Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/37b8d67ab77291bdf2fc2cdf1038041e811cfe0d.roa
File:                     37b8d67ab77291bdf2fc2cdf1038041e811cfe0d.roa (raw, json)
Hash identifier:          VXmiHN2C24KyfXSt9EzljeJLzbu6z231fljYsnIvEHQ=
Subject key identifier:   81:D3:E9:35:7F:68:45:BB:9E:E0:FB:1D:CD:2C:B2:A4:77:4F:3B:D2
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       247DDA
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/37b8d67ab77291bdf2fc2cdf1038041e811cfe0d.roa
Signing time:             Sun 12 Nov 2023 14:05:58 +0000
ROA not before:           Sun 12 Nov 2023 14:05:56 +0000
ROA not after:            Wed 12 Nov 2025 14:05:56 +0000
asID:                     266719
IP address blocks:        45.231.55.0/24 maxlen: 24
                          2801:1d:a005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391514 (0x247dda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Nov 12 14:05:56 2023 GMT
            Not After : Nov 12 14:05:56 2025 GMT
        Subject: CN=37b8d67ab77291bdf2fc2cdf1038041e811cfe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:d8:8b:47:61:f0:cd:6e:14:ba:5b:20:d2:
                    f3:36:c4:55:3a:50:e7:f0:e9:31:b2:ad:7d:a8:3d:
                    b0:e0:72:85:7c:43:45:a9:b6:4e:d5:1a:76:f0:26:
                    4f:05:83:21:16:6d:76:6d:f9:03:93:8f:84:25:57:
                    b5:1f:c4:3d:73:20:a9:39:22:6d:9c:7b:04:73:71:
                    ef:65:a4:08:6b:f7:3d:da:65:73:09:29:02:fb:ae:
                    db:ee:9f:79:cd:8e:dd:06:00:de:d5:03:e4:9a:4d:
                    f8:9c:67:83:78:61:f5:8f:e9:9e:8e:44:fb:d5:66:
                    f1:65:f5:6b:32:ea:03:5e:c3:d0:d9:1e:8d:ce:be:
                    2e:34:85:85:68:5d:23:99:9b:51:54:56:21:8a:e6:
                    95:fe:cc:a2:0f:e8:88:44:8a:74:84:72:82:64:12:
                    3b:08:e4:0f:74:ff:a7:e4:1a:53:c0:d6:91:84:1d:
                    f4:3c:91:b1:1c:69:89:45:8f:ee:fe:4b:d4:fc:3f:
                    87:4b:17:2e:45:6c:89:f9:ed:96:16:6f:92:57:23:
                    7c:a6:06:a9:65:2b:99:71:c5:50:44:25:aa:ec:a9:
                    cb:91:ce:ff:f5:96:d1:53:3f:29:ca:05:69:8e:f5:
                    fd:a2:df:42:ab:ea:d5:c3:2a:71:c2:0d:18:51:6f:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:E9:35:7F:68:45:BB:9E:E0:FB:1D:CD:2C:B2:A4:77:4F:3B:D2
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/37b8d67ab77291bdf2fc2cdf1038041e811cfe0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.55.0/24
                IPv6:
                  2801:1d:a005::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:6c:28:08:a2:dc:08:0a:3d:b8:92:a8:3c:25:11:12:31:
         8f:b9:1d:90:48:f2:04:1f:17:3d:67:46:bd:a4:5a:aa:cb:5d:
         c3:bf:f2:ed:4d:c2:42:d0:14:d6:bc:d2:f5:5f:ac:c9:d7:0d:
         71:33:89:e9:a1:16:6a:e5:dd:85:11:1e:e1:7c:40:c7:82:9c:
         0d:c8:b3:8f:25:49:3a:a1:76:b5:59:96:ac:54:a9:ff:2d:f2:
         22:66:56:5e:50:92:9f:53:b8:a5:96:26:e7:b8:b4:12:d4:a0:
         3f:40:8f:06:89:a1:2c:61:88:05:e7:3e:0c:1c:b7:7a:44:6c:
         1e:20:c9:74:b7:b7:b8:42:0a:98:21:71:d2:1a:37:cc:4f:6a:
         1e:dd:39:d3:a6:e4:88:f6:4a:ef:ea:9e:db:86:21:8d:52:ed:
         85:6c:22:5d:74:7b:34:2e:6d:84:87:b2:01:c1:a0:0e:8b:59:
         b9:22:3f:13:e2:e5:7f:2c:17:9a:60:5b:15:28:12:2c:f2:54:
         bc:6f:2e:97:3c:ac:c8:4b:46:37:38:64:6a:73:e9:45:f6:60:
         b9:3c:41:eb:bc:c0:c6:f1:d3:e4:f3:26:54:e6:f4:bb:0f:fa:
         ad:b4:f0:f3:6f:32:88:bd:93:96:6a:ca:d3:83:16:a7:9e:d6:
         fd:48:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----