Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/7b8d07323e069475fee7bb5d616c4091bd713c17.roa
File:                     7b8d07323e069475fee7bb5d616c4091bd713c17.roa (raw, json)
Hash identifier:          lfwoPa+/lw53geWtGi3Cu6SdShbbAeZLL07lt/vWYb0=
Subject key identifier:   18:05:3D:90:C3:3B:3E:68:C2:92:7E:0C:03:E7:AC:94:D5:9D:D1:75
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       21D951
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/7b8d07323e069475fee7bb5d616c4091bd713c17.roa
Signing time:             Tue 19 Sep 2023 03:40:32 +0000
ROA not before:           Mon 18 Sep 2023 03:40:31 +0000
ROA not after:            Fri 19 Sep 2025 03:40:31 +0000
asID:                     267799
IP address blocks:        45.173.14.0/23 maxlen: 23
                          45.173.44.0/24 maxlen: 24
                          2803:bfa0::/32 maxlen: 40
                          2803:bfa0:fe00::/39 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218321 (0x21d951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Sep 18 03:40:31 2023 GMT
            Not After : Sep 19 03:40:31 2025 GMT
        Subject: CN=7b8d07323e069475fee7bb5d616c4091bd713c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:53:4a:21:7d:d1:af:04:97:9e:8e:a9:8e:
                    ff:b6:02:46:ea:d7:93:f3:62:fb:49:72:6e:72:90:
                    84:65:74:88:48:9d:97:24:1f:a1:4a:e3:60:01:f4:
                    34:75:a9:68:88:b5:97:e6:cf:5a:0a:15:3e:46:ac:
                    fd:67:86:d3:85:e2:b3:1e:94:e9:97:e4:1b:7e:b7:
                    dd:3e:db:9e:63:25:76:8d:34:aa:97:60:5a:72:41:
                    34:63:14:79:05:57:dc:e0:85:96:97:d0:40:9f:19:
                    a8:e3:6d:3a:de:82:ab:8c:39:b3:2f:b9:2d:da:2a:
                    65:27:0e:58:69:47:38:3f:ad:7f:56:af:55:b4:3c:
                    9c:53:04:e9:42:7d:08:5d:57:b1:8d:93:47:5c:b2:
                    c6:c2:20:0d:7c:be:53:65:3d:69:6c:e2:78:78:99:
                    44:b0:d8:ea:67:5d:cd:44:10:c8:4d:1b:af:ac:91:
                    bc:61:de:7b:35:6c:65:34:93:25:d4:f6:48:e1:e5:
                    77:97:f3:ec:34:46:ca:40:ed:cc:8b:e9:28:80:01:
                    18:73:95:6e:17:75:8c:f6:2c:62:d9:45:14:16:6c:
                    d8:35:5c:12:16:ef:cb:09:b7:d7:90:8e:e3:62:60:
                    17:ab:94:71:31:9e:2c:30:a0:90:60:5c:56:17:1e:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:3D:90:C3:3B:3E:68:C2:92:7E:0C:03:E7:AC:94:D5:9D:D1:75
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/7b8d07323e069475fee7bb5d616c4091bd713c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.14.0/23
                  45.173.44.0/24
                IPv6:
                  2803:bfa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:6a:05:7d:d0:98:8b:86:7f:9f:da:02:96:65:a1:d7:3f:
         88:d2:0f:0a:00:40:b4:51:0c:a6:1c:cf:71:56:6b:25:40:57:
         ce:55:0c:14:ec:00:46:4c:4d:69:c2:08:1c:2a:30:31:12:73:
         7c:d8:21:6f:56:f4:5c:ff:17:0f:c1:30:ac:d0:4f:12:72:fe:
         d5:09:24:df:46:0d:19:be:d1:a8:74:f5:bd:69:32:f4:86:ea:
         d2:5a:5a:a6:27:88:8c:ee:49:b1:0a:b2:45:4f:a5:94:c3:31:
         74:81:7a:1a:ae:a4:96:05:a7:69:d7:bd:06:81:a4:a8:d1:36:
         a8:99:0a:87:e0:75:74:36:e3:00:9e:26:fa:78:04:83:0b:ff:
         1d:34:42:36:8a:57:e2:38:96:2d:00:78:2b:c1:64:54:17:cf:
         c1:4e:76:96:15:f6:72:2a:37:ba:e1:89:83:f6:c7:0f:d6:cf:
         3a:81:3c:31:3a:f5:86:36:27:64:d7:ad:6c:70:58:5c:57:ec:
         5e:a4:31:ae:71:89:4a:44:b4:fc:55:4b:4f:5a:9a:05:b6:e4:
         ae:a4:82:80:db:71:d1:fe:b9:43:ae:e2:a1:84:f7:e5:8b:77:
         8f:c4:9f:7e:f7:5d:88:2e:92:0f:0f:7e:fc:48:8d:c0:e0:e2:
         74:9f:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----