Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/89a32eb7f0bfdb73e4eda60147d75031ca13ad74.roa
File:                     89a32eb7f0bfdb73e4eda60147d75031ca13ad74.roa (raw, json)
Hash identifier:          FnJQXJlVsiMXjHUzx0FKVh0OKtDBC48kANl6FLswewY=
Subject key identifier:   07:05:F3:61:96:F5:0A:2F:91:40:AD:B9:19:02:01:29:75:02:BF:54
Certificate issuer:       /CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Certificate serial:       118FB4
Authority key identifier: 12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/89a32eb7f0bfdb73e4eda60147d75031ca13ad74.roa
Signing time:             Wed 01 Nov 2023 07:30:00 +0000
ROA not before:           Wed 01 Nov 2023 07:30:00 +0000
ROA not after:            Fri 31 Oct 2025 07:30:00 +0000
asID:                     266738
IP address blocks:        45.229.151.0/24 maxlen: 24
                          2803:8b20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150900 (0x118fb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
        Validity
            Not Before: Nov  1 07:30:00 2023 GMT
            Not After : Oct 31 07:30:00 2025 GMT
        Subject: CN=89a32eb7f0bfdb73e4eda60147d75031ca13ad74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:fe:ed:af:99:04:7f:83:50:5d:87:6b:bb:
                    f9:08:f7:65:2b:4e:68:f7:a3:7b:f9:de:1a:9e:fa:
                    eb:1c:e1:45:e3:74:c7:45:08:ab:66:5a:a8:c4:3e:
                    ba:f6:d5:77:92:c6:ba:7b:77:3c:6d:7d:f9:8c:2d:
                    0a:de:d1:d4:04:05:0a:28:32:63:5c:01:95:a5:01:
                    ee:d9:ce:4b:b7:ff:d2:e8:2b:bb:8f:08:c7:64:59:
                    53:f7:35:3a:4d:a8:b8:5d:bc:f4:ef:ba:f6:8b:9e:
                    64:51:56:2e:3e:87:b3:d7:39:d2:6b:c9:b1:03:66:
                    28:e6:05:42:cd:73:ea:4f:f2:12:c8:74:29:9a:c7:
                    95:3f:51:6d:f3:10:50:1e:aa:8e:62:3f:a9:7c:bc:
                    b0:df:06:26:05:b9:9f:76:5e:d5:ce:85:99:74:a6:
                    97:c3:08:e1:25:6d:86:00:0f:d4:78:c6:71:3c:6a:
                    17:f1:87:ca:f9:0b:e8:d8:85:a8:d0:48:84:b0:2d:
                    e5:3d:ea:9a:f1:f6:1f:d0:b9:ff:95:24:e3:9f:9c:
                    6c:f4:8a:13:a4:b7:07:e2:a6:b4:e5:80:71:f1:a3:
                    fc:0c:39:18:70:62:a2:ce:d2:a4:7a:c0:74:d1:d5:
                    aa:e8:d0:10:af:20:b9:64:a8:6f:95:bc:c7:55:27:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:05:F3:61:96:F5:0A:2F:91:40:AD:B9:19:02:01:29:75:02:BF:54
            X509v3 Authority Key Identifier:
                keyid:12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/89a32eb7f0bfdb73e4eda60147d75031ca13ad74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.151.0/24
                IPv6:
                  2803:8b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:25:32:d8:82:86:5a:f0:3f:53:7d:d6:29:2f:41:d4:05:40:
         57:45:f1:87:1e:e1:5c:72:e7:32:19:e8:a7:17:52:4f:c3:5f:
         4d:8d:90:e9:b4:4b:b5:05:93:93:83:af:a0:e7:c0:e7:0b:d3:
         26:b3:36:ba:d2:c2:e5:ff:cf:97:16:79:85:a7:96:b6:43:4a:
         34:ed:7a:7f:a5:c6:cd:5a:f1:8f:f2:05:a3:07:2d:83:91:d0:
         d1:64:20:76:96:4b:03:1a:65:8c:f4:f1:ee:47:7a:f1:0f:b9:
         65:4e:a3:16:6d:4c:fe:5c:8c:13:9b:83:74:b4:9f:66:d8:18:
         80:17:17:64:a8:d5:47:cd:fa:20:23:ee:f9:5f:c3:be:2a:92:
         76:e0:2a:1f:a9:f9:6f:6b:8b:f6:09:b9:e6:aa:98:e5:89:9a:
         93:c9:8c:d3:a5:64:67:5d:82:45:bc:c8:f9:31:8b:e6:09:80:
         f3:a1:01:37:b7:01:49:90:e9:c4:fe:9b:90:3d:3d:79:88:f2:
         54:18:af:24:4e:2a:f4:d7:6c:ad:32:1a:4f:7a:08:e1:dc:5c:
         f5:7c:95:8e:2a:d2:e4:93:58:0d:3f:02:43:15:14:09:49:22:
         7c:cc:bc:98:e8:b9:1a:a3:44:f2:47:6e:d7:48:b3:3e:c6:c3:
         bb:72:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----