Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/b0411a3e79ad04b12e7c7d869bf713d4a2779410.roa
File:                     b0411a3e79ad04b12e7c7d869bf713d4a2779410.roa (raw, json)
Hash identifier:          wy9yVyERAjze1sNKU1dR+scAxyX6q4PH71EkSZimLK4=
Subject key identifier:   15:0E:19:C8:BE:18:A1:9F:8B:05:E5:01:A0:C4:07:40:07:05:6E:33
Certificate issuer:       /CN=0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9
Certificate serial:       070704
Authority key identifier: A4:8E:A9:62:07:0C:67:6D:11:85:5D:34:B3:93:96:C4:2D:5A:DC:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/b0411a3e79ad04b12e7c7d869bf713d4a2779410.roa
Signing time:             Wed 20 Sep 2023 13:17:27 +0000
ROA not before:           Tue 19 Sep 2023 13:17:27 +0000
ROA not after:            Sat 20 Sep 2025 13:17:27 +0000
asID:                     269766
IP address blocks:        45.182.80.0/22 maxlen: 24
                          2801:10:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460548 (0x70704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9
        Validity
            Not Before: Sep 19 13:17:27 2023 GMT
            Not After : Sep 20 13:17:27 2025 GMT
        Subject: CN=b0411a3e79ad04b12e7c7d869bf713d4a2779410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:7c:16:b2:e0:4f:c8:b6:bc:08:86:60:03:
                    47:66:9e:90:0a:92:72:a9:87:ab:77:38:f7:f2:68:
                    ae:3b:58:22:f3:80:ac:9f:34:ec:72:27:8d:7f:08:
                    51:8e:42:fa:91:0b:af:ec:0a:88:22:69:08:dc:27:
                    7c:de:42:2c:cf:e2:d2:fe:e3:e3:2f:54:f0:71:91:
                    b5:db:38:2e:05:d6:39:1c:a4:ff:5b:49:f3:61:b3:
                    5f:ea:52:26:73:33:85:59:fa:92:f2:18:e3:b5:40:
                    82:80:0d:c8:fe:b6:ad:fa:d3:45:e1:6f:94:66:87:
                    38:d4:57:3d:80:0b:ad:81:7d:cd:a3:64:44:5b:ed:
                    30:b3:b6:23:41:10:a3:42:f1:a3:5a:66:ab:9b:36:
                    08:05:4f:38:96:6a:70:cc:f9:14:a9:c3:81:96:a4:
                    25:ba:85:0b:be:8e:ec:91:61:1f:d9:c0:11:11:19:
                    53:b3:1a:8d:e9:85:37:0d:4a:e3:11:3b:11:95:33:
                    c7:e1:7e:a1:50:a6:b1:51:0d:db:fa:19:45:ad:1a:
                    38:bb:1b:c3:bc:b4:da:2e:9c:df:51:30:37:d1:62:
                    7d:27:8f:de:53:62:f2:cb:24:1d:64:c4:60:9e:95:
                    74:78:21:84:0a:e4:e1:1a:40:84:ea:b8:90:7f:e0:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:19:C8:BE:18:A1:9F:8B:05:E5:01:A0:C4:07:40:07:05:6E:33
            X509v3 Authority Key Identifier:
                keyid:A4:8E:A9:62:07:0C:67:6D:11:85:5D:34:B3:93:96:C4:2D:5A:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/b0411a3e79ad04b12e7c7d869bf713d4a2779410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.80.0/22
                IPv6:
                  2801:10:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:73:22:de:87:04:18:07:fc:9f:b4:c6:c8:b4:a6:0f:69:59:
         82:33:87:34:43:47:a4:1e:d4:22:cb:57:50:2c:af:5f:d4:85:
         7f:2b:03:b5:07:86:e3:c0:bd:c7:9b:3b:cd:1e:04:14:c5:6c:
         28:89:ec:ef:55:9e:4d:92:ce:aa:f3:61:1e:3f:6f:ff:31:13:
         5d:84:b9:8e:87:e2:89:fa:5c:f2:3a:da:1a:b3:f2:62:40:eb:
         ba:bd:f0:ca:c4:1e:53:b0:31:16:20:35:26:0a:3b:dd:11:38:
         fd:17:6d:90:00:6a:f2:3f:e0:1a:d4:4d:1d:08:55:50:31:cb:
         0b:d1:c5:23:38:96:f3:a4:56:6d:41:52:96:34:54:85:42:0a:
         42:eb:3f:93:d2:25:31:62:a7:60:2d:14:95:5c:e5:65:73:04:
         95:f5:00:97:65:be:42:3d:5a:88:d5:fb:b3:a3:4b:04:6c:eb:
         73:31:de:55:2c:42:99:d3:cb:fe:6e:32:fc:32:54:90:b2:6e:
         6e:de:6a:fa:98:84:b7:a3:bc:44:a9:77:c4:54:3d:91:d0:54:
         60:c8:d6:e2:cb:17:b9:93:3e:64:21:5c:7d:f0:31:6f:d1:39:
         a1:48:fe:a0:c7:98:f7:bb:25:81:02:2b:ba:ac:69:ef:b1:50:
         17:14:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----