Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/8b7f4100e8141104a6b5b455601f7dc91936bc46.roa
File:                     8b7f4100e8141104a6b5b455601f7dc91936bc46.roa (raw, json)
Hash identifier:          U1UwO6p6FHiALMCt7DyiHlPky96ixIfOaBffvIS8wdM=
Subject key identifier:   B0:9D:B6:65:76:C8:5D:9B:AB:98:81:A0:38:B7:42:59:85:7E:FD:38
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       21D3CB
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/8b7f4100e8141104a6b5b455601f7dc91936bc46.roa
Signing time:             Fri 16 Jun 2023 17:19:49 +0000
ROA not before:           Thu 15 Jun 2023 17:19:49 +0000
ROA not after:            Mon 16 Jun 2025 17:19:49 +0000
asID:                     273001
IP address blocks:        45.65.136.0/24 maxlen: 24
                          2803:a5c0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216907 (0x21d3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Jun 15 17:19:49 2023 GMT
            Not After : Jun 16 17:19:49 2025 GMT
        Subject: CN=8b7f4100e8141104a6b5b455601f7dc91936bc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:07:a6:ca:84:d0:54:f5:f9:af:cc:43:a9:
                    d4:a3:8b:7b:8e:07:22:bc:89:85:9e:fa:e8:95:29:
                    f6:fb:67:1b:94:e5:21:e5:d6:e7:0f:3f:53:2b:4f:
                    bf:af:77:16:00:36:6c:97:71:b4:4c:bf:c0:a4:f2:
                    38:90:75:a7:13:e8:9a:b8:d2:85:1f:84:e7:87:f2:
                    63:de:47:7e:29:c6:85:ca:46:2a:5c:d6:93:61:5b:
                    ec:a4:e5:83:d8:ca:4d:46:37:7c:0a:df:3c:57:20:
                    ce:df:0a:0f:0d:f1:68:80:ef:e7:0e:fa:c9:67:67:
                    7f:6f:ce:3f:1b:6e:88:41:18:68:5c:11:f0:de:bc:
                    df:dd:1e:06:cb:8d:0a:34:9e:7d:b8:69:26:88:34:
                    95:51:e5:41:87:d6:5f:81:54:a1:fe:55:a2:4c:18:
                    43:e1:b5:6f:13:16:57:7b:ae:ee:c4:01:e1:b7:37:
                    bd:1d:f6:cd:2f:b1:b1:ce:8b:a7:2a:a5:71:4a:c2:
                    90:ac:50:a7:a3:27:6e:47:d3:dd:23:cf:0a:f8:94:
                    c5:75:ed:b4:fd:79:84:35:95:96:7f:d2:06:26:2f:
                    38:47:82:6a:5e:8f:31:2d:35:f2:5c:12:20:38:d0:
                    49:39:a6:09:3b:07:ad:27:33:bb:4f:4b:fb:ae:86:
                    d7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:B6:65:76:C8:5D:9B:AB:98:81:A0:38:B7:42:59:85:7E:FD:38
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/8b7f4100e8141104a6b5b455601f7dc91936bc46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.136.0/24
                IPv6:
                  2803:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:d8:e6:66:39:ba:c9:40:3f:64:7a:c7:3a:4f:e4:f5:b9:
         1f:e3:e3:58:f7:e3:31:a3:12:57:68:ee:ed:64:56:74:65:5d:
         a8:fb:de:c4:89:18:78:32:2e:47:f9:ed:6d:d3:f3:41:83:e4:
         46:36:9f:58:03:43:f8:85:61:07:bf:bd:c9:c1:e4:7a:ad:d9:
         ae:a3:5a:06:72:3a:8b:92:c6:2a:4e:49:11:11:4e:19:41:1e:
         a2:a2:22:ad:1e:91:2d:c4:b8:78:33:49:88:17:13:bb:3d:ef:
         57:d1:f6:37:66:6f:12:cd:d1:a0:fa:d9:9d:46:da:5f:c3:d8:
         59:67:a2:ce:c4:73:78:c9:ea:cc:fc:13:69:0c:5e:90:be:6b:
         40:cf:57:fe:7a:cd:84:29:11:93:ca:59:7e:2a:62:db:b7:75:
         a9:12:21:8d:a1:41:d0:ef:9e:de:43:dd:42:22:28:1c:e3:70:
         a8:44:d9:be:14:e1:01:57:85:64:05:98:1d:19:71:e4:a6:b3:
         88:57:78:84:69:90:35:d9:73:90:4d:0f:ee:e2:13:cd:90:87:
         6f:05:83:11:bb:d8:8f:65:b5:7e:fd:bf:64:de:70:f0:e3:27:
         0c:02:22:f9:a5:af:e4:f8:d0:1c:15:3a:24:58:1f:d6:bd:16:
         ad:02:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----