Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/3899649457b87caa50531c62e9c81f9a186075ac.roa
File:                     3899649457b87caa50531c62e9c81f9a186075ac.roa (raw, json)
Hash identifier:          rVJy8Oi4SIVh6u9qjDEAhyg1hffrEWHenq7+EW9FroQ=
Subject key identifier:   3F:B4:57:69:26:A6:04:79:34:4B:2C:90:BB:F4:F5:45:93:84:30:25
Certificate issuer:       /CN=1714f29986ec56df8404f82eb985d5d7c646acb5
Certificate serial:       1FA9B2
Authority key identifier: 28:9D:B2:49:5A:AE:EB:00:49:A1:B9:2B:17:76:80:F4:38:D5:29:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1714f29986ec56df8404f82eb985d5d7c646acb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/3899649457b87caa50531c62e9c81f9a186075ac.roa
Signing time:             Tue 13 Jun 2023 08:30:00 +0000
ROA not before:           Mon 12 Jun 2023 08:30:00 +0000
ROA not after:            Wed 11 Jun 2025 08:30:00 +0000
asID:                     269731
IP address blocks:        45.180.114.0/24 maxlen: 24
                          2803:e160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075058 (0x1fa9b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1714f29986ec56df8404f82eb985d5d7c646acb5
        Validity
            Not Before: Jun 12 08:30:00 2023 GMT
            Not After : Jun 11 08:30:00 2025 GMT
        Subject: CN=3899649457b87caa50531c62e9c81f9a186075ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:c8:17:0a:e2:cf:b4:2c:f1:c6:92:46:6c:
                    43:3f:b0:81:87:00:c4:5c:11:ac:e6:1c:18:2f:53:
                    42:fc:f7:93:3c:27:f1:9d:5a:62:56:af:77:6f:c3:
                    41:19:6f:f4:19:cd:0a:dd:3b:10:f8:a7:36:af:62:
                    da:d7:80:91:51:c9:58:35:3b:b5:46:bf:ed:4c:67:
                    ee:0b:ba:64:00:d0:7e:f3:b7:9b:49:e1:e3:55:c7:
                    e0:c2:19:fa:b9:2d:d1:d1:a4:f1:4c:d6:29:df:64:
                    f1:74:47:76:73:a3:22:87:39:a0:f0:48:8d:8d:64:
                    cd:30:ac:99:0b:f2:ea:13:1d:2e:7e:d4:ed:72:79:
                    5b:cd:e5:54:b6:6e:13:ac:f7:b5:b7:68:a4:9b:be:
                    03:ec:05:90:cc:e9:c3:4c:7c:1d:c3:06:95:50:23:
                    b7:c6:64:5b:0a:3b:57:e2:31:3b:ec:c8:1e:2d:be:
                    08:93:76:14:5c:53:9e:16:3f:1f:e3:fc:aa:02:95:
                    9d:76:93:f2:10:26:38:7b:f2:4f:3e:08:53:ab:49:
                    e6:23:74:f8:51:c6:a6:24:45:c5:09:aa:89:c1:fb:
                    5f:1e:6b:53:b4:38:a1:af:15:2e:7a:80:66:11:b0:
                    9b:1a:ce:f6:d9:9a:32:a6:31:13:b9:dd:79:fa:fc:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B4:57:69:26:A6:04:79:34:4B:2C:90:BB:F4:F5:45:93:84:30:25
            X509v3 Authority Key Identifier:
                keyid:28:9D:B2:49:5A:AE:EB:00:49:A1:B9:2B:17:76:80:F4:38:D5:29:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1714f29986ec56df8404f82eb985d5d7c646acb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/3899649457b87caa50531c62e9c81f9a186075ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/1714f29986ec56df8404f82eb985d5d7c646acb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.114.0/24
                IPv6:
                  2803:e160::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:8b:6c:6c:28:0c:1b:06:89:38:8f:34:bb:62:a8:1e:9c:
         45:e5:ab:c4:7e:a3:b6:e0:f7:e6:d1:b0:d3:20:ca:a5:ab:17:
         8c:99:8a:69:95:28:d5:4c:dc:81:48:eb:d5:c1:f9:68:b5:46:
         fa:be:5c:78:3f:31:7b:9a:e7:2f:4e:95:7d:16:48:62:d1:34:
         fc:8f:2c:ec:f4:01:0d:e1:7e:9b:19:9d:3e:97:c0:09:87:9b:
         90:85:66:d0:d7:36:2e:40:b0:0d:e3:52:29:b6:7c:f6:44:7b:
         db:c4:7d:31:ff:6b:c0:7a:78:4a:e0:2a:30:81:74:2e:1b:bb:
         de:13:bb:65:a4:5a:1f:8f:dc:fb:6a:37:58:a1:b3:e1:09:9f:
         30:cc:34:b9:b7:b7:e7:9d:72:12:16:c6:df:60:f6:c4:5f:c5:
         5b:96:0f:bf:fe:b3:24:48:d0:97:f7:96:5c:3d:df:06:f5:6a:
         84:8c:17:cf:c9:f2:a7:9a:cd:f8:ac:ed:2b:3a:c6:20:7c:42:
         fa:a0:d7:6c:56:10:85:e3:31:a4:72:bd:b5:73:6f:79:2a:c6:
         27:d0:ea:39:d7:c5:0b:ad:38:45:20:05:30:93:f9:da:06:15:
         93:81:aa:ba:15:23:02:5a:41:5a:ad:d9:25:29:01:b5:37:57:
         6c:ed:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----