Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/4ea0c3f9b8ed6fde0f5c19a29b353c81c7ceee67.roa
File:                     4ea0c3f9b8ed6fde0f5c19a29b353c81c7ceee67.roa (raw, json)
Hash identifier:          c3S1uXzwouvL4vE/c//rQjoLv8yJMalWDVMDUVPT2CU=
Subject key identifier:   19:9E:74:6F:1C:A2:D2:38:8D:11:40:05:E4:1E:36:B6:19:66:04:D8
Certificate issuer:       /CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
Certificate serial:       11C0CA
Authority key identifier: 68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/4ea0c3f9b8ed6fde0f5c19a29b353c81c7ceee67.roa
Signing time:             Tue 03 Oct 2023 08:30:09 +0000
ROA not before:           Mon 02 Oct 2023 08:30:09 +0000
ROA not after:            Wed 01 Oct 2025 08:30:09 +0000
asID:                     53856
IP address blocks:        45.224.252.0/22 maxlen: 22
                          2803:2a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163466 (0x11c0ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
        Validity
            Not Before: Oct  2 08:30:09 2023 GMT
            Not After : Oct  1 08:30:09 2025 GMT
        Subject: CN=4ea0c3f9b8ed6fde0f5c19a29b353c81c7ceee67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:f1:30:f2:70:05:a3:16:bc:1b:de:c3:6d:
                    8f:71:34:66:23:b9:36:a5:e4:6c:50:fe:4b:3b:54:
                    8f:27:0a:e2:29:65:08:43:f3:3d:94:fb:c2:5b:ae:
                    2a:64:45:79:29:e0:2d:0a:a8:43:cd:eb:54:86:19:
                    77:95:0a:18:05:5f:15:57:a8:55:c9:98:ec:dc:5f:
                    76:95:0a:c5:29:1a:df:e7:6f:1a:81:a4:16:b8:55:
                    10:2a:7f:39:d1:f6:c4:d4:95:7a:d3:98:b0:43:59:
                    0b:6c:01:e9:67:08:25:9c:87:ee:df:8b:88:d7:87:
                    81:ab:21:ba:21:67:ef:b7:8c:61:fc:9b:f3:bd:f3:
                    20:be:7b:a5:14:87:33:70:6f:8e:15:e5:3c:d7:8d:
                    94:86:42:44:be:a7:97:25:a1:2e:ab:22:69:2c:30:
                    ea:59:2a:7e:34:25:97:2c:ac:7b:36:db:61:8f:f1:
                    48:e3:bb:08:91:bd:d0:bc:d3:83:d5:5b:6c:8d:5c:
                    dc:a6:73:0a:66:aa:38:91:56:da:c9:3a:06:4e:58:
                    87:13:1f:a3:ef:25:62:72:9c:43:6a:9f:b7:a8:a9:
                    99:f7:fb:03:ea:48:a2:19:a7:67:88:5a:ba:9b:52:
                    b1:f9:70:ed:51:a1:3f:48:96:80:9c:c5:83:5c:f8:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9E:74:6F:1C:A2:D2:38:8D:11:40:05:E4:1E:36:B6:19:66:04:D8
            X509v3 Authority Key Identifier:
                keyid:68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/4ea0c3f9b8ed6fde0f5c19a29b353c81c7ceee67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.252.0/22
                IPv6:
                  2803:2a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:49:a6:11:4b:e8:c8:5f:cc:e8:24:51:8f:2b:ef:2b:85:a1:
         8d:f3:88:4d:8f:b3:50:e7:4c:33:da:14:4f:6d:f5:3a:73:4e:
         af:af:48:d8:51:09:14:70:03:0e:cc:ac:8d:d9:5a:cf:0f:d6:
         a5:12:84:49:5c:72:a4:f8:84:ae:26:e0:db:ee:42:8a:c6:80:
         d3:6d:91:81:03:65:df:90:ba:fe:bf:d1:7b:da:03:b6:d3:10:
         0e:64:64:35:5d:81:3c:f5:56:98:72:f5:34:78:90:fd:72:8c:
         6f:a0:0c:6a:73:5b:41:26:43:79:0f:e2:1d:1a:1f:0f:5d:94:
         75:3f:08:8c:8b:87:d8:ba:6e:5b:3a:75:fe:16:ea:4d:a9:46:
         ae:52:4f:45:6e:48:8c:65:d8:66:57:21:dc:0d:86:26:34:f3:
         04:2c:26:7b:96:8d:67:06:dd:dc:37:21:9f:20:b1:05:fe:c5:
         2b:ac:b1:64:32:ac:44:da:a4:1e:60:e1:d6:06:b7:09:73:14:
         b1:c7:f7:aa:1a:a3:9d:dc:72:18:a8:8b:af:66:dd:e6:de:5d:
         17:b9:8f:99:0e:8b:41:87:f4:60:bc:5d:c9:1f:bd:88:cf:e4:
         f8:07:5c:25:82:93:7e:9a:4c:a3:a7:48:b2:1c:0a:e6:7a:b1:
         41:35:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----