Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa
File:                     c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa (raw, json)
Hash identifier:          rbk+b+AXU/Kj3nrg4blSgdwdEszBWdAfZ9mPSYopbO0=
Subject key identifier:   07:C2:9A:AE:A4:D5:1C:21:50:2A:94:86:A3:A4:64:20:71:EF:5A:FF
Certificate issuer:       /CN=349196e5906873d34fd0c8ce899971e00093557a
Certificate serial:       12A670
Authority key identifier: 91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa
Signing time:             Fri 27 Oct 2023 07:30:00 +0000
ROA not before:           Fri 27 Oct 2023 07:30:00 +0000
ROA not after:            Sun 26 Oct 2025 07:30:00 +0000
asID:                     265702
IP address blocks:        45.5.148.0/22 maxlen: 24
                          2803:99c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222256 (0x12a670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349196e5906873d34fd0c8ce899971e00093557a
        Validity
            Not Before: Oct 27 07:30:00 2023 GMT
            Not After : Oct 26 07:30:00 2025 GMT
        Subject: CN=c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:17:15:d5:44:10:f4:e5:ff:17:6b:de:0b:
                    3b:10:3c:7f:a2:e0:31:9e:8a:1f:45:d6:9f:48:43:
                    49:b4:e7:80:e5:f6:9b:2b:61:37:1c:55:ec:0b:d0:
                    ec:4b:41:8b:15:b9:f4:88:00:70:b0:19:19:3b:fb:
                    07:6b:da:8b:36:94:4a:ed:36:39:dc:b1:05:6d:93:
                    7c:c5:74:6f:8f:fd:19:a0:8b:19:ff:48:6c:75:6a:
                    d8:c0:c0:25:6b:b0:47:3d:aa:b1:39:ca:d7:b8:08:
                    22:97:e6:c8:8e:7d:c4:e6:6a:87:17:9e:63:2e:79:
                    ad:4b:d4:70:20:7d:0f:82:0d:da:40:87:74:b8:5a:
                    ef:25:d9:c7:e6:71:c6:1f:86:90:24:de:ea:c5:a9:
                    9a:d5:3c:13:06:5d:6b:e1:d9:fd:b1:c7:72:e8:94:
                    f5:2f:85:22:b9:ad:f4:1c:21:2a:45:c2:00:58:d1:
                    a9:78:8a:5e:37:ff:17:92:0a:43:5f:f1:f1:cf:02:
                    c1:c2:65:5d:a5:1b:09:09:59:e8:ce:f1:73:c1:c5:
                    30:dd:45:49:a6:08:45:81:53:da:e1:1c:8c:8d:9f:
                    3d:3e:6d:7a:96:4f:4e:fb:af:8a:d4:2a:cd:88:c9:
                    02:2d:42:5c:78:38:1c:f3:55:47:4e:59:d9:0f:86:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C2:9A:AE:A4:D5:1C:21:50:2A:94:86:A3:A4:64:20:71:EF:5A:FF
            X509v3 Authority Key Identifier:
                keyid:91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.148.0/22
                IPv6:
                  2803:99c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:b0:9a:0c:14:41:63:02:b5:b3:66:0e:92:84:f6:1f:7a:
         c8:e8:6b:65:fd:d7:5b:3b:9b:67:ad:4f:9e:8a:47:9a:55:8e:
         07:25:29:27:c9:60:46:bb:2e:aa:c0:97:c6:59:9a:9a:95:d8:
         1a:f7:8e:c6:5e:5b:38:5c:3b:94:f0:2b:36:6b:a5:a7:f1:f1:
         04:6b:f7:40:42:08:ac:aa:19:69:96:be:19:16:db:c1:53:04:
         c5:8c:67:f5:33:be:4d:02:00:10:b0:74:e2:a8:0c:41:46:2a:
         41:40:e1:bb:d7:41:23:55:37:d9:63:55:fd:88:0b:41:5b:8e:
         e3:bd:03:4f:3d:8b:fb:67:cc:39:cf:db:12:9c:77:e0:cd:9e:
         74:69:73:a8:21:2b:96:70:bb:ab:92:45:3f:60:f1:28:d2:9e:
         59:06:3e:94:1c:20:14:89:4b:f8:07:5e:22:70:2e:d9:e4:3e:
         85:b9:69:77:a1:31:ff:45:6b:28:72:12:42:a8:d1:cd:6b:6a:
         ac:5d:5b:11:44:12:d9:59:53:59:ac:a3:03:f6:13:b5:10:41:
         75:00:2e:d2:12:1f:bb:70:25:48:ec:24:3c:8c:8f:9e:a2:b6:
         62:13:a1:62:7d:86:21:08:da:e7:5b:df:12:14:03:00:60:07:
         3b:1e:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----