Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa
File:                     d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa (raw, json)
Hash identifier:          w26Rk3hEairOE1X6vJWjcx/7nAUlFJS0lqeHrx+64MQ=
Subject key identifier:   47:A7:C7:E7:91:5F:9B:57:07:47:A9:A5:AB:DF:44:AD:5B:2F:B9:70
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       216445
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa
Signing time:             Tue 20 Jun 2023 12:44:13 +0000
ROA not before:           Mon 19 Jun 2023 12:44:12 +0000
ROA not after:            Fri 20 Jun 2025 12:44:12 +0000
asID:                     27951
IP address blocks:        45.225.225.0/24 maxlen: 24
                          2803:da20::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188357 (0x216445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Jun 19 12:44:12 2023 GMT
            Not After : Jun 20 12:44:12 2025 GMT
        Subject: CN=d4f92a37726120dfb6a4bfffaeb280b59e45befc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:ce:10:ff:b9:e8:f3:aa:0d:60:1c:7b:63:
                    76:96:3c:a4:3e:88:5b:eb:63:86:6e:03:58:6c:27:
                    28:54:7e:e0:94:09:a7:2b:a7:01:39:15:b7:03:27:
                    29:69:fa:bb:7c:d3:21:b9:49:a9:e8:c8:6f:e7:a1:
                    73:cf:fa:d3:3b:42:6d:50:9c:df:d9:7e:33:9c:a7:
                    9a:77:a6:85:05:36:8d:39:31:23:72:a1:9e:a5:73:
                    8f:ad:ff:d5:77:fd:98:be:42:5e:02:63:c4:f0:d1:
                    9e:bf:41:3f:fb:1a:07:35:f6:58:c3:5f:46:6c:b9:
                    04:ed:19:65:9b:1b:74:58:de:91:94:9b:43:ac:ea:
                    7e:bf:68:1f:f2:53:ce:0e:43:9a:c4:59:04:e6:f2:
                    11:88:fe:5c:e3:94:43:1e:3a:84:59:1e:2f:c9:77:
                    ba:37:79:4e:c1:1a:d9:53:5a:8a:84:8a:e6:36:2d:
                    93:03:37:ae:3f:fc:6a:83:ea:ab:ee:f4:41:e9:22:
                    1d:0e:ce:4c:f4:77:9e:e4:cd:93:28:ce:8d:d6:2a:
                    5b:79:72:88:19:aa:bd:d0:34:f4:ba:cb:ee:d9:c5:
                    a2:ca:f6:54:7e:41:ff:4d:c6:af:99:1c:81:f1:69:
                    4d:a5:8d:03:38:48:44:d4:78:20:d2:46:fb:ed:b2:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A7:C7:E7:91:5F:9B:57:07:47:A9:A5:AB:DF:44:AD:5B:2F:B9:70
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/d4f92a37726120dfb6a4bfffaeb280b59e45befc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.225.0/24
                IPv6:
                  2803:da20::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:47:6e:f1:0a:02:f1:b9:c3:04:f0:64:ee:58:86:36:0c:03:
         ed:5c:e4:15:66:d4:a9:17:da:71:a6:e6:6f:32:6b:9a:8e:cc:
         55:0e:29:41:3a:49:ec:c7:13:02:00:74:9b:71:be:e8:90:06:
         58:f8:3b:bb:6d:b1:22:86:8d:62:f8:9b:f6:75:a7:d5:e4:c8:
         26:70:1d:d0:6f:29:76:0c:b7:cd:3d:b5:e3:df:56:50:3b:4e:
         8e:22:b2:96:be:f3:fb:41:05:41:88:9c:49:0b:cb:99:69:82:
         92:f3:5a:9c:97:1a:8e:22:6d:6f:25:cd:44:a4:5c:e3:af:66:
         e7:46:aa:7c:24:23:35:51:9b:e0:65:f7:37:94:b1:5d:a5:a9:
         0a:a7:af:ed:de:71:ba:64:27:0f:a3:e0:12:98:f6:34:0e:c5:
         f3:af:d1:7c:e3:b9:ff:6c:b7:6f:95:a9:1a:b6:c8:2d:83:e2:
         20:fa:e1:3d:3b:35:92:0f:e7:5e:46:1c:e8:24:e3:73:45:27:
         e5:65:1d:16:96:26:94:4a:ad:a3:90:73:c4:3a:90:b1:dc:cb:
         9e:c7:d6:9e:7d:aa:75:cd:42:43:55:33:38:83:f9:50:25:47:
         62:1b:ad:0d:ba:c0:dd:47:36:04:ec:e0:5e:01:24:41:69:d7:
         34:fd:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----