Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/fc942fe996a329c42c06cb7a11b22df802e8e0e3.roa
File:                     fc942fe996a329c42c06cb7a11b22df802e8e0e3.roa (raw, json)
Hash identifier:          3po8nAsfp2w1bFwFgBXLGHNMLCm6YD3d38snmvKIo1I=
Subject key identifier:   FC:8A:47:82:02:1A:E8:0B:9E:88:C5:EE:D8:AE:C9:4F:7C:12:A2:C3
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       28401C
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/fc942fe996a329c42c06cb7a11b22df802e8e0e3.roa
Signing time:             Tue 19 Mar 2024 18:00:00 +0000
ROA not before:           Tue 19 Mar 2024 17:59:59 +0000
ROA not after:            Thu 19 Mar 2026 17:59:59 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24
                          2803:a0a0:900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2637852 (0x28401c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Mar 19 17:59:59 2024 GMT
            Not After : Mar 19 17:59:59 2026 GMT
        Subject: CN=fc942fe996a329c42c06cb7a11b22df802e8e0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:8d:4b:a3:75:b5:bb:fe:a0:41:27:6d:85:
                    14:ba:98:88:bb:25:e8:f7:ad:77:fb:99:91:05:93:
                    2f:84:df:55:0a:f9:f8:92:25:7f:1c:f8:f6:ef:af:
                    61:b7:d3:08:4a:e9:4e:84:ab:15:79:aa:79:fd:71:
                    3a:17:ff:09:37:e5:ce:9c:54:47:d7:5d:3b:16:86:
                    d7:15:bd:06:38:ed:2d:f9:b1:8f:e8:0b:24:7a:0b:
                    17:61:74:a7:81:54:44:e7:5f:6a:cb:e0:e3:0c:a4:
                    bd:5f:cf:f4:e1:84:25:a7:b4:19:d7:fe:11:ba:3a:
                    2b:ac:7f:bc:48:21:a7:61:64:1f:7d:88:54:f9:c8:
                    fb:92:c1:91:51:11:ae:d0:9e:42:50:17:96:e3:03:
                    41:27:53:b4:38:b1:6e:9b:78:71:5f:39:ea:62:13:
                    38:f5:17:09:f8:35:4b:9f:93:c8:99:ab:57:8b:63:
                    a3:72:4e:ca:33:89:c6:c7:40:f4:8c:79:46:fa:3f:
                    20:f8:99:04:f7:46:4a:da:a3:42:c2:3a:30:7b:04:
                    87:6a:3f:68:81:ca:05:fb:54:6f:15:d7:19:71:84:
                    74:c2:10:e7:64:2f:1b:59:ce:62:57:4f:56:65:29:
                    c0:d8:ed:8f:73:d2:26:6c:33:2b:de:6a:07:3b:f7:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8A:47:82:02:1A:E8:0B:9E:88:C5:EE:D8:AE:C9:4F:7C:12:A2:C3
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/fc942fe996a329c42c06cb7a11b22df802e8e0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24
                IPv6:
                  2803:a0a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:56:69:25:e5:5b:97:f7:d3:62:91:46:5e:dc:24:db:f7:
         11:59:86:ed:b0:32:e5:c9:36:87:1f:06:70:cb:19:69:42:cf:
         ec:85:71:ae:14:bf:3f:2f:f5:4f:8c:88:f4:5c:8d:16:9b:89:
         5c:5d:c4:b0:9c:97:4a:a8:70:51:15:56:6b:73:be:8d:a3:ea:
         e2:73:b9:c2:96:40:d6:af:6a:0e:5e:33:1e:fa:96:18:70:1f:
         09:05:fe:a4:78:ef:34:df:66:70:07:38:6f:3d:d7:02:77:32:
         a6:c8:e0:c3:c7:8b:30:e3:92:41:ce:ba:62:97:04:1c:91:c8:
         23:54:b2:d3:1e:83:b8:21:e1:c2:16:93:f6:52:03:61:18:f6:
         1c:e3:8a:bf:ac:42:71:db:46:24:40:59:75:c1:cc:7f:06:37:
         96:e5:37:33:40:eb:62:ee:b7:65:1d:5e:d9:8f:62:f5:74:ee:
         74:db:00:55:d3:4e:de:67:1a:79:42:75:12:1f:70:b2:54:6c:
         fe:fe:3a:4f:e7:76:be:b2:ec:d5:8b:bb:eb:9a:4b:6b:68:ad:
         6f:35:6b:ed:e0:61:35:90:17:f0:1c:78:ed:3e:ee:d0:57:fc:
         3a:71:04:44:91:ac:0f:0b:b7:4b:29:d9:f6:b4:23:27:82:6b:
         78:8c:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----