Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/2fee9c98907d703fe276832d8689a7bb6b81f9b2.roa
File:                     2fee9c98907d703fe276832d8689a7bb6b81f9b2.roa (raw, json)
Hash identifier:          phBgHsqXqyXifBoDbtf12RM1RhUh99ScipNrutApVMM=
Subject key identifier:   E7:CC:C5:3C:7F:51:BE:69:CB:F9:2D:4B:B8:B3:15:80:97:61:E2:F6
Certificate issuer:       /CN=3abe8205e3875032dfb3042786eec7a637777979
Certificate serial:       1D3656
Authority key identifier: 61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/2fee9c98907d703fe276832d8689a7bb6b81f9b2.roa
Signing time:             Wed 22 Feb 2023 14:11:10 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267831
IP address blocks:        45.173.200.0/22 maxlen: 24
                          2803:8460:1000::/36 maxlen: 36
                          2803:8460:2000::/36 maxlen: 36
                          2803:8460:3000::/39 maxlen: 39
                          2803:8460:3200::/39 maxlen: 39
                          2803:8460:3400::/39 maxlen: 39
                          2803:8460:3600::/39 maxlen: 39
                          2803:8460:3800::/39 maxlen: 39
                          2803:8460:3a00::/39 maxlen: 39
                          2803:8460:3c00::/39 maxlen: 39
                          2803:8460:3e00::/39 maxlen: 39
                          2803:8460:4000::/36 maxlen: 36
                          2803:8460::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914454 (0x1d3656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abe8205e3875032dfb3042786eec7a637777979
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=2fee9c98907d703fe276832d8689a7bb6b81f9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:10:83:d7:75:4c:91:81:d9:33:e1:a0:cd:
                    21:b4:e5:ff:63:1c:2b:f8:6a:64:a8:63:8c:10:29:
                    66:db:75:f5:76:c4:82:96:00:9a:2c:bc:c8:24:49:
                    aa:c8:48:4c:f7:b9:16:0c:07:d7:1d:d3:df:cd:82:
                    44:2a:44:88:62:c6:c1:56:78:0d:c1:f6:3d:fe:98:
                    66:93:7b:69:19:5d:25:5a:85:48:e8:f3:7c:cd:0e:
                    45:5c:d5:be:72:3c:28:bc:3c:18:43:ee:4f:63:c8:
                    29:f9:eb:45:b2:bf:5a:7f:a3:55:64:f2:70:f3:1f:
                    9e:ca:d7:e5:ff:19:aa:70:b5:3d:79:50:8c:43:6f:
                    e4:d6:41:59:37:c4:37:40:8e:86:2b:4e:87:1c:18:
                    72:90:6c:e9:b6:47:26:9d:75:d8:42:3c:f6:f1:a7:
                    6b:0b:46:37:36:2f:4f:82:e7:0f:3a:19:c6:8e:68:
                    d3:6b:78:e7:38:47:d1:07:b7:6a:01:08:9f:8b:a5:
                    a7:0f:ba:88:49:4c:e3:bc:c4:7b:35:b5:6f:75:fe:
                    cb:35:fe:cf:33:9c:67:50:f9:50:ed:d1:27:d7:f3:
                    03:ed:ff:08:6c:4b:16:ad:41:d8:0d:3d:ad:d1:87:
                    29:be:00:7d:32:0e:f0:f1:74:fb:b8:04:51:23:97:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CC:C5:3C:7F:51:BE:69:CB:F9:2D:4B:B8:B3:15:80:97:61:E2:F6
            X509v3 Authority Key Identifier:
                keyid:61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/2fee9c98907d703fe276832d8689a7bb6b81f9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.200.0/22
                IPv6:
                  2803:8460::-2803:8460:4fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         54:79:3b:20:1b:79:da:35:d1:27:c5:8c:53:74:59:a5:f9:c6:
         b9:db:d2:b4:40:29:46:cd:39:8f:9a:d4:ba:2a:9c:7c:a8:43:
         f0:a7:9f:c9:50:1d:2b:5a:ec:5b:42:f2:b3:9f:ad:91:36:45:
         48:d1:98:a2:e1:42:91:8e:70:f5:7c:a2:07:ee:99:38:93:c5:
         89:d9:99:23:3e:08:7f:b5:d9:fe:44:ad:3c:51:3d:d3:13:4b:
         9a:65:15:30:4f:20:84:42:16:42:0f:7f:fb:9b:2c:59:89:2c:
         98:71:5d:17:16:20:e1:b6:5c:39:b1:c0:89:f5:d5:d5:cc:79:
         79:c2:42:bb:ed:b0:f0:24:0f:69:26:40:d7:59:42:3f:35:ec:
         08:c6:9a:85:ef:32:9a:5b:9c:e2:79:84:26:94:0d:25:96:c2:
         71:52:fb:1d:68:3a:83:4d:04:de:65:a2:be:0b:c5:5b:44:c1:
         8c:46:7d:34:0a:5c:07:0a:83:b0:51:ab:87:1a:6d:ff:8b:78:
         40:16:3a:8a:29:f5:b1:36:b5:eb:37:fb:7b:d0:51:55:59:45:
         58:77:8e:1b:e8:bb:97:7c:51:de:e3:df:8e:67:03:31:16:b7:
         77:78:58:20:0c:81:37:22:7b:45:c2:63:c8:d4:56:91:a6:66:
         e8:54:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----