Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/2cd423696440b9ee623a0c5f0bb45bc56a56dd5e.roa
File:                     2cd423696440b9ee623a0c5f0bb45bc56a56dd5e.roa (raw, json)
Hash identifier:          0fWtw0Vje0McrY827fI/o8ktiDvOyKEGUvF3GMDeUpM=
Subject key identifier:   BE:D1:81:E5:2A:1E:51:D3:D9:F3:85:88:A8:A1:95:2B:36:6E:C1:37
Certificate issuer:       /CN=42b02bf99b87736ae95e822677591902bbb82724
Certificate serial:       209CF3
Authority key identifier: AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/2cd423696440b9ee623a0c5f0bb45bc56a56dd5e.roa
Signing time:             Mon 15 May 2023 17:21:30 +0000
ROA not before:           Sun 14 May 2023 17:21:29 +0000
ROA not after:            Thu 15 May 2025 17:21:29 +0000
asID:                     266844
IP address blocks:        45.238.152.0/22 maxlen: 24
                          2803:dca0::/32 maxlen: 96

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137331 (0x209cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b02bf99b87736ae95e822677591902bbb82724
        Validity
            Not Before: May 14 17:21:29 2023 GMT
            Not After : May 15 17:21:29 2025 GMT
        Subject: CN=2cd423696440b9ee623a0c5f0bb45bc56a56dd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:81:cf:52:40:c3:4c:c1:35:28:01:e6:a7:
                    4c:68:d5:69:31:67:c2:06:77:51:8f:29:c0:a0:32:
                    d2:e9:b1:b7:b5:86:28:f8:52:de:05:9e:66:a7:90:
                    d7:47:af:a4:02:c4:6e:90:4e:2b:92:ae:b5:08:cb:
                    35:41:73:83:c8:ad:15:4e:5b:87:dc:f8:93:d1:a0:
                    eb:60:5d:af:df:07:d6:ed:73:01:2f:11:2c:73:c5:
                    7f:51:ac:40:66:c3:bf:d7:6e:70:79:ea:96:ac:a7:
                    9a:e9:c0:7c:c1:35:fe:55:2c:fb:53:8d:d2:14:37:
                    ac:83:fa:90:d6:3d:cb:2a:fa:e2:6a:0d:ac:a0:c8:
                    57:84:e4:dc:a1:ff:c3:0f:7c:ea:c8:50:69:b6:6f:
                    0a:e2:53:9b:a3:bc:e1:7f:81:0d:be:fd:aa:df:0c:
                    54:5a:e4:6d:29:a0:68:8a:c4:49:8f:27:3e:84:d5:
                    68:f0:86:8c:53:8e:39:98:5a:ee:ec:2c:24:0d:4e:
                    38:0d:64:51:7a:45:7a:a5:62:f1:94:6a:3c:a2:b8:
                    da:4d:ce:94:0b:0b:bb:5e:50:3a:79:3f:bd:12:e0:
                    32:3a:31:fd:12:2a:3d:38:2c:d1:c3:d1:59:7e:a4:
                    dc:37:99:de:4f:02:70:a7:b4:cd:d9:07:69:f4:f4:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:81:E5:2A:1E:51:D3:D9:F3:85:88:A8:A1:95:2B:36:6E:C1:37
            X509v3 Authority Key Identifier:
                keyid:AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/2cd423696440b9ee623a0c5f0bb45bc56a56dd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.152.0/22
                IPv6:
                  2803:dca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:95:d1:0b:56:c0:32:4e:c4:9e:33:99:5d:d7:b9:8b:fe:56:
         f8:84:f4:67:5e:88:96:c9:55:65:e3:62:38:1b:e9:10:44:1b:
         72:fd:1b:9b:34:4a:d7:4b:7a:9d:f2:15:e4:40:6a:b5:f0:57:
         fb:9f:ba:94:d2:b0:fe:f4:88:56:77:aa:e0:eb:eb:44:d9:8f:
         f5:c3:6d:dd:a2:15:73:b4:3a:22:f7:e8:d4:6a:41:04:1b:99:
         96:1a:f8:a4:8a:86:d0:9c:be:b4:74:16:bb:3f:56:b3:2a:f3:
         cc:79:a3:16:01:ce:b2:cb:9d:dc:2a:62:a3:c0:58:ec:8d:a7:
         f8:68:8c:a1:99:8d:ac:2d:fb:33:9b:df:b4:7b:00:52:50:eb:
         fc:61:cc:59:6f:5e:2a:5b:d0:c9:31:2b:be:52:c5:5f:6e:cd:
         66:7e:1c:69:99:50:57:b3:92:b0:8f:4c:b7:a6:72:5d:20:27:
         f9:5f:8a:45:df:0e:63:b2:ff:69:74:c7:7d:45:a2:6a:fa:14:
         d1:21:7d:26:81:74:c6:74:65:d5:a9:2d:c0:ba:c0:75:c1:82:
         de:4f:1a:c6:8c:08:81:b7:96:13:1b:ba:04:db:09:68:38:87:
         e8:27:bd:96:33:f7:1d:4d:05:61:21:eb:14:ab:00:2d:22:20:
         2f:7b:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----