Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/83312ab6c8ddf79c47e9beadb2e6fd6fd3570e9c.roa
File:                     83312ab6c8ddf79c47e9beadb2e6fd6fd3570e9c.roa (raw, json)
Hash identifier:          ElsKLEumWwfLxQRernR5Hgn0gBK184cvS53YBDAqx+c=
Subject key identifier:   DB:58:60:A7:2E:59:9B:4A:EC:58:A4:78:5A:B6:8C:6D:50:E5:53:A2
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       214448
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/83312ab6c8ddf79c47e9beadb2e6fd6fd3570e9c.roa
Signing time:             Tue 22 Aug 2023 03:50:35 +0000
ROA not before:           Mon 21 Aug 2023 03:50:35 +0000
ROA not after:            Fri 22 Aug 2025 03:50:35 +0000
asID:                     267823
IP address blocks:        45.172.222.0/23 maxlen: 24
                          45.173.12.0/24 maxlen: 24
                          2803:1860::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180168 (0x214448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: Aug 21 03:50:35 2023 GMT
            Not After : Aug 22 03:50:35 2025 GMT
        Subject: CN=83312ab6c8ddf79c47e9beadb2e6fd6fd3570e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:a3:5d:64:20:99:d1:43:64:e9:a8:f0:51:
                    f2:2b:71:d3:c5:46:b2:6c:67:16:33:48:d0:1b:94:
                    2e:2b:6d:c8:79:95:bd:1d:d7:bd:6b:af:db:ca:cf:
                    23:b9:35:d9:bd:8f:b3:f1:32:05:ab:99:ff:32:ae:
                    ad:cc:51:c7:da:b4:93:d7:5b:64:97:10:f7:d2:ed:
                    cf:3e:aa:c2:39:c6:d8:4a:09:09:d3:27:09:c7:12:
                    7f:ce:d1:14:e3:a8:9a:f8:ac:14:59:b2:62:34:63:
                    23:7f:bf:98:1a:00:ff:3d:4d:c2:ae:b0:f9:66:97:
                    2b:1f:43:9f:20:69:11:3c:cf:16:af:3a:d2:88:78:
                    cf:aa:2d:de:c0:53:64:e4:0d:2e:d3:63:03:81:c6:
                    44:3b:67:9f:bc:71:2c:68:a1:88:28:3b:38:87:97:
                    1e:ab:c4:de:b9:f5:31:93:74:10:d8:7a:c4:26:32:
                    89:54:67:75:55:97:be:bd:22:ec:41:89:03:4a:34:
                    b0:22:f3:76:78:3f:cd:1e:b7:28:3a:28:8d:ca:78:
                    71:5e:f7:61:17:71:46:c1:85:14:60:bb:9c:9f:de:
                    b6:3a:6d:16:a9:db:3a:77:84:03:7e:e0:a1:24:ca:
                    42:33:4a:0e:ef:8b:21:83:8a:02:24:ed:fe:ea:85:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:58:60:A7:2E:59:9B:4A:EC:58:A4:78:5A:B6:8C:6D:50:E5:53:A2
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/83312ab6c8ddf79c47e9beadb2e6fd6fd3570e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.222.0/23
                  45.173.12.0/24
                IPv6:
                  2803:1860::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:88:cb:07:d3:52:fb:60:3a:f4:2f:ee:18:a3:1e:28:44:
         14:5a:6b:31:1f:b3:e7:00:e2:49:2e:2b:0b:ee:ef:51:28:e8:
         6d:3e:d0:fc:c0:70:fe:e8:b2:2e:69:77:71:12:4b:67:f5:c8:
         ca:64:1a:92:a2:9f:8b:3e:ac:69:28:3d:73:5b:e9:3f:85:ed:
         ea:58:4d:fb:c5:19:01:7a:fb:a1:c2:54:9e:e0:d3:be:dc:5a:
         87:a4:a1:09:43:a0:1f:d6:84:69:79:1a:23:6c:6e:22:f8:8f:
         a2:d6:5c:fd:d1:1e:c5:9d:e5:e4:29:e6:c3:08:68:22:61:ec:
         fb:22:14:d5:22:31:47:64:ce:6c:88:e4:fe:34:d4:94:29:a1:
         5a:0a:5d:50:6d:d9:18:fd:41:cc:f3:e6:bd:1c:28:ea:e5:17:
         f1:a1:86:9b:8f:d7:64:50:06:e6:38:42:1e:bb:e9:21:4a:9e:
         f5:2a:4e:e1:fa:15:67:c7:1d:5a:59:93:89:30:c4:22:97:21:
         e4:a8:e3:b2:65:8f:21:77:01:39:f5:0a:25:88:fc:f0:06:03:
         bc:2f:54:d0:56:28:fa:a4:98:e6:66:a3:d0:56:95:73:0f:cb:
         72:d0:1e:61:5b:4b:ed:43:63:61:0e:d1:e3:27:ac:8c:89:72:
         88:02:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----