Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a521de9910d0afde552b045ba12af4f735e1f433.roa
File:                     a521de9910d0afde552b045ba12af4f735e1f433.roa (raw, json)
Hash identifier:          FVc1zG4o23BtcVT6C4k8+KftHSHNQoYMQ42ROM0JMBk=
Subject key identifier:   E2:87:DF:BB:C7:EE:35:C7:ED:71:A6:14:7E:6D:4B:D2:DB:9C:39:85
Certificate issuer:       /CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
Certificate serial:       109F23
Authority key identifier: 95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a521de9910d0afde552b045ba12af4f735e1f433.roa
Signing time:             Mon 17 Jul 2023 20:49:27 +0000
ROA not before:           Sun 16 Jul 2023 20:49:27 +0000
ROA not after:            Thu 17 Jul 2025 20:49:27 +0000
asID:                     267700
IP address blocks:        45.164.12.0/22 maxlen: 24
                          2803:d1a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089315 (0x109f23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
        Validity
            Not Before: Jul 16 20:49:27 2023 GMT
            Not After : Jul 17 20:49:27 2025 GMT
        Subject: CN=a521de9910d0afde552b045ba12af4f735e1f433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:33:49:98:08:ee:c1:bd:bb:b7:a3:9f:27:
                    69:bb:ce:66:7b:ee:dd:f3:de:04:8b:76:21:a8:91:
                    5b:2d:5a:13:eb:09:83:01:48:55:80:ca:12:bd:1d:
                    59:bf:ba:84:66:70:6c:86:cb:1b:55:cd:2c:1e:e3:
                    5a:22:fa:01:d5:55:b7:b7:73:3d:51:c8:54:54:13:
                    88:1a:d8:29:1e:f6:c5:97:ff:8b:65:c4:df:fd:16:
                    bd:08:f7:21:49:59:22:55:89:4e:67:64:0b:80:9d:
                    dc:62:52:e3:5e:d8:de:a8:da:8f:a7:eb:c4:8e:47:
                    d7:54:f2:84:af:55:44:e5:1e:42:e4:ec:6f:33:89:
                    fc:af:57:b7:19:d2:2e:5a:7c:54:df:54:79:56:67:
                    c0:f3:5c:fc:e9:e3:c8:7c:7b:9f:8b:eb:ff:5c:87:
                    6e:5e:16:e9:52:ce:12:cb:66:12:58:f1:4a:ac:c6:
                    9d:12:d0:ab:a0:78:a3:3c:98:09:15:8d:a8:40:f0:
                    ff:d8:1b:4f:55:26:c5:70:a2:04:6f:ea:05:19:f6:
                    ca:b4:d6:c9:3b:ed:72:b3:03:fc:f3:41:36:c0:fc:
                    ac:63:74:c4:9d:5d:71:fb:b6:7d:e8:09:75:a2:0b:
                    8e:74:c4:ce:2c:c1:9a:a5:2f:d8:9a:f0:cf:79:b3:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:DF:BB:C7:EE:35:C7:ED:71:A6:14:7E:6D:4B:D2:DB:9C:39:85
            X509v3 Authority Key Identifier:
                keyid:95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a521de9910d0afde552b045ba12af4f735e1f433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.12.0/22
                IPv6:
                  2803:d1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:b5:48:56:ed:10:ee:9d:45:71:25:bc:63:36:12:7a:1b:
         84:13:d5:22:ec:86:85:3b:f8:89:87:a1:74:73:2d:10:24:5e:
         23:c8:ef:fa:38:22:27:ed:91:f9:9a:f6:28:69:58:58:3c:4c:
         8e:8f:74:db:33:83:de:a3:2c:f2:df:98:d4:69:eb:99:bd:90:
         9c:45:12:29:09:3e:59:07:55:14:7b:5b:76:b4:6c:b5:74:8f:
         03:50:85:ec:0a:44:d4:ea:9f:4b:0e:28:55:5b:92:b1:b5:dd:
         dd:ba:af:9e:a5:4a:d1:61:95:06:39:fc:34:14:07:cb:d2:87:
         6f:1c:3b:83:bc:6d:f6:a6:94:0f:77:02:e0:bd:15:20:8d:94:
         c7:87:00:60:db:75:e9:ef:06:82:3c:9a:fa:bf:9f:01:2e:3d:
         7e:33:a3:d9:fd:a8:c1:51:4c:f1:9e:c3:8f:79:0c:1c:01:87:
         ca:d2:b6:34:ab:9b:9c:de:2e:c2:91:54:bc:4f:f3:fb:51:91:
         dd:07:e7:a3:5e:21:cb:ec:91:d2:80:f1:d5:14:4b:48:c8:48:
         85:7c:30:4a:66:14:3e:3c:60:1d:e0:29:b8:82:f7:da:6d:6e:
         ac:85:e7:98:64:ab:45:76:8c:98:0e:84:6f:0b:4a:80:f8:f6:
         78:69:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----