Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/9676ee7d41a0631da879710b1917c3e27cdf7505.roa
File:                     9676ee7d41a0631da879710b1917c3e27cdf7505.roa (raw, json)
Hash identifier:          Ftnf7qcNNQM9af4QhN4739cz0NNPUUN9q0uIT9XHgy4=
Subject key identifier:   06:D5:2A:38:4F:65:C6:34:08:75:94:E4:3C:25:B2:7B:29:C0:35:99
Certificate issuer:       /CN=95e6324806626d53c1d3c6b717f576adace69768
Certificate serial:       1D0B5A
Authority key identifier: 84:02:15:BE:FC:3A:A4:D8:62:3B:68:A3:82:E3:01:C1:16:2B:40:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95e6324806626d53c1d3c6b717f576adace69768.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/9676ee7d41a0631da879710b1917c3e27cdf7505.roa
Signing time:             Wed 03 Jan 2024 14:45:32 +0000
ROA not before:           Wed 03 Jan 2024 14:45:32 +0000
ROA not after:            Sat 03 Jan 2026 14:45:32 +0000
asID:                     266829
IP address blocks:        45.238.52.0/22 maxlen: 24
                          2803:b4a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903450 (0x1d0b5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e6324806626d53c1d3c6b717f576adace69768
        Validity
            Not Before: Jan  3 14:45:32 2024 GMT
            Not After : Jan  3 14:45:32 2026 GMT
        Subject: CN=9676ee7d41a0631da879710b1917c3e27cdf7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:1b:98:8d:34:51:e7:53:30:93:70:02:b3:
                    24:c0:c2:13:4c:39:11:ca:e6:5a:b4:3a:a3:88:ad:
                    c6:22:3d:0f:2f:f5:72:da:13:7b:8f:03:d1:34:72:
                    7a:51:62:b5:f4:00:c0:60:22:21:06:5e:7f:f1:ae:
                    2e:31:21:28:86:cb:5f:60:9d:79:c9:3f:1e:5b:fb:
                    ac:62:c6:58:95:17:f0:01:74:5a:a8:33:fa:f4:cf:
                    36:67:01:81:5a:eb:dc:23:c1:df:73:b7:da:ce:ed:
                    dd:6a:6e:53:a7:dc:c5:e6:9f:21:4e:24:a8:c5:aa:
                    9b:7d:84:bc:8d:7c:8b:a8:e5:20:5c:7a:04:32:e5:
                    c4:0d:e8:eb:8b:f1:3c:fb:85:6b:8e:f5:c3:16:01:
                    75:46:94:18:94:ba:6c:dd:65:a3:23:08:53:5f:31:
                    31:bc:a7:ac:55:23:8d:bc:9e:50:f2:be:74:6a:0e:
                    2e:12:2f:25:e1:4d:48:2f:01:ee:9a:1d:7c:fc:96:
                    80:aa:a5:b3:9b:8c:91:ae:1f:ef:ef:3c:b0:5c:0a:
                    74:5f:09:1c:d8:8d:13:35:3d:98:a8:6d:a0:37:89:
                    94:42:b8:fe:5c:21:31:8d:93:9b:31:4b:99:d2:ea:
                    48:c2:c5:c4:25:e8:67:dd:9e:a1:29:9e:53:af:41:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:2A:38:4F:65:C6:34:08:75:94:E4:3C:25:B2:7B:29:C0:35:99
            X509v3 Authority Key Identifier:
                keyid:84:02:15:BE:FC:3A:A4:D8:62:3B:68:A3:82:E3:01:C1:16:2B:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95e6324806626d53c1d3c6b717f576adace69768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/9676ee7d41a0631da879710b1917c3e27cdf7505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a70b8a79-74d4-45df-a2a7-46eea00929d0/95e6324806626d53c1d3c6b717f576adace69768.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.52.0/22
                IPv6:
                  2803:b4a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:b2:03:38:79:ee:42:f6:7a:00:d8:f3:58:4c:3e:7c:c0:
         eb:fb:1b:2b:f7:95:92:ff:37:f3:45:fa:eb:52:92:4c:ea:eb:
         ba:af:5b:0e:62:2a:33:e1:19:a0:df:2f:07:82:af:78:2d:ef:
         fb:53:f0:2d:6a:a5:09:87:f2:21:85:61:92:08:b8:e4:c6:55:
         49:0e:44:1d:ad:d1:41:8b:e6:5e:5a:8f:b6:7c:25:93:d9:8a:
         e6:f4:e8:8b:12:57:b4:f2:c8:a3:df:d5:38:4e:a6:dc:78:16:
         db:97:f1:ad:fc:79:78:61:0c:1c:31:7d:24:e6:19:6c:bf:d9:
         6a:7b:1d:a4:d1:ca:68:bd:6d:2b:a1:ee:47:91:07:96:84:1f:
         4b:77:c6:4e:ca:c5:61:07:77:a9:a6:4a:ca:a7:f7:91:9c:be:
         28:9c:b7:d6:82:96:71:25:dd:a8:ca:db:3f:33:4c:a1:29:b7:
         65:f1:0b:fa:50:f2:52:fc:8e:5b:bf:80:31:24:4f:ea:64:75:
         61:0f:70:6a:a9:0e:66:6b:84:24:76:ac:a1:e2:02:43:8d:bc:
         0e:46:4d:a0:62:c2:12:1d:c3:47:46:dc:42:d7:72:f9:a3:76:
         65:44:65:26:18:ac:4a:ab:a6:fa:04:9c:4c:f9:25:01:9e:3a:
         f4:e7:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----