Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/ee8caa5750c8188e9548293a51ce7dd4c04439db.roa
File:                     ee8caa5750c8188e9548293a51ce7dd4c04439db.roa (raw, json)
Hash identifier:          icYQe4NIyhzXg200aWeu5o0W5KC8Cuod449bs9wHU4s=
Subject key identifier:   48:16:8B:17:5A:C0:E9:37:7D:71:78:DB:BC:41:78:21:5A:1D:F7:4B
Certificate issuer:       /CN=d68573fe0b2d5e63c16744588b911ccf8b80b873
Certificate serial:       06FB22
Authority key identifier: C3:09:E3:B0:1F:3F:30:04:7E:68:BD:41:1E:20:7E:14:45:3F:0E:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d68573fe0b2d5e63c16744588b911ccf8b80b873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/ee8caa5750c8188e9548293a51ce7dd4c04439db.roa
Signing time:             Tue 09 May 2023 14:17:28 +0000
ROA not before:           Mon 08 May 2023 14:17:28 +0000
ROA not after:            Fri 09 May 2025 14:17:28 +0000
asID:                     263689
IP address blocks:        45.231.104.0/22 maxlen: 24
                          2803:d320::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457506 (0x6fb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d68573fe0b2d5e63c16744588b911ccf8b80b873
        Validity
            Not Before: May  8 14:17:28 2023 GMT
            Not After : May  9 14:17:28 2025 GMT
        Subject: CN=ee8caa5750c8188e9548293a51ce7dd4c04439db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:ee:01:87:3a:7b:a6:8f:d1:fa:4f:38:57:
                    0f:49:b1:f1:ce:a1:35:82:a9:c8:c6:a0:20:87:f9:
                    ac:bc:e3:af:ed:65:3d:97:2f:98:d1:1d:53:a9:4e:
                    74:f9:d8:83:60:18:e3:70:7d:02:c6:94:d7:c1:29:
                    ee:e1:27:58:d6:6b:a7:35:a4:86:a0:74:18:49:aa:
                    a3:ea:9a:8d:9b:83:0d:a0:aa:d7:2d:74:5b:0f:65:
                    ea:63:f5:52:c4:16:bd:5d:b1:fa:48:3c:26:6a:80:
                    6d:65:36:dd:aa:e6:9c:d9:fe:ac:06:bf:ad:3f:f5:
                    d0:c0:d4:b9:60:db:28:26:12:69:c5:ed:63:a2:59:
                    1c:09:2d:f5:f3:3c:32:43:6b:0e:a2:22:eb:5a:11:
                    4e:19:26:a0:5d:c5:10:2d:c3:82:07:8b:16:95:e8:
                    69:76:29:4f:6d:f7:60:0b:52:35:83:74:af:92:8d:
                    6f:9c:54:b5:d9:12:35:3a:25:9b:5d:c9:bb:c2:48:
                    45:38:bc:ae:1c:88:7d:64:dc:5a:3a:30:1d:23:02:
                    97:b7:d9:fe:16:10:24:3c:b0:a8:97:41:76:d6:80:
                    db:75:29:00:10:fa:4b:58:94:44:fc:15:f3:90:bd:
                    b9:bf:91:f5:96:8f:7c:01:1f:19:41:65:58:94:ac:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:16:8B:17:5A:C0:E9:37:7D:71:78:DB:BC:41:78:21:5A:1D:F7:4B
            X509v3 Authority Key Identifier:
                keyid:C3:09:E3:B0:1F:3F:30:04:7E:68:BD:41:1E:20:7E:14:45:3F:0E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d68573fe0b2d5e63c16744588b911ccf8b80b873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/ee8caa5750c8188e9548293a51ce7dd4c04439db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7603654-49a3-4ef7-9c50-8fc229c16339/d68573fe0b2d5e63c16744588b911ccf8b80b873.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.104.0/22
                IPv6:
                  2803:d320::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:ce:ab:93:f4:b5:0c:07:73:eb:4f:1b:3e:bf:d0:4a:38:
         6d:ed:05:99:b0:ce:a5:f4:50:0d:f9:23:0b:a8:e7:a4:c0:63:
         96:cb:fa:a9:56:88:e1:95:be:cf:e5:62:96:b9:cd:c0:d5:fe:
         7f:7c:50:4b:5b:7d:db:89:ad:95:98:a7:51:2e:a9:ad:fe:2a:
         37:16:3a:f6:33:69:2f:e4:20:a4:7e:71:56:7c:f2:d4:3c:e3:
         f4:e0:94:fb:b8:1e:2e:91:df:57:70:da:d7:f5:9a:0f:a4:34:
         1e:49:24:6b:12:b0:19:ce:a3:49:a8:0d:82:0c:bb:08:39:57:
         4d:37:ae:cb:fc:bf:be:cb:85:af:60:91:e6:89:f4:49:f8:dc:
         1d:7c:99:35:c8:82:94:56:92:b6:4d:dc:5a:15:49:96:eb:44:
         07:54:a7:94:b0:cb:f4:66:73:9f:40:e4:03:0e:84:0f:91:03:
         7a:94:9b:27:83:11:f5:01:8a:9a:79:0e:fc:27:20:7b:4d:ae:
         f5:a8:e7:dc:41:20:e1:be:c7:fc:0e:50:be:3a:ee:91:b8:a5:
         0f:fc:5a:ec:dc:69:57:19:d1:d6:fa:91:1d:90:c2:32:87:ab:
         a2:17:2b:55:8d:6a:c5:09:e4:4c:36:cb:c4:4e:23:0c:64:1b:
         3b:93:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----