Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a89c7697-9a8c-4e65-83ab-28f97e8f1226/fa408a1bff1119bd7dd851a8c71872fb982a7871.roa
File:                     fa408a1bff1119bd7dd851a8c71872fb982a7871.roa (raw, json)
Hash identifier:          0pifK7WIfiJAKDZwXnW3iZFEjKS7Z71w/itBi3EfVUM=
Subject key identifier:   3B:14:55:CB:86:F9:48:12:89:E9:D1:AC:6D:AD:ED:61:B0:45:A9:3F
Certificate issuer:       /CN=084fdea4324ce75a5cf2cc99f403be2591e2ab02
Certificate serial:       04C598
Authority key identifier: DC:A3:36:86:6F:EB:89:40:2E:A8:21:66:B6:F2:FB:26:E4:D9:FC:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/084fdea4324ce75a5cf2cc99f403be2591e2ab02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a89c7697-9a8c-4e65-83ab-28f97e8f1226/fa408a1bff1119bd7dd851a8c71872fb982a7871.roa
Signing time:             Thu 21 Dec 2023 00:15:41 +0000
ROA not before:           Thu 21 Dec 2023 00:15:40 +0000
ROA not after:            Sun 21 Dec 2025 00:15:40 +0000
asID:                     265739
IP address blocks:        45.7.252.0/22 maxlen: 24
                          2803:e3c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312728 (0x4c598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084fdea4324ce75a5cf2cc99f403be2591e2ab02
        Validity
            Not Before: Dec 21 00:15:40 2023 GMT
            Not After : Dec 21 00:15:40 2025 GMT
        Subject: CN=fa408a1bff1119bd7dd851a8c71872fb982a7871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:50:91:d8:a2:09:a2:05:89:6e:7e:fd:7f:
                    44:28:f9:8c:40:f6:8a:49:ad:24:fd:24:2e:bf:a5:
                    ca:f6:57:33:38:0b:76:62:95:14:9a:0d:9f:2a:39:
                    7b:8b:fe:40:4e:be:bd:f5:2b:73:97:17:47:f4:e9:
                    fd:7c:32:0c:af:20:f4:b1:fb:86:9a:09:da:be:e5:
                    4a:87:f9:1d:a7:d2:80:ae:37:4f:8c:48:9e:df:e4:
                    04:3a:38:e9:76:21:87:9c:37:f5:f2:a9:18:6b:e4:
                    45:fc:6f:84:dc:5e:15:3f:90:06:d6:cc:a2:00:e1:
                    3a:b4:37:6b:c6:db:a1:4e:85:a0:43:31:35:90:d1:
                    ef:87:e5:0b:86:0a:5c:ad:92:94:8b:75:84:4d:44:
                    a0:52:bc:9a:d3:32:95:58:40:51:27:29:bb:81:5e:
                    7c:f9:5f:12:06:92:39:91:cc:20:a0:ec:15:9f:7a:
                    fc:88:33:bb:ad:03:89:5f:f4:9b:8f:8a:33:1d:ac:
                    99:cd:01:be:37:02:a7:48:72:0f:6f:ac:38:3d:11:
                    b0:06:fb:c4:cb:ee:7b:b7:31:cd:fe:c4:e4:04:15:
                    a4:1a:a5:58:a2:be:64:ad:9d:b2:ba:a6:ea:3f:4e:
                    cf:cf:fa:d7:ef:b2:45:a5:46:74:40:cf:22:c3:00:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:14:55:CB:86:F9:48:12:89:E9:D1:AC:6D:AD:ED:61:B0:45:A9:3F
            X509v3 Authority Key Identifier:
                keyid:DC:A3:36:86:6F:EB:89:40:2E:A8:21:66:B6:F2:FB:26:E4:D9:FC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/084fdea4324ce75a5cf2cc99f403be2591e2ab02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a89c7697-9a8c-4e65-83ab-28f97e8f1226/fa408a1bff1119bd7dd851a8c71872fb982a7871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a89c7697-9a8c-4e65-83ab-28f97e8f1226/084fdea4324ce75a5cf2cc99f403be2591e2ab02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.252.0/22
                IPv6:
                  2803:e3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b8:17:2f:13:12:0b:01:03:0c:7e:6c:57:81:fb:fb:01:c8:
         52:c2:74:bd:17:51:49:56:84:3f:b3:1b:6c:4e:71:4f:8e:c4:
         c3:7d:1c:38:13:64:e0:66:17:eb:b2:87:70:00:00:0d:ca:f6:
         4d:fc:2b:18:0f:14:0e:9d:98:99:fb:1b:36:e6:3a:76:78:76:
         d0:96:47:21:6e:48:75:f6:3c:2d:36:b3:39:62:40:04:4e:c5:
         c4:6e:d4:93:48:3e:57:89:cb:8f:a3:07:fb:31:97:01:e7:d1:
         df:c9:b1:e7:09:3f:fd:5c:52:e3:b2:69:68:c3:e7:63:8e:cb:
         6f:22:0c:eb:62:39:fe:33:a4:d6:1b:fc:4e:f5:a1:ed:1c:d4:
         58:7f:1b:59:c6:8e:8c:82:79:a2:2d:2f:14:92:76:0a:6b:7e:
         a8:20:74:3a:71:1c:57:94:1d:d2:b4:c9:8c:b1:77:91:f5:d7:
         cd:33:d2:bb:f6:b4:ca:4c:b7:3e:bf:97:b8:ca:1d:d3:00:de:
         d0:c4:84:f0:e9:5d:e3:6c:66:c4:bc:0f:1d:ab:c2:eb:07:95:
         77:a1:37:f9:da:9c:ca:d6:71:12:86:9b:80:d8:3c:9c:5e:02:
         6f:34:b6:3f:38:2b:65:e0:4b:9d:c2:0a:2e:68:4f:73:c3:f3:
         0f:cc:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----