Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/31031613acc52deef62519a905fabda62e015fb0.roa
File:                     31031613acc52deef62519a905fabda62e015fb0.roa (raw, json)
Hash identifier:          cdCZEELKALjmWDA2gQq+pMz4H4D1Q5p6eauGAA4+kg0=
Subject key identifier:   87:20:70:9C:F4:47:03:41:9B:49:0B:36:85:AC:85:AA:93:CD:18:6D
Certificate issuer:       /CN=5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d
Certificate serial:       AEAE
Authority key identifier: 4A:66:F0:41:B0:BA:F4:1F:CF:8E:2D:5E:D8:2F:DB:60:9C:5A:53:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/31031613acc52deef62519a905fabda62e015fb0.roa
Signing time:             Fri 16 Jun 2023 17:34:33 +0000
ROA not before:           Thu 15 Jun 2023 17:34:33 +0000
ROA not after:            Mon 16 Jun 2025 17:34:33 +0000
asID:                     265585
IP address blocks:        45.175.252.0/22 maxlen: 22
                          2806:33a::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44718 (0xaeae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d
        Validity
            Not Before: Jun 15 17:34:33 2023 GMT
            Not After : Jun 16 17:34:33 2025 GMT
        Subject: CN=31031613acc52deef62519a905fabda62e015fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:07:d3:96:cc:7c:62:68:7f:93:72:0a:d3:
                    d1:3b:0c:b6:c1:b9:ac:38:3d:e6:0f:84:dc:2b:35:
                    30:bd:d8:3e:56:8e:6b:5e:0e:1f:98:cf:56:03:d1:
                    09:97:98:64:c4:05:90:43:70:36:02:11:e3:b1:fd:
                    4c:09:98:78:b0:51:8f:bc:1d:be:73:1d:1c:8a:7d:
                    99:0f:9c:fe:33:7a:d9:2c:fc:7a:03:94:42:75:fe:
                    5f:14:6f:d4:ac:c2:fe:32:70:91:5f:84:4b:5d:c1:
                    0e:79:15:97:e3:9e:77:57:2f:6f:1e:0d:1b:a7:c5:
                    b1:54:88:9c:8f:e6:99:ac:21:02:36:0e:5c:10:56:
                    14:90:22:ae:c0:c1:c9:35:13:d6:3f:64:42:a3:a1:
                    54:50:63:15:b8:8e:d1:5a:bf:26:e1:ed:25:71:64:
                    37:98:91:d6:20:1b:b4:e1:52:d5:9f:4d:4d:89:30:
                    77:1b:0c:80:e7:55:3b:7c:9e:77:5a:d3:09:1a:7a:
                    33:30:5e:42:22:0e:0b:07:b1:3c:7d:36:a0:80:f9:
                    0b:56:02:c6:3f:8e:0c:a4:d0:5a:06:ba:eb:25:a5:
                    16:37:9e:dc:3d:c8:4b:03:bd:be:c7:5f:75:82:68:
                    6e:53:e5:a9:9d:fb:86:6a:82:e4:f8:44:e5:9a:7e:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:70:9C:F4:47:03:41:9B:49:0B:36:85:AC:85:AA:93:CD:18:6D
            X509v3 Authority Key Identifier:
                keyid:4A:66:F0:41:B0:BA:F4:1F:CF:8E:2D:5E:D8:2F:DB:60:9C:5A:53:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/31031613acc52deef62519a905fabda62e015fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdfbc17d-4724-4e97-8f43-daa054834996/5a5fef2dd6ce7ff0af29f76a952b4b5e340bb13d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.252.0/22
                IPv6:
                  2806:33a::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:ca:4b:92:0c:58:36:3c:93:ee:3f:23:eb:aa:b2:b7:08:
         57:32:62:57:2c:3b:b6:db:a1:5c:d6:63:36:ed:68:a1:18:8f:
         b7:9c:3f:c0:9a:47:c7:eb:95:3f:ed:b0:81:db:76:4b:ef:37:
         f6:49:03:95:44:b0:4e:b7:61:4d:a3:c9:50:a1:74:b8:1c:79:
         00:bf:13:0e:d1:e8:9f:70:6c:cd:4f:dc:6c:71:a9:8f:5e:88:
         77:e2:4a:d7:9b:36:90:3b:f8:a5:c3:45:81:36:63:bc:2b:17:
         45:e6:9e:5c:01:6f:89:1f:51:4b:b5:31:42:85:51:7c:3b:3d:
         fa:b9:d3:0b:f4:fe:ff:82:c3:0c:fc:c9:96:40:f1:fc:58:d7:
         52:df:86:1e:02:c1:7f:59:1f:70:96:f0:1e:cd:d9:c7:9f:20:
         c8:4a:b5:0a:9a:ed:ee:17:c1:d5:0e:ef:ae:0e:d2:25:dc:52:
         80:55:4d:c3:65:59:9c:45:fc:5a:78:03:70:78:6b:58:30:d2:
         80:de:2f:e4:cb:7a:10:4e:75:0b:65:06:52:cc:c6:6f:97:7b:
         d1:f2:57:42:3a:4f:8b:5d:f7:11:3b:83:e0:aa:07:87:4b:84:
         e0:55:5b:ef:8d:97:91:24:80:44:a1:de:06:59:37:6c:25:d1:
         ee:b9:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----