Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/57b47327e53b7a7cbee7f9d90c352dfe90e5bdd4.roa
File:                     57b47327e53b7a7cbee7f9d90c352dfe90e5bdd4.roa (raw, json)
Hash identifier:          ItrJbinsQ8ZX2RfTI5ccPs9jxwhfUL11SHsWaBfXcfQ=
Subject key identifier:   E5:2A:91:97:60:6E:AE:4F:55:27:0E:02:B2:AF:76:95:C1:CA:65:56
Certificate issuer:       /CN=713466eb5a3bd118b72f0078eea3bb990f763363
Certificate serial:       241EF0
Authority key identifier: A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/57b47327e53b7a7cbee7f9d90c352dfe90e5bdd4.roa
Signing time:             Sat 16 Dec 2023 16:32:29 +0000
ROA not before:           Sat 16 Dec 2023 16:32:29 +0000
ROA not after:            Tue 16 Dec 2025 16:32:29 +0000
asID:                     273664
IP address blocks:        45.179.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367216 (0x241ef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713466eb5a3bd118b72f0078eea3bb990f763363
        Validity
            Not Before: Dec 16 16:32:29 2023 GMT
            Not After : Dec 16 16:32:29 2025 GMT
        Subject: CN=57b47327e53b7a7cbee7f9d90c352dfe90e5bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:e3:bf:57:25:ef:5e:38:2f:14:30:30:3c:
                    30:24:cb:ce:82:99:45:4a:72:c7:d0:73:3e:6c:5d:
                    90:6a:1f:a8:1d:ce:e3:01:f5:e5:ae:36:aa:f7:8d:
                    8b:76:c1:15:7f:e3:26:ae:56:c5:ba:59:d8:7c:4c:
                    97:24:91:4a:6b:2d:db:e3:f1:f5:fc:f6:e3:fa:ed:
                    d1:f6:3a:35:30:77:80:2a:38:9e:8a:23:78:ce:4a:
                    9b:dc:8e:cf:ec:70:8a:a0:82:e5:36:36:74:d7:3b:
                    32:35:4f:31:b6:f9:ea:c2:9c:1b:9a:29:a7:35:c9:
                    1a:f7:41:f6:56:57:5d:c3:9d:7d:0d:32:3e:11:9f:
                    a3:2f:84:e6:c6:9d:63:ff:a9:19:28:ef:a4:06:69:
                    df:de:17:68:b0:fd:a3:ec:4c:12:56:e7:43:99:0f:
                    47:d4:aa:80:98:df:db:5f:31:e4:57:2b:76:bd:e8:
                    23:55:2f:6d:2b:cc:64:38:40:cd:4c:b0:32:20:9b:
                    3e:73:2e:0f:d7:88:76:71:54:46:34:83:ab:c4:75:
                    da:cf:00:47:25:e2:f7:89:95:0e:43:47:db:68:16:
                    e1:b1:9c:47:7a:28:65:35:8a:24:10:96:4e:cb:c3:
                    d6:56:66:6f:2d:11:7e:2e:9b:6a:f0:2a:0c:3c:e1:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:91:97:60:6E:AE:4F:55:27:0E:02:B2:AF:76:95:C1:CA:65:56
            X509v3 Authority Key Identifier:
                keyid:A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/57b47327e53b7a7cbee7f9d90c352dfe90e5bdd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:16:12:17:57:31:6c:7e:b0:5b:94:02:dd:dc:05:90:f5:2d:
         e3:e1:cb:46:95:44:71:3c:12:e0:34:d0:f5:e5:f4:71:5c:74:
         1b:d5:ad:9d:74:27:ef:89:bb:49:ed:34:3d:de:da:bb:62:e3:
         4b:e7:7a:49:3b:e9:b2:67:f1:3f:a1:d1:94:ea:1a:f8:b0:25:
         8c:dc:81:81:a2:c5:1f:51:c2:1a:24:37:de:d3:59:ed:60:b7:
         b0:67:bb:ce:89:d2:7c:54:cc:8b:29:10:93:8c:84:05:21:44:
         1c:c0:d5:1e:fa:3c:7a:f2:fa:fe:5b:aa:ec:3d:d2:88:f7:64:
         ca:a6:48:5c:d2:58:19:29:2d:e0:1d:9c:bb:99:2f:82:a0:f9:
         aa:b7:ca:75:c3:41:63:63:6a:66:54:31:b0:5e:97:96:16:03:
         ec:8e:fb:67:27:c6:31:b6:07:2f:15:24:5c:fe:1c:04:df:ab:
         4b:50:a8:88:4c:a6:0a:dc:5a:25:88:e0:81:b9:c6:27:8a:67:
         9e:e7:6b:f4:63:d8:84:ca:7c:7b:a1:19:96:74:bb:cb:45:76:
         30:bc:8c:b9:93:ce:0a:bd:60:0c:3f:a9:c8:ca:02:c3:ae:28:
         72:ef:5e:bf:05:3e:17:7f:83:21:66:bc:b0:40:c5:04:66:77:
         da:4d:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----