e4:c7:0f:33:b4:5b:b6:02:71:
                    cb:bf:a0:51:73:a9:a8:96:b6:c9:69:44:09:35:74:
                    79:5a:ed:03:13:95:93:d1:38:f7:70:3c:71:b0:68:
                    27:48:6d:17:7c:b7:9d:fc:c3:b0:49:e4:d2:d2:37:
                    0e:73:7c:3d:2f:16:9e:a9:bc:5e:db:51:74:73:0a:
                    7d:91:de:33:93:72:35:cf:67:ec:fb:76:eb:3e:29:
                    70:05:f5:62:ca:ce:ef:57:15:b5:e4:c7:91:06:a1:
                    ba:13:d6:27:f1:5f:d9:b7:b0:c9:b3:1e:d8:41:18:
                    a2:58:11:3d:68:54:60:5c:50:83:f6:25:32:9c:90:
                    91:69:a2:a3:b8:6c:bc:81:2c:ac:1f:1d:17:b8:ff:
                    01:83:53:ad:5c:fc:f3:b8:e3:ea:50:45:d2:09:04:
                    74:51:a4:58:c0:1d:28:51:2e:fe:61:81:6d:3e:09:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AF:7D:DF:5B:5B:D5:DB:6E:38:59:E7:67:4F:30:04:96:9D:12:62
            X509v3 Authority Key Identifier:
                keyid:4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/6eba7edc1442a944b52ecc7728ab30dced7187b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:dc:be:ce:ff:bf:7c:2c:bb:48:f4:ce:37:43:48:9b:ec:
         72:f1:9c:e4:f6:38:e9:cd:f8:80:34:85:93:59:56:b0:d7:fe:
         8e:38:fd:7c:1b:d4:41:cf:95:0d:d7:c6:0d:46:5f:a1:67:c4:
         7b:c7:6e:7a:57:a0:75:e6:79:09:71:3f:c3:f7:f8:b8:ec:68:
         c5:13:8d:fb:55:42:c2:51:89:9c:db:dd:43:54:96:e1:80:7c:
         cd:1d:4d:05:28:87:e2:60:b2:72:b0:56:c4:0a:ae:cd:54:96:
         22:84:ce:78:6e:d4:f4:9e:96:4f:84:c2:12:59:c9:e6:62:14:
         c9:ce:81:cd:04:e7:55:f7:ef:c5:78:be:de:e2:65:80:19:38:
         8b:b4:24:51:0e:e6:d4:dd:3d:23:03:68:c3:09:ad:2d:ba:1b:
         21:be:0c:f7:a4:e5:4e:6b:cd:dd:22:e9:c3:bd:47:2c:d1:f7:
         c9:10:1b:32:7e:06:30:a6:9b:af:0b:12:a9:2b:df:b4:90:f8:
         9f:c6:e0:8d:71:63:76:0e:61:da:d0:a1:0d:7f:20:ee:d9:70:
         d7:3a:4c:88:7e:16:d3:1b:89:a9:1b:f5:d2:f0:63:c0:35:95:
         d5:80:07:2d:4a:f1:d7:4e:0c:81:48:18:05:5c:59:b8:81:59:
         88:68:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----