Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/e40762c13b79143c24afc37cc0205bed695418c1.roa
File:                     e40762c13b79143c24afc37cc0205bed695418c1.roa (raw, json)
Hash identifier:          Z/5KXRLK2LyXuSsoNTzc9iUIQUw1IN/do6x8DuNybzA=
Subject key identifier:   58:17:71:9D:3C:41:B6:0A:7B:EF:D2:9E:0B:D9:FF:83:68:5C:4C:1C
Certificate issuer:       /CN=17ad69d5e226c4e4367e1ed072ec012708bb9a30
Certificate serial:       28966F
Authority key identifier: BE:88:64:55:24:A3:1B:F4:C0:9B:04:DC:B2:F5:52:75:A8:24:D8:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ad69d5e226c4e4367e1ed072ec012708bb9a30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/e40762c13b79143c24afc37cc0205bed695418c1.roa
Signing time:             Thu 28 Mar 2024 19:23:30 +0000
ROA not before:           Thu 28 Mar 2024 19:23:29 +0000
ROA not after:            Wed 28 Mar 2029 19:23:29 +0000
asID:                     264668
IP address blocks:        45.225.104.0/22 maxlen: 24
                          2803:aa20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659951 (0x28966f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ad69d5e226c4e4367e1ed072ec012708bb9a30
        Validity
            Not Before: Mar 28 19:23:29 2024 GMT
            Not After : Mar 28 19:23:29 2029 GMT
        Subject: CN=e40762c13b79143c24afc37cc0205bed695418c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:ba:5d:fb:83:d4:32:a0:5f:72:58:ad:c9:
                    40:71:80:33:ee:5f:58:02:0a:4d:0d:d3:35:9c:64:
                    64:13:3a:79:f8:c1:63:08:40:3f:28:c9:10:e1:3f:
                    76:3c:d2:3d:a5:c1:1e:39:d9:59:49:ad:51:5a:ac:
                    2b:d1:16:99:b1:c9:69:91:d5:29:da:64:ac:cf:68:
                    44:e5:9a:82:7c:2f:7d:34:bd:9b:52:8c:c4:a2:f5:
                    05:4e:c0:47:eb:7c:8e:89:1d:f5:17:bf:bf:40:ab:
                    14:82:ff:28:8a:ec:6a:86:68:1f:ae:37:74:09:07:
                    63:c1:1d:3c:d6:f5:55:d1:cd:3a:2b:3b:85:8c:90:
                    8f:b6:32:a3:8e:90:18:ef:1e:96:4c:66:58:df:6d:
                    c8:a3:2e:34:af:65:75:0b:be:13:0a:f6:94:0c:e1:
                    18:b4:9d:7c:e0:4c:54:e5:46:32:5b:5d:45:73:9d:
                    c0:a8:45:91:19:93:0e:fc:6f:b7:d4:81:c7:c7:01:
                    21:55:b0:09:88:7e:97:13:50:39:f7:1b:ca:ec:23:
                    93:fa:0a:64:57:18:b7:25:1b:a9:5d:56:a9:93:01:
                    23:61:91:dc:8f:b2:83:60:ab:60:e6:dc:87:0f:19:
                    64:b1:3d:e5:b1:33:8d:e4:8d:c6:72:2f:c0:22:f1:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:71:9D:3C:41:B6:0A:7B:EF:D2:9E:0B:D9:FF:83:68:5C:4C:1C
            X509v3 Authority Key Identifier:
                keyid:BE:88:64:55:24:A3:1B:F4:C0:9B:04:DC:B2:F5:52:75:A8:24:D8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ad69d5e226c4e4367e1ed072ec012708bb9a30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/e40762c13b79143c24afc37cc0205bed695418c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/17ad69d5e226c4e4367e1ed072ec012708bb9a30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22
                IPv6:
                  2803:aa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:11:73:e5:b5:1b:62:e8:d7:f8:e3:dd:e9:01:85:ed:e8:c7:
         b5:69:96:95:96:df:b0:8f:2f:59:d2:32:88:b1:b7:79:ac:dd:
         8a:fa:29:97:ea:e6:97:0e:0a:2a:62:57:c6:73:77:f3:92:e5:
         f9:d3:24:6a:5e:77:2b:a5:fc:d2:2f:52:2c:7c:d9:ea:e4:20:
         29:b8:b9:51:b2:2d:9a:bb:47:aa:21:64:ae:1f:f8:68:71:3a:
         98:4d:2b:62:7b:bd:41:6c:47:10:b7:d2:fd:23:9c:3c:7c:63:
         54:09:83:cf:6e:22:cc:90:18:a8:a1:d4:57:ca:1b:6d:62:ac:
         f4:91:a2:15:0f:24:13:e4:e8:9d:e3:5d:1f:92:ea:b2:07:59:
         50:1d:b3:64:93:f9:11:b2:0c:ac:90:df:dd:cc:c6:d2:7f:f8:
         fc:51:68:bf:88:36:c4:e5:9c:be:76:05:1e:30:07:82:ef:64:
         11:ca:f1:38:a8:19:86:d1:72:5f:ce:bf:2d:ed:cc:b2:21:b0:
         d6:25:a6:c7:23:ea:12:6d:c8:e8:e3:57:8d:f6:7e:bc:95:20:
         77:12:11:fa:7b:94:f3:9d:b6:56:8e:eb:58:1d:88:bc:db:07:
         13:0b:d3:93:db:7e:a3:a8:87:9b:b7:bf:04:d6:04:72:7d:06:
         ba:ca:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----