Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/93f190a792f149826218eaf28dc9774b3b31416d.roa
File:                     93f190a792f149826218eaf28dc9774b3b31416d.roa (raw, json)
Hash identifier:          OREkDrvu2tFxNmRWwukKF29Y7YnBVqdmkdv4TQwBFps=
Subject key identifier:   A8:B6:45:C5:30:01:4B:1D:0D:D8:24:36:82:BC:25:B9:8B:22:E6:4E
Certificate issuer:       /CN=9cd1fa487cf3249dd054f9956489b848d101a711
Certificate serial:       18148E
Authority key identifier: AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/93f190a792f149826218eaf28dc9774b3b31416d.roa
Signing time:             Wed 25 Jan 2023 17:11:20 +0000
ROA not before:           Tue 24 Jan 2023 17:09:49 +0000
ROA not after:            Sat 25 Jan 2025 17:09:49 +0000
asID:                     262589
IP address blocks:        45.173.10.0/24 maxlen: 24
                          45.173.11.0/24 maxlen: 24
                          2803:f860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578126 (0x18148e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd1fa487cf3249dd054f9956489b848d101a711
        Validity
            Not Before: Jan 24 17:09:49 2023 GMT
            Not After : Jan 25 17:09:49 2025 GMT
        Subject: CN=93f190a792f149826218eaf28dc9774b3b31416d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:9a:72:8b:a0:d7:53:fd:2f:fc:eb:f2:70:
                    a4:34:f2:b8:b6:8e:90:a1:a7:8f:b0:0a:c7:3f:4e:
                    dc:28:57:21:65:0f:49:9f:6d:6b:2c:a8:5a:5c:11:
                    ca:51:9f:27:0e:22:bb:d8:4f:3b:97:46:7d:7c:86:
                    59:4b:93:4a:4e:af:5a:43:ac:d2:01:10:3c:d3:86:
                    7a:ef:90:14:4e:64:60:e7:f1:44:2a:46:6c:9f:f1:
                    29:2e:4c:e7:d7:93:a3:b2:ed:1d:e3:55:c5:95:c3:
                    35:40:37:c4:e7:90:cc:09:6d:d3:a9:42:26:a6:96:
                    1a:7b:6a:42:82:62:62:5a:df:88:23:45:15:a6:81:
                    84:df:0f:cf:6d:3a:0b:42:a9:c0:2e:40:a7:4a:28:
                    3f:84:14:b8:38:2a:ae:15:92:4d:fa:e9:4f:d6:b3:
                    ba:80:8d:34:92:f1:4f:92:e8:a3:fe:c3:2a:9f:42:
                    4c:42:d5:0f:47:fc:e5:54:ee:3d:5f:a0:6c:b8:9b:
                    63:01:e5:18:79:61:5f:a8:3b:9b:72:65:14:85:1b:
                    01:8d:70:c3:12:df:6e:c2:79:69:a9:f6:6b:21:51:
                    5c:8c:b0:57:4b:0f:9c:1b:60:a8:39:3e:7f:eb:92:
                    a2:18:d0:fd:70:2e:46:bd:15:15:3a:5c:45:b3:56:
                    e6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:45:C5:30:01:4B:1D:0D:D8:24:36:82:BC:25:B9:8B:22:E6:4E
            X509v3 Authority Key Identifier:
                keyid:AA:D9:84:A4:8B:BE:15:EA:B4:98:36:44:AE:C8:0E:47:60:77:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cd1fa487cf3249dd054f9956489b848d101a711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/93f190a792f149826218eaf28dc9774b3b31416d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9b04952-770d-48fa-8aab-aad1e6cb3d82/9cd1fa487cf3249dd054f9956489b848d101a711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.10.0/23
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:3c:cd:d3:26:7e:a1:2a:aa:80:e9:89:7e:4a:1d:dd:6d:
         08:60:7c:b3:3a:02:bf:c2:03:bf:01:5d:cf:20:26:4c:1a:12:
         11:97:b1:1a:f8:d2:f9:87:1f:80:d0:1e:29:52:54:2c:4c:01:
         0d:d5:d7:dc:46:d0:c0:02:71:49:43:7c:74:c5:40:3b:d3:de:
         95:8d:84:a6:4f:98:6d:f2:ac:a4:63:61:67:15:a4:96:88:47:
         82:98:ce:b8:4d:36:79:f2:ba:27:40:02:bf:64:d3:0a:aa:29:
         70:ff:c0:5a:d8:57:cb:07:3d:3b:6c:d4:58:39:0c:cd:de:2f:
         ff:2f:da:99:53:c4:63:35:3e:de:f2:7a:17:33:43:69:01:06:
         fc:99:31:33:eb:2a:00:be:97:66:d7:46:7a:26:6a:8c:e4:c8:
         c2:2a:6e:99:ee:1d:91:ff:fd:3d:5c:39:3f:0d:c9:29:fe:96:
         4a:2a:1c:07:35:0d:93:61:ee:05:e1:51:0d:ba:cf:41:b2:07:
         78:ad:cd:6a:39:68:3d:d8:ce:2d:66:87:5d:79:ab:32:60:01:
         56:8e:80:13:b2:1e:f1:16:37:5d:1b:71:85:df:6e:9f:e2:4b:
         ff:cc:7b:0c:7a:ad:4b:a4:65:cf:61:d1:d7:30:f7:de:5b:b7:
         fe:f0:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----