Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/7902ac60683cd4a2ff79711577e631496a8b8801.roa
File:                     7902ac60683cd4a2ff79711577e631496a8b8801.roa (raw, json)
Hash identifier:          fsl7UR+7AUPFyKRI+0po/neb5gACfbtTwZfn0IYzAIc=
Subject key identifier:   AB:BD:73:DF:D6:0C:D6:AB:5F:BA:34:1A:CE:0D:23:8B:4C:F3:13:8A
Certificate issuer:       /CN=54a3bca48dfc42afc7c19f9e5e976a803425265b
Certificate serial:       11C10E
Authority key identifier: 04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/7902ac60683cd4a2ff79711577e631496a8b8801.roa
Signing time:             Mon 17 Apr 2023 08:30:00 +0000
ROA not before:           Sun 16 Apr 2023 08:30:00 +0000
ROA not after:            Tue 15 Apr 2025 08:30:00 +0000
asID:                     269894
IP address blocks:        45.191.96.0/22 maxlen: 24
                          2803:44e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163534 (0x11c10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a3bca48dfc42afc7c19f9e5e976a803425265b
        Validity
            Not Before: Apr 16 08:30:00 2023 GMT
            Not After : Apr 15 08:30:00 2025 GMT
        Subject: CN=7902ac60683cd4a2ff79711577e631496a8b8801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:59:9b:5d:b6:70:4c:5f:cb:6a:14:49:38:
                    81:a9:d1:07:64:41:6d:43:1f:69:37:96:e9:af:c1:
                    73:4f:f5:61:b5:06:bb:fb:b5:85:42:08:7b:3c:c1:
                    17:89:c1:cc:8f:a5:25:76:0d:36:a0:31:37:0e:6e:
                    59:78:75:d2:09:c5:d4:67:ea:05:97:9d:a2:72:1d:
                    62:ff:de:3f:ec:be:4c:38:b1:49:6d:0c:99:c6:a8:
                    8c:50:86:66:67:c2:bf:4f:11:df:62:23:b6:3b:61:
                    94:be:c4:dd:66:fb:0c:a8:77:37:8e:46:76:39:8c:
                    b1:82:36:04:ae:cb:22:2e:07:f7:2e:1d:00:44:18:
                    e7:f5:3d:ed:3f:ee:2e:e1:dc:cc:16:d8:20:ad:35:
                    0d:60:88:34:f8:af:c6:f8:55:b9:b4:e7:ac:a9:32:
                    80:64:d0:99:99:8b:15:10:17:47:1e:02:1c:b1:14:
                    67:58:be:e5:56:d7:3d:56:36:d9:7e:68:03:c2:4c:
                    1b:3c:3e:4d:5b:5c:33:b4:3a:a7:bf:56:8b:ab:eb:
                    f5:48:c6:14:01:bc:da:42:94:2b:e8:16:a3:f7:f4:
                    b8:f7:1f:29:68:2d:ae:05:7a:c3:a2:a4:de:0f:58:
                    91:6c:e3:f7:ee:36:40:d8:d5:f8:7d:d3:e9:04:c9:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:73:DF:D6:0C:D6:AB:5F:BA:34:1A:CE:0D:23:8B:4C:F3:13:8A
            X509v3 Authority Key Identifier:
                keyid:04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/7902ac60683cd4a2ff79711577e631496a8b8801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.96.0/22
                IPv6:
                  2803:44e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:85:80:b0:50:8b:e4:89:1d:78:83:3a:fc:7b:19:13:32:
         a5:25:15:d0:a2:9c:2b:de:6d:80:ac:21:67:9b:96:a8:6c:34:
         b1:a3:c4:a1:5c:42:ee:4c:bc:7c:9e:79:e4:8e:b6:09:76:73:
         39:b1:df:1d:e0:a0:bd:ca:d0:5e:f7:3a:c4:f1:81:9c:a2:ce:
         31:12:44:f2:98:cb:f2:ae:82:80:7b:cb:f8:de:49:f7:4d:4c:
         9b:53:33:af:cb:73:42:9f:92:44:fd:33:b8:ac:c8:f1:7b:70:
         48:b0:ed:d3:05:4c:38:eb:ce:8e:56:a6:09:76:cc:83:66:77:
         6a:93:96:c4:e3:8f:49:86:7b:36:62:6c:12:b4:ff:1c:2b:1f:
         3f:2d:6d:3d:58:a7:e0:57:d2:e5:99:0a:3a:66:bd:f9:99:10:
         c5:83:59:ed:6e:72:f5:b5:8b:d8:03:7b:42:7d:ee:e7:2c:35:
         8d:9c:cc:64:13:72:0b:1f:b0:c7:1e:73:e8:d8:56:ed:1a:37:
         9d:a9:26:45:12:15:af:19:dc:48:a6:e8:41:b7:28:1c:a1:f5:
         9d:aa:d3:8b:2d:60:03:24:86:83:30:de:6f:66:47:98:d2:29:
         7f:32:d2:22:8d:0e:69:ba:21:d3:cc:55:f7:39:84:be:93:56:
         fe:42:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----