Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/6bd7c64d35ce47a29df20147249cae0a2569da18.roa
File:                     6bd7c64d35ce47a29df20147249cae0a2569da18.roa (raw, json)
Hash identifier:          hGyA2PuXX8UBdfstd175UAOf3LK++A2lIat4OpYwyLw=
Subject key identifier:   54:F2:DA:F9:A9:1A:82:22:46:15:C3:3D:23:F1:F0:C7:15:E0:D7:99
Certificate issuer:       /CN=09e0adac59b7e340818728c50db0e80398835f20
Certificate serial:       10D075
Authority key identifier: AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/6bd7c64d35ce47a29df20147249cae0a2569da18.roa
Signing time:             Wed 03 May 2023 17:16:59 +0000
ROA not before:           Tue 02 May 2023 17:16:59 +0000
ROA not after:            Sat 03 May 2025 17:16:59 +0000
asID:                     269763
IP address blocks:        45.183.60.0/22 maxlen: 24
                          2803:3560::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101941 (0x10d075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e0adac59b7e340818728c50db0e80398835f20
        Validity
            Not Before: May  2 17:16:59 2023 GMT
            Not After : May  3 17:16:59 2025 GMT
        Subject: CN=6bd7c64d35ce47a29df20147249cae0a2569da18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:4d:11:20:0d:c9:af:01:d1:b4:c4:dc:0d:
                    6b:1a:9c:82:47:c6:ff:28:aa:e1:99:09:d0:b4:42:
                    b8:50:37:13:74:e9:9b:77:50:29:dc:9c:4c:79:0e:
                    2c:b4:6a:33:03:be:4f:3e:f5:9e:b1:0d:72:0a:1b:
                    8f:2d:32:81:22:64:b9:10:f5:a0:b8:77:ad:ac:27:
                    80:ca:15:26:50:7c:58:17:e8:f6:95:c0:97:3a:f1:
                    e0:07:bf:22:c8:f1:01:d3:e6:b1:15:48:7a:4d:18:
                    26:a7:4a:f7:1c:2c:c8:a3:da:88:21:66:88:ad:6e:
                    89:64:63:fe:73:6d:1d:43:df:21:1c:48:9b:87:1f:
                    e2:61:2a:eb:63:14:f1:4b:f7:35:e3:a8:bc:75:de:
                    1f:16:92:30:77:58:51:96:b4:7d:9b:67:b2:37:cf:
                    f9:d4:fc:3c:bf:e8:53:c4:2b:ed:de:f6:6a:39:fa:
                    36:76:e8:07:dd:d7:65:7d:5e:7c:b2:42:e5:5f:d0:
                    ca:d9:39:f0:9f:f6:ed:da:21:53:1f:ad:07:fe:0f:
                    64:75:84:71:13:ad:d6:9c:4c:97:03:90:65:23:b2:
                    99:7a:b3:32:13:ec:04:b7:6a:3e:21:02:33:2c:a1:
                    51:0c:79:a0:69:a6:96:4d:a5:c0:6a:ec:68:02:e3:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F2:DA:F9:A9:1A:82:22:46:15:C3:3D:23:F1:F0:C7:15:E0:D7:99
            X509v3 Authority Key Identifier:
                keyid:AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/6bd7c64d35ce47a29df20147249cae0a2569da18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/09e0adac59b7e340818728c50db0e80398835f20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.60.0/22
                IPv6:
                  2803:3560::/32

    Signature Algorithm: sha256WithRSAEncryption
         e1:02:58:5c:e0:18:7f:28:9b:5a:6f:1f:49:60:ce:66:78:8a:
         73:42:3d:1d:30:0b:2c:82:0e:2e:89:29:24:08:00:77:b1:8e:
         1c:f9:99:ee:b5:06:af:b5:63:3e:d8:20:8e:17:2b:7b:cb:1e:
         01:0e:ef:7b:36:ed:d5:20:e1:69:31:49:30:5e:ad:44:66:19:
         63:b7:a8:69:b2:70:66:10:10:b8:5d:45:73:df:32:52:85:d2:
         5b:5c:16:ec:23:94:d2:71:ce:fb:58:c0:8e:86:01:7f:13:f8:
         7d:6e:5a:b1:5b:c0:54:89:e6:d2:0b:8f:8d:05:f6:0f:3c:4f:
         8b:25:31:9e:f1:99:9e:1e:1c:52:88:eb:84:e4:ca:0d:97:9a:
         77:7d:3d:cb:49:60:2f:fd:10:26:5d:93:1c:22:4d:58:41:19:
         6d:e6:67:1e:90:b8:0e:23:df:98:ff:db:1d:3b:42:46:97:32:
         df:06:89:19:7f:da:30:3f:54:4a:d1:7d:ea:07:8b:1a:46:2d:
         4c:65:8e:e0:07:fb:0b:09:1d:cd:22:cf:ea:d1:5e:84:95:15:
         3b:2e:27:21:28:77:84:a7:06:3e:a1:c9:72:5e:93:57:74:da:
         f6:f3:be:a2:39:40:85:bc:1d:e7:95:b5:f5:88:47:b3:09:e4:
         ef:62:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----