Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/274294a2cb40fdeb7f8fc69549dc2b5bbd1d0ca9.roa
File:                     274294a2cb40fdeb7f8fc69549dc2b5bbd1d0ca9.roa (raw, json)
Hash identifier:          rpM2vQVd5YP0+HuU+zBu47PHEc/XMIlA0AMD/1xLkq4=
Subject key identifier:   98:BD:A9:3D:B6:40:DB:DB:64:5E:C3:22:1E:90:14:0D:08:83:AA:D3
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       24ED4E
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/274294a2cb40fdeb7f8fc69549dc2b5bbd1d0ca9.roa
Signing time:             Wed 04 Oct 2023 13:29:59 +0000
ROA not before:           Tue 03 Oct 2023 13:29:59 +0000
ROA not after:            Sat 04 Oct 2025 14:29:59 +0000
asID:                     265819
IP address blocks:        45.6.8.0/22 maxlen: 24
                          2803:a9c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420046 (0x24ed4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Oct  3 13:29:59 2023 GMT
            Not After : Oct  4 14:29:59 2025 GMT
        Subject: CN=274294a2cb40fdeb7f8fc69549dc2b5bbd1d0ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:5f:a0:1a:0b:0a:6f:75:d4:55:ca:f2:79:
                    66:3f:f2:51:59:1e:4b:70:2e:ea:9e:29:72:b6:ca:
                    87:3f:5e:86:5a:47:5b:1a:cd:d9:f1:45:28:61:57:
                    13:1c:59:06:5e:39:1d:1d:ca:6a:db:e0:84:f9:12:
                    49:94:5c:98:93:62:0d:3c:a7:d9:92:ea:3a:08:70:
                    09:6a:e9:73:00:ec:7b:15:1e:45:be:52:c7:e7:f3:
                    80:ac:3f:b2:d2:ef:7c:42:aa:65:14:c0:6f:d9:3a:
                    b8:a1:9a:a7:1b:7d:2f:b8:fe:50:f1:0b:1d:8e:f7:
                    f6:86:13:4e:60:55:ba:e0:04:8f:de:56:f0:b1:47:
                    af:8a:2e:a2:93:18:9d:d8:d1:06:59:74:b3:ca:0d:
                    6a:2e:e7:7b:f3:83:66:dd:8e:0f:5f:0f:ac:cf:e6:
                    c7:2e:3c:c8:87:92:ec:82:b6:a4:10:af:e3:b6:36:
                    fd:be:05:15:6d:56:81:94:eb:a9:24:4e:39:0e:4b:
                    a1:1b:01:5e:d3:56:b0:4b:2b:e1:f9:3b:04:34:4b:
                    79:03:31:4c:2a:17:86:1e:b9:8d:a4:74:13:c7:ca:
                    5c:f9:6b:9f:e9:f6:97:ab:17:d8:ce:8a:59:ea:55:
                    bf:9e:b2:32:fe:7a:20:02:54:04:17:34:27:59:36:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:A9:3D:B6:40:DB:DB:64:5E:C3:22:1E:90:14:0D:08:83:AA:D3
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/274294a2cb40fdeb7f8fc69549dc2b5bbd1d0ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/22
                IPv6:
                  2803:a9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:9b:b4:d1:29:1e:40:49:e4:3e:23:f2:dd:ba:af:b1:3f:
         11:49:66:c5:bd:53:d9:d5:01:8d:72:2f:4c:a9:7f:09:5f:68:
         8e:7b:88:ec:75:79:a0:48:50:21:b5:4f:a3:a0:94:60:6a:a3:
         07:c4:cf:f2:87:48:31:6a:22:d6:c3:9e:e3:c2:2f:0a:ad:01:
         e7:e0:eb:20:11:44:3e:b8:2b:22:a4:83:b4:ed:4b:84:e4:e0:
         07:d5:f4:dc:7b:99:cd:78:f3:92:dd:b1:a7:91:93:d7:18:49:
         14:41:f0:ba:b0:c6:2d:ab:b0:9b:f6:6e:ca:89:0a:40:dd:29:
         5c:02:e9:c4:b9:6c:67:c4:81:b3:4f:b6:ac:cf:64:5a:7f:db:
         fd:46:20:1e:ad:9c:6e:ee:f9:3a:36:e4:a1:5e:60:34:8e:4c:
         ac:41:e2:5c:34:27:d2:01:0d:ae:cd:f4:1e:ca:b6:f7:ec:76:
         d7:0c:36:26:0b:35:ab:bb:b6:0f:c7:f6:73:6d:14:b4:dd:dc:
         0c:bc:70:8b:aa:f9:ca:be:dd:35:df:b2:11:87:65:4d:9e:6d:
         dc:97:5a:b7:9c:f8:97:7d:2f:26:42:ba:da:67:f3:9b:fb:c9:
         32:ac:43:2f:43:1d:f7:e8:4d:e1:ee:ae:65:d0:07:2e:fe:06:
         fa:63:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----