Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa
File:                     a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa (raw, json)
Hash identifier:          FD17YPY+H4prHVPGY7i458C+fLiT3Z1rrxT/MC/kjaw=
Subject key identifier:   D8:E0:A4:AD:25:3B:06:A9:13:B9:B8:AA:D4:74:28:29:CC:87:B1:73
Certificate issuer:       /CN=56e566f79450b7c73ae61f31355b7b7075b9d2b3
Certificate serial:       11BB80
Authority key identifier: 5F:C4:CC:1F:DD:C7:70:1B:1B:32:96:60:71:28:86:F8:7B:F9:CB:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e566f79450b7c73ae61f31355b7b7075b9d2b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa
Signing time:             Fri 05 Jan 2024 07:30:01 +0000
ROA not before:           Fri 05 Jan 2024 07:30:01 +0000
ROA not after:            Sun 04 Jan 2026 07:30:01 +0000
asID:                     269802
IP address blocks:        45.186.128.0/22 maxlen: 24
                          2803:2b60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162112 (0x11bb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e566f79450b7c73ae61f31355b7b7075b9d2b3
        Validity
            Not Before: Jan  5 07:30:01 2024 GMT
            Not After : Jan  4 07:30:01 2026 GMT
        Subject: CN=a82bcfa9fd08559a2b19bdebef8cb7813f5be826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:43:2d:25:ea:04:00:26:c3:23:46:e9:b0:
                    2f:1f:a5:10:43:3d:61:30:1d:2a:01:df:2e:84:f2:
                    c4:b9:3a:b0:2f:5b:a1:65:c7:cc:1a:91:c5:d2:ee:
                    bc:bd:75:7f:e0:a3:eb:1d:f5:63:b0:d5:f9:68:69:
                    49:c8:06:0b:c8:1c:2e:54:da:96:76:91:9e:83:48:
                    74:74:f5:9a:ac:81:04:75:8e:d9:99:03:4a:7d:b0:
                    f4:44:d7:26:65:cf:fa:f6:c4:e5:cd:11:5c:0b:ed:
                    b7:31:aa:69:48:85:3a:10:9b:49:25:33:1c:6d:37:
                    87:ec:40:22:0f:1d:cc:53:d1:64:df:be:44:d7:7a:
                    8b:40:34:9b:02:46:e8:a8:d2:92:24:28:00:1f:40:
                    17:a8:da:6b:32:15:11:78:0c:ae:c9:a1:27:ee:72:
                    68:64:db:85:0f:4a:4b:59:21:43:f9:fc:61:6c:e2:
                    be:ec:4b:b0:8d:a6:b9:7f:1a:a3:44:0d:20:68:ed:
                    da:77:e3:84:f7:97:b8:72:6b:16:dd:0f:3c:8b:83:
                    22:4d:1a:d0:7f:2a:42:f4:c7:d2:81:75:17:eb:fb:
                    65:2a:14:5a:07:c7:d4:0f:1a:c8:68:dd:a1:34:eb:
                    06:9f:64:4b:6e:99:22:f7:f6:36:59:11:76:34:c1:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E0:A4:AD:25:3B:06:A9:13:B9:B8:AA:D4:74:28:29:CC:87:B1:73
            X509v3 Authority Key Identifier:
                keyid:5F:C4:CC:1F:DD:C7:70:1B:1B:32:96:60:71:28:86:F8:7B:F9:CB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e566f79450b7c73ae61f31355b7b7075b9d2b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/a82bcfa9fd08559a2b19bdebef8cb7813f5be826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/56e566f79450b7c73ae61f31355b7b7075b9d2b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.128.0/22
                IPv6:
                  2803:2b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:5d:4a:f3:d9:a8:b2:8b:6e:ca:e0:99:71:d0:0b:e0:fc:
         96:9e:43:7e:0b:f2:78:52:4b:75:9f:7b:0a:44:5e:68:f4:46:
         e0:c9:65:0e:39:fa:46:3b:37:b7:14:97:7a:8d:31:57:04:17:
         9d:28:41:19:74:1a:41:89:bc:88:0f:1e:3a:74:a5:25:ce:c2:
         d4:0e:4b:61:4a:f5:a2:90:e2:01:fc:de:ea:54:aa:7a:94:07:
         48:7a:16:68:0a:42:9d:7b:1b:40:5a:f0:8f:90:27:22:9e:3c:
         3c:79:b9:13:d8:19:c7:35:41:dd:c4:b0:57:ee:e3:54:32:86:
         14:38:2c:a2:88:ac:af:15:fb:14:b5:e7:da:58:4f:25:21:ba:
         51:2e:cf:d8:48:a2:4b:65:57:41:94:54:f5:41:f4:5f:6c:04:
         fc:0c:c9:f7:96:cc:49:c9:85:14:ba:9a:90:af:d2:c9:b2:e7:
         d2:26:9e:17:f5:e5:38:9d:96:08:e4:34:23:cc:12:9d:6e:e6:
         f4:b4:60:60:fa:80:66:b8:74:7e:f3:eb:93:98:06:16:c3:72:
         3d:17:bc:20:ec:d3:d1:51:c6:f3:2e:50:ba:33:5e:ec:5e:b2:
         51:ea:b1:e1:5e:f4:72:86:46:b7:ce:5d:f5:39:8c:fc:d1:67:
         4f:3b:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----