Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/ab10f3be79f9f877a5e501ecf8d3d6cb4d2f81a7.roa
File:                     ab10f3be79f9f877a5e501ecf8d3d6cb4d2f81a7.roa (raw, json)
Hash identifier:          hEd4hYDgk/ZcXcSCk8bDcqrabwRtx7GXuqxod2UaKdM=
Subject key identifier:   83:9A:A4:43:C6:BC:7D:70:E2:BA:79:06:6D:4A:51:E9:3E:89:2A:30
Certificate issuer:       /CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c
Certificate serial:       12FEE4
Authority key identifier: 10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/ab10f3be79f9f877a5e501ecf8d3d6cb4d2f81a7.roa
Signing time:             Thu 29 Jun 2023 16:20:15 +0000
ROA not before:           Wed 28 Jun 2023 16:20:15 +0000
ROA not after:            Sun 29 Jun 2025 16:20:15 +0000
asID:                     267900
IP address blocks:        45.178.192.0/22 maxlen: 24
                          2803:9660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244900 (0x12fee4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c
        Validity
            Not Before: Jun 28 16:20:15 2023 GMT
            Not After : Jun 29 16:20:15 2025 GMT
        Subject: CN=ab10f3be79f9f877a5e501ecf8d3d6cb4d2f81a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:c3:04:32:88:ba:c8:ad:e4:09:00:16:8b:
                    fd:91:11:e6:57:d0:20:63:13:25:f4:4e:73:f9:f2:
                    f5:43:f0:10:a7:e4:b4:bc:b6:55:58:a3:4e:f9:f2:
                    7f:d1:03:75:65:db:c4:04:e8:68:e1:5b:7f:8d:af:
                    58:06:3d:95:d2:07:10:95:bf:65:23:36:a8:3e:95:
                    2e:5a:e1:ba:c1:7b:29:d0:82:1e:0c:0d:dc:a7:25:
                    31:5a:e7:60:a7:eb:c1:40:f6:cd:72:a1:6a:cf:c5:
                    d8:eb:43:74:2b:f7:06:9e:66:8f:a5:01:7f:5c:a8:
                    94:01:6d:db:7e:e9:fb:20:81:c2:f4:20:89:e1:27:
                    f5:7b:28:cb:ff:dd:3d:d0:3f:63:47:c2:1f:fe:ea:
                    0e:3a:35:6b:7a:fc:a9:cd:3a:bc:a5:8c:1a:0c:bc:
                    a4:c2:24:eb:b9:45:e4:96:4d:de:55:ff:19:15:7b:
                    5a:33:83:68:07:63:cb:35:06:64:33:80:bf:cb:a5:
                    c1:57:17:72:55:ae:44:82:c8:bc:e2:b2:69:df:5d:
                    f7:e5:a3:9f:7d:d2:6f:fe:94:4c:23:63:a0:c0:e8:
                    31:01:e8:7b:0b:f7:c2:fd:59:82:df:3e:06:9b:cc:
                    ca:0d:2c:97:52:04:f6:aa:b3:2a:46:e4:7a:ac:ca:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:A4:43:C6:BC:7D:70:E2:BA:79:06:6D:4A:51:E9:3E:89:2A:30
            X509v3 Authority Key Identifier:
                keyid:10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/ab10f3be79f9f877a5e501ecf8d3d6cb4d2f81a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.192.0/22
                IPv6:
                  2803:9660::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:f8:a5:4c:21:66:5b:c1:e9:af:1c:d5:9b:fd:5b:1b:58:
         87:70:b9:67:eb:f8:67:1d:b9:8f:82:9c:f3:33:9f:e9:36:54:
         6c:3a:36:e6:f9:33:55:d6:0a:0b:c4:4d:a1:23:04:5b:76:2a:
         aa:73:3a:10:f7:0f:ca:3e:8a:9e:1f:9c:78:63:d5:cb:87:0c:
         81:37:95:01:2c:4e:f8:95:92:f7:ab:91:21:a4:17:bd:45:64:
         33:e8:ff:ec:46:a2:c6:d2:e1:c4:90:28:95:e0:1d:cd:83:41:
         7b:53:1e:82:57:16:d2:7b:d4:bf:eb:f2:02:3c:85:d3:8f:ea:
         af:5c:d1:2a:1b:e2:0b:57:f9:40:40:20:de:a1:1b:3f:cb:8e:
         8b:d8:3c:b9:d5:f5:79:b6:d2:27:7f:61:b0:02:60:60:fd:8b:
         a5:9b:72:d0:67:f5:cc:d4:00:8a:5e:7d:8e:5f:53:0e:91:69:
         3e:86:a2:1b:be:c0:41:a3:0c:54:f7:e2:60:82:ff:22:4a:43:
         3c:63:c5:48:48:b9:43:86:ca:8d:ab:04:0a:da:03:5e:23:64:
         13:e1:ed:b6:06:5e:b2:01:c7:ec:31:6c:1f:3c:15:eb:c2:00:
         35:15:00:24:af:73:b3:0d:8c:08:3f:e7:77:7d:77:27:2a:fa:
         6d:4a:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----