Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/e0f39e5b65dfb5351970d8bf150a2748eb9238e3.roa
File:                     e0f39e5b65dfb5351970d8bf150a2748eb9238e3.roa (raw, json)
Hash identifier:          ZraWsgswJCSVRSc3oQUbILuJwcr/2s+Fc6pxfaq9/Sc=
Subject key identifier:   BA:EF:8C:46:2A:3C:55:AD:6A:C1:55:3E:1B:50:79:95:B8:CF:00:4A
Certificate issuer:       /CN=10652e563f43bd248018a74ceab6e843345f20ce
Certificate serial:       20CC6B
Authority key identifier: 15:A7:E3:8C:B7:03:85:C1:A4:2E:F3:16:CD:13:25:41:3E:15:17:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10652e563f43bd248018a74ceab6e843345f20ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/e0f39e5b65dfb5351970d8bf150a2748eb9238e3.roa
Signing time:             Sun 14 May 2023 15:33:32 +0000
ROA not before:           Sat 13 May 2023 15:33:32 +0000
ROA not after:            Wed 14 May 2025 15:33:32 +0000
asID:                     265721
IP address blocks:        45.65.244.0/22 maxlen: 24
                          200.58.240.0/21 maxlen: 24
                          2803:4dc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149483 (0x20cc6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10652e563f43bd248018a74ceab6e843345f20ce
        Validity
            Not Before: May 13 15:33:32 2023 GMT
            Not After : May 14 15:33:32 2025 GMT
        Subject: CN=e0f39e5b65dfb5351970d8bf150a2748eb9238e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:c8:27:fc:89:06:f7:35:71:e2:80:f3:fa:
                    a7:20:54:6f:d6:a2:b1:b4:d9:46:33:90:ca:1b:00:
                    d1:25:a3:98:fd:c3:7d:b9:27:78:c8:71:35:96:69:
                    b4:73:05:fb:c4:f1:c9:31:7a:34:c6:e0:73:7c:b1:
                    a7:6f:a0:01:46:ed:bf:7a:fc:62:9c:8b:fc:4c:c0:
                    84:47:61:8f:06:61:0e:65:de:de:ba:f0:8c:ce:08:
                    5a:1a:cb:8c:5e:3e:11:d2:c4:f5:ee:69:f2:ad:49:
                    f7:09:d4:51:bd:0a:95:18:b8:a6:a3:1a:76:81:5e:
                    99:6d:24:74:03:8d:57:1f:5e:42:93:8d:81:9c:21:
                    a8:da:ff:5b:2c:c1:52:1e:a7:51:83:ff:63:2c:0b:
                    35:e1:82:36:40:e1:f1:1c:6b:3f:05:fe:58:f1:bf:
                    68:a3:01:13:b2:31:7a:22:a8:e6:3f:45:20:db:c3:
                    25:ac:66:f7:8f:97:6a:03:2b:79:ac:34:11:91:e3:
                    23:59:c5:43:8e:14:f9:2f:a2:57:34:76:f2:0c:86:
                    e7:0f:76:16:6d:c5:d7:8b:95:55:12:53:12:5c:fa:
                    12:39:43:93:bd:c8:94:4f:0f:f4:a9:6d:6d:72:63:
                    a6:03:bd:34:13:f3:a9:83:d7:0d:2d:3b:b7:30:07:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:8C:46:2A:3C:55:AD:6A:C1:55:3E:1B:50:79:95:B8:CF:00:4A
            X509v3 Authority Key Identifier:
                keyid:15:A7:E3:8C:B7:03:85:C1:A4:2E:F3:16:CD:13:25:41:3E:15:17:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10652e563f43bd248018a74ceab6e843345f20ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/e0f39e5b65dfb5351970d8bf150a2748eb9238e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6371f53-82fc-4154-80c1-f8013aa1342c/10652e563f43bd248018a74ceab6e843345f20ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.244.0/22
                  200.58.240.0/21
                IPv6:
                  2803:4dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:ad:89:17:42:71:b6:d6:ae:7f:20:80:7e:56:f2:77:f5:
         0f:e4:1a:c4:91:a6:c3:56:94:06:f3:da:f9:ad:83:6e:b0:5d:
         84:d2:7a:79:76:06:f5:ed:51:d7:4b:c5:a1:e7:3c:2f:a9:09:
         4d:9c:f1:a4:d5:67:22:d6:20:8c:1a:11:19:b3:25:8a:7b:cd:
         2d:7e:f5:5a:0c:27:82:f4:04:e7:17:3c:24:13:e6:9e:ff:35:
         e6:42:ca:07:7d:9d:bb:c5:08:32:d6:2f:1f:ca:37:19:29:9e:
         68:41:88:fc:d8:df:2f:5c:bf:43:24:27:cf:aa:9a:5c:0c:02:
         4e:41:fa:e6:62:0b:55:5c:9e:33:21:ec:1c:6a:34:e1:23:61:
         42:22:60:3f:f4:5c:2b:f0:66:b0:1f:55:1a:b9:1c:9c:ab:96:
         84:b5:79:b5:c7:21:4d:d7:71:b0:fc:59:c8:14:66:39:8c:b3:
         b5:2f:a4:59:38:bf:72:db:e6:c5:86:6b:da:45:cc:b8:a1:fa:
         7d:a2:73:da:9b:54:12:bb:e8:3d:f8:44:ae:87:50:fa:2f:64:
         d7:0d:e3:cc:a7:66:4b:24:bf:0a:55:fb:f3:ae:0a:d7:22:35:
         90:a3:6b:03:30:29:4a:f5:17:8e:cf:6c:b8:cf:7d:4f:72:f8:
         1f:81:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----