Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/8c14b6590f97fc209776f25a5c9df61561ddc204.roa
File:                     8c14b6590f97fc209776f25a5c9df61561ddc204.roa (raw, json)
Hash identifier:          1YJ78OHye/zyZxamcoFuItn7jHSGkNF4wedvpEmgE5o=
Subject key identifier:   F5:00:EC:5D:67:FE:20:02:5F:F2:25:37:D4:7E:9F:82:C2:55:EC:92
Certificate issuer:       /CN=a877a47e4a7bb2106d1aba44de1fa5ae17f4f321
Certificate serial:       20647F
Authority key identifier: 4E:D3:9C:FD:30:51:21:88:4C:22:BF:37:54:6B:05:DB:5A:65:B7:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/8c14b6590f97fc209776f25a5c9df61561ddc204.roa
Signing time:             Thu 29 Jun 2023 08:30:02 +0000
ROA not before:           Wed 28 Jun 2023 08:30:02 +0000
ROA not after:            Fri 27 Jun 2025 08:30:02 +0000
asID:                     271920
IP address blocks:        45.183.42.0/23 maxlen: 23
                          2803:ad60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122879 (0x20647f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a877a47e4a7bb2106d1aba44de1fa5ae17f4f321
        Validity
            Not Before: Jun 28 08:30:02 2023 GMT
            Not After : Jun 27 08:30:02 2025 GMT
        Subject: CN=8c14b6590f97fc209776f25a5c9df61561ddc204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:f9:0b:80:4c:57:52:07:6f:d1:49:9c:1f:
                    90:b4:e2:f9:91:8f:fa:5a:ad:93:0c:e9:45:e3:a3:
                    86:69:d8:59:52:5d:b7:7f:38:49:dd:a6:52:fe:ac:
                    4d:1f:7c:ee:1c:eb:63:80:6f:01:28:64:b3:18:b2:
                    f4:a6:17:9c:44:9c:6b:57:7e:72:9d:e0:6d:3f:56:
                    52:07:c9:44:94:ae:0d:c1:ec:87:f6:eb:28:15:ac:
                    ef:03:fb:43:31:c4:02:96:ff:31:32:1f:1d:b0:18:
                    99:ee:4d:f2:28:b0:cd:d4:40:5f:6b:ac:e6:a6:72:
                    db:08:59:b6:4e:49:fd:77:d1:49:5f:15:69:cb:f4:
                    92:27:e8:d7:1f:92:44:36:86:d9:94:15:58:51:e6:
                    e5:c2:a5:3a:11:b8:3b:48:bc:88:6e:68:db:27:6a:
                    dd:fd:91:23:86:d5:56:cf:20:72:f2:82:2f:34:d0:
                    66:9c:f6:70:60:a6:c9:19:ab:d3:df:97:bc:f9:05:
                    2d:77:57:99:10:18:6e:a9:38:6f:c7:3d:09:97:ad:
                    38:a9:90:fc:8c:d1:2f:f5:e6:f2:ea:31:95:18:bf:
                    ce:27:f0:a4:cc:42:ef:10:ef:20:4c:ac:ab:e6:2a:
                    c2:74:3a:44:df:35:97:16:e1:8f:ce:40:67:ac:1e:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:EC:5D:67:FE:20:02:5F:F2:25:37:D4:7E:9F:82:C2:55:EC:92
            X509v3 Authority Key Identifier:
                keyid:4E:D3:9C:FD:30:51:21:88:4C:22:BF:37:54:6B:05:DB:5A:65:B7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/8c14b6590f97fc209776f25a5c9df61561ddc204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.42.0/23
                IPv6:
                  2803:ad60::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:27:07:d8:26:16:33:46:6b:40:03:60:1f:f4:f1:3d:f9:68:
         f6:bb:35:ba:9e:90:46:3f:8d:8f:29:87:7f:7b:56:45:41:b6:
         3c:e4:98:e0:c0:63:2e:98:99:e9:9a:69:42:96:b7:66:d7:cc:
         89:f2:4b:33:b9:e1:93:9a:d1:76:b7:c7:c1:04:17:77:83:db:
         84:e4:02:12:8e:d1:bc:40:c2:a8:fd:5d:35:f8:58:07:80:b1:
         a9:65:85:a5:30:3b:92:59:26:04:a2:e3:a8:52:73:fb:d6:df:
         8f:f9:7f:97:12:2a:ab:63:4c:11:06:f3:e5:df:7c:38:23:fe:
         71:1a:17:d2:2a:4d:4a:ea:9a:91:2a:b1:79:50:b6:bf:8c:5f:
         10:64:80:84:97:15:d3:ac:77:0d:de:6a:61:15:8a:9e:43:b3:
         c7:d8:fb:ef:bf:13:c3:78:00:1d:38:7c:7d:de:12:c6:d6:cf:
         7a:d6:b5:98:cc:a9:e3:82:57:64:f7:4a:ea:ca:60:78:cb:c2:
         ec:47:7f:20:4b:7c:ed:7d:cd:99:9b:6c:60:96:2d:08:c8:6a:
         aa:35:82:43:70:c2:dc:14:02:df:19:da:24:dd:fb:47:60:8a:
         7d:c2:b0:df:50:56:79:14:02:57:ab:ac:b9:cf:02:0f:73:96:
         f4:8d:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----