Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/b5b5bd5769e021a57c0d4e78319b5431368bffd4.roa
File:                     b5b5bd5769e021a57c0d4e78319b5431368bffd4.roa (raw, json)
Hash identifier:          UGG6JYKgQOEvToFxvTChuB8imBJZaKlMWFzaf6Mpuew=
Subject key identifier:   92:B8:00:03:C2:43:A5:4C:6A:7E:E5:24:96:D5:66:9B:73:91:2D:64
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       2161D3
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/b5b5bd5769e021a57c0d4e78319b5431368bffd4.roa
Signing time:             Tue 20 Jun 2023 12:44:12 +0000
ROA not before:           Mon 19 Jun 2023 12:44:12 +0000
ROA not after:            Fri 20 Jun 2025 12:44:12 +0000
asID:                     265855
IP address blocks:        45.225.224.0/22 maxlen: 24
                          2803:da20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187731 (0x2161d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Jun 19 12:44:12 2023 GMT
            Not After : Jun 20 12:44:12 2025 GMT
        Subject: CN=b5b5bd5769e021a57c0d4e78319b5431368bffd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:17:98:11:9b:65:b0:24:c4:91:b6:bc:d2:
                    c6:9d:2d:e1:e3:f5:64:8c:82:aa:b6:02:b6:6f:59:
                    e5:fc:c3:0f:07:a4:b6:c0:c0:c8:a7:49:d8:cf:3c:
                    55:33:5a:3d:cd:23:15:6d:fd:62:ed:9e:d4:91:de:
                    bb:16:cd:82:70:fe:ec:c9:42:98:a6:68:44:e1:c5:
                    f1:2f:f4:62:34:c6:4d:65:dd:4d:7b:f9:c7:22:c0:
                    e9:c6:2c:5c:52:e9:7e:2c:43:e8:4a:8f:2a:87:be:
                    e4:02:1f:ae:db:04:a1:d3:db:f5:0e:bd:60:e2:cd:
                    2e:22:8b:e6:02:80:9a:a4:4c:40:c0:44:30:44:62:
                    f5:1f:d5:94:bb:f4:96:bd:21:c2:f9:44:06:93:ce:
                    59:37:ba:6d:5b:64:30:7b:d1:02:fb:70:68:72:f7:
                    58:cc:04:94:39:89:f5:49:42:1a:94:05:e6:f6:0e:
                    df:29:1b:35:23:53:99:94:16:e0:3b:64:1c:ea:c3:
                    92:31:4a:ce:b9:7a:fd:5c:b0:bc:20:a2:1c:df:d6:
                    2e:7b:65:f7:b0:c0:ff:45:ca:f9:d2:5a:4e:5b:07:
                    fd:a0:ad:8d:7f:81:b1:ca:2b:e3:e9:ac:fd:d6:95:
                    f9:36:6f:50:bf:d8:cb:b6:ca:5f:27:93:95:e6:d7:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:00:03:C2:43:A5:4C:6A:7E:E5:24:96:D5:66:9B:73:91:2D:64
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/b5b5bd5769e021a57c0d4e78319b5431368bffd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.224.0/22
                IPv6:
                  2803:da20::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:aa:14:1c:40:cc:ca:1e:b0:0a:89:c2:4b:60:3c:dd:c1:
         5c:84:72:98:33:3f:9b:8d:57:ce:59:d6:3e:97:71:d2:e1:c6:
         2f:25:e5:ae:12:50:de:6d:52:cf:87:87:c2:b3:54:1b:c7:e1:
         ae:d9:fb:ab:7b:33:a0:cf:d3:23:87:8f:61:d4:f4:02:54:0c:
         cc:22:5b:92:ff:fd:63:64:fe:6f:4c:d2:5c:17:4d:57:de:d4:
         db:8f:32:83:e1:2a:c1:b4:34:a9:7c:7c:46:8e:18:e4:2c:43:
         bc:70:40:48:a0:bf:6d:a0:57:8e:ef:c8:cb:ee:25:7b:e8:98:
         80:bd:11:e7:62:ec:24:ef:08:4f:78:96:3f:54:41:3e:8d:47:
         0f:b2:62:d4:b0:88:fe:c5:b7:c2:5a:8c:d2:3a:2d:cd:b5:1e:
         5c:54:84:32:69:12:b2:3e:d4:7f:5a:3a:9c:37:ed:96:b4:3e:
         87:5a:84:79:30:15:a0:0f:11:32:aa:c9:f5:a8:e6:df:9f:d7:
         e5:91:25:7b:28:1f:1a:22:8e:c6:27:22:e5:6e:b2:0a:8a:d7:
         46:70:f1:9a:94:79:91:66:6c:04:a9:08:16:fc:42:3f:dd:3d:
         eb:e4:ad:24:d7:39:20:46:7a:06:d6:60:ff:04:3e:b8:66:43:
         af:8c:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----