Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/9fff58e77234c8e24cbd6a0742ed63aacf7f924a.roa
File:                     9fff58e77234c8e24cbd6a0742ed63aacf7f924a.roa (raw, json)
Hash identifier:          E91/BxwXpXwBAAQDLrr5elhESxHV62V/LJzOr9XpU58=
Subject key identifier:   AF:AF:91:58:66:67:74:9A:2E:6D:52:76:35:30:10:5F:08:D2:CE:0C
Certificate issuer:       /CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Certificate serial:       259F79
Authority key identifier: 4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/9fff58e77234c8e24cbd6a0742ed63aacf7f924a.roa
Signing time:             Fri 02 Feb 2024 16:52:09 +0000
ROA not before:           Fri 02 Feb 2024 16:52:09 +0000
ROA not after:            Mon 02 Feb 2026 16:52:09 +0000
asID:                     52468
IP address blocks:        45.238.56.0/22 maxlen: 22
                          2803:4ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465657 (0x259f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
        Validity
            Not Before: Feb  2 16:52:09 2024 GMT
            Not After : Feb  2 16:52:09 2026 GMT
        Subject: CN=9fff58e77234c8e24cbd6a0742ed63aacf7f924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:44:bc:3e:d1:7b:3b:b3:a4:f6:59:d6:bf:
                    d5:c2:9b:88:17:91:f3:59:2d:13:dc:8b:ca:4e:4f:
                    52:48:e8:f6:0b:dd:ea:67:81:d6:44:d4:1b:9a:47:
                    d2:29:ee:18:5e:ba:aa:b9:37:cc:30:e7:d0:a0:54:
                    17:ee:da:7c:0c:23:78:d5:4f:10:92:60:80:16:a3:
                    fe:5e:82:17:3c:9a:fb:1b:b5:22:08:21:c2:74:a9:
                    54:54:55:7f:7c:a1:6a:71:16:ad:27:93:bc:8b:eb:
                    5e:5f:72:76:fa:5b:27:a2:29:37:6a:82:78:a8:7c:
                    4e:ff:f5:cb:32:45:48:75:98:26:33:7c:66:4d:ac:
                    8d:b8:f3:16:12:ef:70:77:3d:db:54:ac:90:5d:0d:
                    c3:c8:98:03:34:26:1d:fc:c0:1d:a3:44:f2:c2:83:
                    b0:00:a6:6f:c2:25:fa:f5:84:db:77:30:6f:80:36:
                    96:27:1b:e2:01:68:e0:90:47:67:43:01:98:1e:76:
                    cb:8b:18:6e:5a:31:eb:c2:eb:01:4b:94:bf:ea:28:
                    f3:6b:7d:e4:13:65:13:11:2c:40:cf:1f:b8:9a:49:
                    b1:e8:75:7b:97:91:13:7f:e6:4b:a9:03:d0:e8:da:
                    65:0d:8c:a8:97:1b:5e:b5:27:2e:ac:07:56:44:e4:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AF:91:58:66:67:74:9A:2E:6D:52:76:35:30:10:5F:08:D2:CE:0C
            X509v3 Authority Key Identifier:
                keyid:4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/9fff58e77234c8e24cbd6a0742ed63aacf7f924a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:48:e0:33:c6:28:cf:05:cd:e4:3e:aa:c2:b1:4c:c9:09:86:
         33:c7:e1:26:d2:62:19:59:9d:21:66:69:74:f6:9b:1d:ef:f4:
         48:95:2f:9a:ee:58:df:5c:8c:3e:e0:75:04:b5:9a:25:22:3d:
         1a:62:36:f6:01:aa:d9:b9:28:f6:74:cc:63:71:04:50:19:ad:
         71:98:ba:5b:d5:ca:ce:bc:35:d9:54:34:7a:52:3b:a9:c0:d8:
         ca:b2:26:7e:b0:a0:f7:20:d7:1c:62:8d:53:e4:fe:3a:f8:11:
         82:c3:82:6f:64:88:0d:6c:6b:dd:e3:e7:70:e9:bc:54:a3:82:
         4c:9c:40:d1:ef:89:f9:7b:ff:a6:3b:f2:b7:c3:e7:7c:4b:22:
         da:f4:5e:31:25:e7:c7:d9:58:7d:2f:4c:6a:8c:2b:94:af:96:
         97:a2:9a:43:f7:ac:a1:58:b8:c5:e7:01:3f:e3:b4:e7:7c:cc:
         f4:b8:23:47:1b:c8:c0:50:d2:c3:3e:08:8c:ca:5e:76:bc:20:
         1d:73:71:f3:3f:87:4e:98:f5:c6:f8:cd:44:cf:f9:5b:67:9f:
         72:9f:11:2d:2a:29:aa:1a:8d:f9:cb:63:c1:c1:fc:6d:d0:fa:
         ba:73:8a:18:d8:1e:a9:e4:11:56:a9:0b:95:92:4f:39:4e:ef:
         77:c8:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----