Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/6d78485f1235e23d43d38039f511bfd82b60e583.roa
File:                     6d78485f1235e23d43d38039f511bfd82b60e583.roa (raw, json)
Hash identifier:          Eg+LkDkWTjAtdhhju7SRrCYqFlQ++Bd07/jdq9v0kYY=
Subject key identifier:   00:4C:5A:C5:29:04:7C:EA:47:1E:06:FF:6B:52:FB:33:BF:19:00:78
Certificate issuer:       /CN=9794e945ad36051cb9233097311cb0d25eabbba0
Certificate serial:       27845F
Authority key identifier: 14:C0:DF:95:38:1D:3C:FB:F1:64:E1:A7:87:A7:47:57:05:6D:67:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9794e945ad36051cb9233097311cb0d25eabbba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/6d78485f1235e23d43d38039f511bfd82b60e583.roa
Signing time:             Sun 24 Mar 2024 08:30:00 +0000
ROA not before:           Sun 24 Mar 2024 08:30:00 +0000
ROA not after:            Tue 24 Mar 2026 08:30:00 +0000
asID:                     267895
IP address blocks:        45.177.128.0/22 maxlen: 24
                          2803:6660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589791 (0x27845f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9794e945ad36051cb9233097311cb0d25eabbba0
        Validity
            Not Before: Mar 24 08:30:00 2024 GMT
            Not After : Mar 24 08:30:00 2026 GMT
        Subject: CN=6d78485f1235e23d43d38039f511bfd82b60e583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:45:fe:1e:68:76:ee:fc:ef:e3:58:b6:11:
                    db:e3:97:df:f0:c5:f9:ee:c8:a4:1e:86:0f:7b:a1:
                    42:29:53:0c:bb:54:79:0d:26:87:d5:12:80:6c:52:
                    70:fd:eb:6f:71:59:91:09:b5:c3:0c:05:a7:61:14:
                    7a:71:80:98:c1:74:70:06:91:e1:2f:00:ae:1b:9e:
                    5b:9e:c6:74:2e:e0:9b:c0:fc:03:54:02:94:20:39:
                    dd:9e:35:e4:74:fb:d4:44:a1:85:31:4e:85:9d:80:
                    dc:3f:d9:20:5d:69:7e:1d:05:79:21:9d:e3:dc:5a:
                    3c:4f:dd:80:91:92:eb:f5:96:cf:72:ee:df:5a:a3:
                    8d:cc:f2:2a:e5:7b:01:f1:8b:19:88:a3:e7:36:1b:
                    67:c6:89:2b:8c:b9:f4:a2:6e:c2:28:4d:7b:90:c4:
                    67:65:34:c7:ee:05:27:f2:78:aa:28:a7:25:bb:67:
                    d6:41:fa:e1:4e:be:f5:f3:4e:02:3c:46:c5:b2:82:
                    ca:26:ff:07:f8:be:df:c9:f6:e8:62:f9:73:72:7e:
                    31:e8:29:78:5c:de:62:ff:40:9c:2e:c8:22:a9:f7:
                    41:82:ec:9f:68:75:ed:76:b2:08:0d:1d:e7:ed:a7:
                    df:d9:76:3c:29:92:45:e2:97:11:a8:5b:35:7e:92:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:5A:C5:29:04:7C:EA:47:1E:06:FF:6B:52:FB:33:BF:19:00:78
            X509v3 Authority Key Identifier:
                keyid:14:C0:DF:95:38:1D:3C:FB:F1:64:E1:A7:87:A7:47:57:05:6D:67:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9794e945ad36051cb9233097311cb0d25eabbba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/6d78485f1235e23d43d38039f511bfd82b60e583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4d75764-0416-4726-ab91-d2059d2b8d4d/9794e945ad36051cb9233097311cb0d25eabbba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.128.0/22
                IPv6:
                  2803:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:43:dc:fa:fb:ff:83:bf:f2:f0:bc:07:fd:7d:b5:57:01:86:
         24:2f:b9:0e:b2:53:25:ed:48:0c:35:ab:ab:ef:05:88:c6:94:
         5b:e4:30:53:b3:9d:5d:ae:c7:b6:78:5d:ef:6e:a4:1e:c4:ea:
         4c:c2:01:1d:90:84:6e:00:97:b2:78:1a:94:73:62:ab:2c:7e:
         9e:c0:ef:24:36:d6:b9:4d:74:b7:16:cd:07:f6:c0:91:3f:3e:
         be:16:d7:8d:8a:f4:1c:7b:ca:cd:5e:21:1d:eb:0d:9d:98:0a:
         f1:32:a9:16:70:c9:28:fd:e4:9f:cb:ca:97:7f:fb:88:dd:13:
         b2:02:a2:1a:4f:1d:10:0d:02:09:7f:65:b3:52:d2:97:53:50:
         6a:71:1d:66:9e:30:d9:d7:a4:32:ee:76:5a:25:e4:8f:05:68:
         3f:0e:9c:50:ce:85:15:05:d8:2f:ef:5e:2f:3d:5c:df:0b:bb:
         11:c9:a9:0b:66:99:00:07:70:14:9f:d3:3f:61:9c:11:ce:d5:
         fc:2f:3b:8f:af:e0:e9:49:97:40:05:2f:ce:4f:8a:92:d8:18:
         39:16:c8:f8:30:5d:2a:33:23:8e:37:64:b1:6a:ca:a6:40:45:
         b3:04:61:55:d6:13:c4:f2:46:fc:0c:bb:b4:5a:a5:0d:bb:84:
         cd:b1:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----