Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/9ac97146a63c8323a1200cf76e4195f5756bbc3b.roa
File:                     9ac97146a63c8323a1200cf76e4195f5756bbc3b.roa (raw, json)
Hash identifier:          SMx62wnwxgie5/VwWUjKDcE8Lmdx6RpJE0vUk0U1Xr0=
Subject key identifier:   C0:D4:A1:32:DF:9D:EE:5F:46:DD:68:24:4E:85:5A:D0:80:9B:35:43
Certificate issuer:       /CN=a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4
Certificate serial:       22CC49
Authority key identifier: 67:30:E8:4C:10:93:C1:82:69:D7:51:6B:5A:DB:7D:48:EC:D9:0B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/9ac97146a63c8323a1200cf76e4195f5756bbc3b.roa
Signing time:             Fri 29 Sep 2023 08:30:03 +0000
ROA not before:           Thu 28 Sep 2023 08:30:03 +0000
ROA not after:            Sat 27 Sep 2025 08:30:03 +0000
asID:                     28007
IP address blocks:        45.173.204.0/22 maxlen: 24
                          2803:d060::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280521 (0x22cc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4
        Validity
            Not Before: Sep 28 08:30:03 2023 GMT
            Not After : Sep 27 08:30:03 2025 GMT
        Subject: CN=9ac97146a63c8323a1200cf76e4195f5756bbc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:17:b4:39:eb:e9:66:d2:02:c7:16:94:90:
                    ee:33:75:e4:b3:af:ad:8f:f3:bd:fb:22:ad:0d:28:
                    bf:82:c2:c6:bc:05:5c:3b:e4:eb:49:59:7c:47:f0:
                    b9:34:5b:e1:ea:ef:c1:d3:37:7b:4e:93:38:03:c4:
                    fa:c3:8a:21:28:5f:9b:f3:7d:8f:11:a8:94:3e:b8:
                    9a:15:f6:b2:52:ac:69:ef:cf:ac:e6:9b:9c:97:a9:
                    48:d4:b0:04:09:00:f5:0d:71:90:f4:61:c6:d8:e2:
                    9e:07:fc:66:ad:c2:43:06:0b:11:25:3d:0a:fc:ae:
                    d2:6b:69:2c:8e:96:ff:83:97:18:e6:de:bb:77:28:
                    9b:52:87:5d:5b:59:a2:cc:90:d0:3f:ee:ca:ea:61:
                    3b:0a:46:cd:a5:fd:c2:cf:d1:c2:53:e3:b9:d8:b8:
                    f5:a7:e9:d5:f8:5c:5d:35:e1:a7:ab:b4:16:6b:a5:
                    68:45:04:f6:5e:36:ca:ff:77:29:59:be:63:28:1e:
                    06:f9:37:1a:1f:65:09:30:ff:ae:c6:8c:19:68:29:
                    92:50:d5:b2:22:32:07:9a:c7:3a:38:a3:23:14:15:
                    2e:a3:6e:67:fe:de:1a:73:e8:4e:f8:02:e9:da:83:
                    3b:2e:cb:25:3f:88:d7:03:6e:e2:89:87:a6:10:ad:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D4:A1:32:DF:9D:EE:5F:46:DD:68:24:4E:85:5A:D0:80:9B:35:43
            X509v3 Authority Key Identifier:
                keyid:67:30:E8:4C:10:93:C1:82:69:D7:51:6B:5A:DB:7D:48:EC:D9:0B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/9ac97146a63c8323a1200cf76e4195f5756bbc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.204.0/22
                IPv6:
                  2803:d060::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:65:cc:b3:d2:d7:33:d5:e2:98:fb:c6:01:ee:42:20:47:45:
         2b:ee:84:d0:03:4d:78:fd:3d:e5:4b:d8:80:91:e4:1f:67:dd:
         f1:0a:02:38:a8:b6:96:bb:c7:4b:c9:b2:6c:e2:67:ca:c7:95:
         ab:17:5f:c6:cb:f4:8d:e5:74:b5:0a:d8:6c:53:03:11:80:15:
         46:d8:61:a5:ac:f4:be:4e:85:53:cc:58:2b:3a:d7:cd:d2:ec:
         e7:18:02:d4:3e:a4:98:09:7d:18:01:c6:21:ed:c9:eb:0e:24:
         ee:2a:da:23:68:9a:91:f1:d9:47:84:ec:54:39:c4:4d:f0:eb:
         78:93:2b:d5:7a:ac:0b:6a:ce:b6:60:14:b7:76:3b:ee:1c:7d:
         11:9b:4b:5f:73:66:be:8f:ce:4a:4b:40:46:18:eb:5f:f4:d6:
         45:17:18:05:d8:4d:53:92:a2:ea:53:7b:14:0e:b1:85:94:4d:
         01:2a:06:f3:7c:3a:e4:37:49:1f:1d:7c:2d:d5:20:d1:e4:cd:
         fd:87:e8:0d:8b:11:2e:d7:fd:bb:70:0f:d2:e5:88:3e:ca:0d:
         6b:82:7f:22:1c:24:66:fe:23:e6:44:bd:1d:e4:d1:1a:4c:84:
         88:ae:fa:8a:08:a1:1e:a2:d5:32:46:18:82:7d:cf:40:31:65:
         c8:94:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----