Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/01fead66f9ee55528d06751eaafcdd54f0e6c2f6.roa
File:                     01fead66f9ee55528d06751eaafcdd54f0e6c2f6.roa (raw, json)
Hash identifier:          AGrphaC5/gGLRMqqrHaxZDkkIxavNgHGQ2/JYv2vTgI=
Subject key identifier:   CE:5D:2D:81:EB:72:03:8D:13:35:63:BE:4E:91:92:BE:52:5D:3C:72
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       283BB9
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/01fead66f9ee55528d06751eaafcdd54f0e6c2f6.roa
Signing time:             Tue 19 Mar 2024 17:59:59 +0000
ROA not before:           Tue 19 Mar 2024 17:59:59 +0000
ROA not after:            Thu 19 Mar 2026 17:59:59 +0000
asID:                     266790
IP address blocks:        45.233.100.0/23 maxlen: 27
                          45.233.102.0/24 maxlen: 27
                          2803:a0a0::/40 maxlen: 48
                          2803:a0a0:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636729 (0x283bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Mar 19 17:59:59 2024 GMT
            Not After : Mar 19 17:59:59 2026 GMT
        Subject: CN=01fead66f9ee55528d06751eaafcdd54f0e6c2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:32:94:dd:f7:5f:b8:07:2f:89:ec:3c:4f:
                    29:4f:e3:d9:77:2c:57:fc:d9:e9:93:bf:c9:a7:a3:
                    d9:93:52:db:df:72:84:2b:14:a7:26:e8:7e:61:cf:
                    ff:a0:2d:9e:87:40:5e:f2:76:fe:67:c9:ca:19:2e:
                    65:56:1b:22:04:09:3b:00:25:05:c5:77:dd:f9:6e:
                    26:20:6c:c8:14:78:2d:c4:c0:bf:58:8d:33:02:c5:
                    d4:d6:27:19:ec:bc:62:cf:e4:9f:50:02:a6:df:bc:
                    94:93:bd:86:41:bc:ac:fe:34:55:6f:f8:45:d6:fe:
                    64:fe:92:16:9c:56:3c:6a:ed:03:f0:66:e1:2a:2e:
                    19:11:03:ed:5c:59:15:02:1c:e9:99:75:13:67:26:
                    76:d6:3c:1a:4f:f8:e4:bf:c0:b8:01:a2:fa:6a:d0:
                    49:c6:be:19:6c:1f:cc:3d:1b:24:42:f8:94:e9:ea:
                    ed:55:47:9a:53:93:6d:57:bb:2a:55:88:df:7e:5d:
                    c7:14:97:5d:ff:cb:61:43:fd:86:7e:93:c5:9a:ff:
                    13:9b:0f:69:cd:ac:b3:03:0d:d7:d3:f0:77:4c:9d:
                    a0:65:51:ba:83:00:ba:1a:00:34:c5:f4:01:45:de:
                    fe:6d:8e:27:69:63:46:3b:28:9b:11:4e:75:3e:25:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5D:2D:81:EB:72:03:8D:13:35:63:BE:4E:91:92:BE:52:5D:3C:72
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/01fead66f9ee55528d06751eaafcdd54f0e6c2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.100.0-45.233.102.255
                IPv6:
                  2803:a0a0::/40
                  2803:a0a0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:9b:57:de:ca:8d:18:7d:99:aa:36:8d:d7:17:c3:c9:da:3f:
         7b:4f:b7:98:dd:6c:65:ce:72:18:41:f2:dd:7b:85:07:54:ff:
         cb:31:f5:69:fc:54:5d:53:29:38:41:4d:e7:8b:9d:4f:66:7e:
         94:2a:2c:5f:97:16:d8:34:0c:a9:f2:cf:0f:db:ea:6a:dc:dc:
         da:40:da:b5:5c:59:89:ff:d5:64:0a:6a:88:65:61:32:13:56:
         eb:42:a6:12:86:36:76:64:76:99:54:57:2f:e7:db:90:a5:36:
         f9:cd:1d:71:20:6a:33:4c:8a:64:7b:67:05:a4:d5:b4:20:3a:
         96:9d:aa:f2:27:10:9d:6d:75:f1:e1:cc:96:ee:ec:cc:86:55:
         2c:f7:1e:1f:23:c1:55:c0:61:20:4e:20:f8:8d:ea:6e:4c:b9:
         cc:35:dd:4b:39:a2:f1:f3:1f:57:72:07:d8:77:c4:e5:bd:45:
         28:ae:db:00:1e:f8:fe:60:84:69:06:6c:41:2d:ad:0b:fd:3b:
         04:d0:76:d9:03:0b:43:3b:05:f1:d4:e3:14:90:b2:33:88:60:
         fe:ab:fc:e6:07:1e:57:22:00:c6:a7:61:a5:57:56:42:5a:e1:
         3e:2c:d7:7c:6d:e2:00:a0:8b:47:ee:bd:3d:18:b7:eb:ff:9f:
         4e:6c:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----