Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/237030a2572b024c13b27c1700a1e49d75b78bd3.roa
File:                     237030a2572b024c13b27c1700a1e49d75b78bd3.roa (raw, json)
Hash identifier:          BKU7Oik2l2CZLPo4GKH5pLUCiwwoJkZBGwSMGoJ8/oY=
Subject key identifier:   CE:7F:01:D8:2A:0B:8A:17:20:FD:6C:C8:96:5C:22:45:EE:B6:FB:3E
Certificate issuer:       /CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
Certificate serial:       1C757F
Authority key identifier: AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/237030a2572b024c13b27c1700a1e49d75b78bd3.roa
Signing time:             Tue 09 Jan 2024 14:04:49 +0000
ROA not before:           Tue 09 Jan 2024 14:04:49 +0000
ROA not after:            Fri 09 Jan 2026 14:04:49 +0000
asID:                     269745
IP address blocks:        45.226.176.0/22 maxlen: 22
                          2803:2620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865087 (0x1c757f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
        Validity
            Not Before: Jan  9 14:04:49 2024 GMT
            Not After : Jan  9 14:04:49 2026 GMT
        Subject: CN=237030a2572b024c13b27c1700a1e49d75b78bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:b5:ea:97:ba:e6:f1:e1:d0:31:c2:e7:1f:
                    48:cb:98:d8:18:10:18:de:59:84:bc:1c:9e:28:a3:
                    da:52:51:e0:81:3b:f1:11:42:dd:f9:7b:20:e5:71:
                    9a:e6:9f:3f:1d:20:75:e2:27:0c:0a:f4:ca:49:47:
                    63:98:42:75:34:8b:db:0b:b4:9f:3e:b6:1b:01:7b:
                    c3:db:91:56:1b:02:66:49:c9:50:7c:5a:61:91:e1:
                    ac:8b:63:f9:1a:70:1e:b0:c4:fd:7a:6d:cc:a6:38:
                    57:35:fc:2c:f4:ec:a5:b2:a1:65:95:3b:c0:00:2d:
                    01:2a:5a:32:e1:e5:65:69:fc:ca:72:b8:a6:b0:90:
                    ec:bf:2d:45:df:0b:84:03:b8:27:32:6b:cc:ff:6d:
                    ec:69:38:42:5b:35:83:68:37:20:7d:a6:94:ae:05:
                    04:83:37:01:da:42:dd:21:24:d7:7e:79:12:4d:75:
                    1c:39:50:31:a2:75:f8:35:82:56:73:cd:57:79:74:
                    4e:3a:54:1d:00:64:99:12:4e:da:5a:f4:b0:2a:e8:
                    1c:4c:65:5d:2a:4f:ef:76:ce:10:cd:aa:8d:fc:2e:
                    c9:de:e9:44:4a:45:bd:a1:02:74:12:ac:66:35:26:
                    4b:17:13:bf:f6:f6:a8:84:e4:ad:7b:b2:90:c0:5d:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:01:D8:2A:0B:8A:17:20:FD:6C:C8:96:5C:22:45:EE:B6:FB:3E
            X509v3 Authority Key Identifier:
                keyid:AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/237030a2572b024c13b27c1700a1e49d75b78bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/b67a5716e00aeccf404a86a23559e2b4aa264abf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.176.0/22
                IPv6:
                  2803:2620::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:b3:87:6f:b4:54:ef:5c:73:f3:e6:70:62:59:90:7c:82:
         81:57:c2:55:21:8f:75:b2:fd:9c:97:e0:69:32:8a:2c:b7:b3:
         6b:48:27:1f:26:9e:8e:a7:90:5d:34:d4:46:d5:5c:e3:45:97:
         cb:cf:b1:61:77:2f:6a:59:1a:8f:71:4f:d6:4a:de:f9:43:db:
         04:f5:02:b9:3c:02:6f:ff:11:44:8d:8d:59:cf:89:f3:be:b3:
         b9:b0:1a:ff:02:65:34:5d:db:fa:a9:c6:3f:3b:d7:a7:7d:78:
         64:fb:82:b1:7c:7a:97:ab:cc:ec:ee:2e:a6:f3:52:1d:7f:c6:
         76:48:ee:17:9b:42:2e:32:65:cc:1b:3c:5b:29:8d:cd:0d:27:
         a7:01:55:dd:88:bc:6f:46:74:c1:9b:a4:88:be:27:4b:a6:c9:
         2b:bf:e9:10:0d:27:73:0b:f6:ef:94:54:09:f1:25:dc:8f:0d:
         0e:12:f5:6d:c6:a3:d7:43:85:05:94:ae:81:1d:eb:1a:98:6b:
         69:5c:4e:b1:9d:ad:f1:5f:e1:fd:eb:7a:7f:a1:ac:6d:6c:53:
         63:b6:48:8c:5c:ca:55:78:61:42:41:2e:4d:13:4f:80:64:de:
         ed:39:5c:e1:84:4b:98:96:60:74:55:34:4f:3d:72:52:47:2d:
         ee:11:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----