Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/0828d30e2c393be1fc37758ec667ada363bc9106.roa
File:                     0828d30e2c393be1fc37758ec667ada363bc9106.roa (raw, json)
Hash identifier:          8mQUXhOLpnTOXKaPerCHHsDpr/nUvkIEWOS/59MLzVk=
Subject key identifier:   CE:4A:35:11:C9:F6:54:73:D9:E8:98:DB:62:B9:11:A2:16:E4:65:40
Certificate issuer:       /CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
Certificate serial:       1E7D47
Authority key identifier: 5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/0828d30e2c393be1fc37758ec667ada363bc9106.roa
Signing time:             Thu 04 May 2023 21:53:07 +0000
ROA not before:           Wed 03 May 2023 21:53:07 +0000
ROA not after:            Sun 04 May 2025 21:53:07 +0000
asID:                     264824
IP address blocks:        45.183.140.0/22 maxlen: 24
                          2803:e360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998151 (0x1e7d47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
        Validity
            Not Before: May  3 21:53:07 2023 GMT
            Not After : May  4 21:53:07 2025 GMT
        Subject: CN=0828d30e2c393be1fc37758ec667ada363bc9106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:16:dc:22:95:46:f4:58:51:a8:ca:9c:e2:
                    45:ba:9a:54:e7:4f:f3:4b:2b:ca:61:ad:b5:92:a8:
                    f0:9c:c2:a3:87:a8:b7:7b:b4:5f:87:78:dc:ae:6a:
                    22:46:c9:6e:23:ba:b0:59:ad:a4:74:94:c3:57:1b:
                    29:68:b8:dc:09:96:e4:db:bd:cb:47:4c:dd:9e:ab:
                    2c:44:87:1c:28:a3:85:9e:28:8a:99:d1:2c:4e:43:
                    f9:d1:67:e9:a5:ad:0b:18:1e:31:c2:b1:9e:47:3a:
                    de:75:15:6e:8d:10:00:8d:e5:5a:98:6c:f4:82:c4:
                    9e:c4:80:62:e3:27:c6:ab:2a:ed:23:da:11:b9:84:
                    dd:f8:70:ad:a8:c7:df:19:7f:05:31:bf:1f:a4:e0:
                    55:e7:45:7b:ae:0e:fb:da:c0:48:3c:e1:a5:96:5a:
                    2e:d2:bb:13:84:cc:76:98:5f:c7:36:e2:0a:8a:ff:
                    e9:86:b9:59:6f:54:45:64:4e:63:64:28:df:6d:07:
                    7a:a0:e7:cc:c5:df:05:0b:6e:ba:c6:ec:43:c1:a2:
                    36:f3:63:01:80:0d:73:e0:b5:7e:34:9f:da:f7:ef:
                    1c:ef:25:fa:a4:5a:d3:dc:9a:8f:b1:af:d4:af:b5:
                    02:7c:21:b8:ee:85:10:8a:6a:9c:f1:7d:1c:8a:6a:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:35:11:C9:F6:54:73:D9:E8:98:DB:62:B9:11:A2:16:E4:65:40
            X509v3 Authority Key Identifier:
                keyid:5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/0828d30e2c393be1fc37758ec667ada363bc9106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a40e227e41eada75cd2ecb37649e56571e8b69d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.140.0/22
                IPv6:
                  2803:e360::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:b8:7b:b7:70:57:08:72:5b:c2:cb:81:fd:96:5b:6e:a5:
         60:28:20:ab:5d:4d:80:be:52:38:b1:48:67:28:f2:2a:eb:e5:
         ee:15:1c:7f:9a:40:67:c2:d2:06:c1:82:9a:79:79:f4:7c:86:
         c1:99:3c:d3:7f:77:be:f5:a1:71:af:0a:db:b9:c7:cc:f8:d4:
         f6:4d:8f:56:85:05:50:d9:62:e0:72:c5:a2:c4:e8:94:8a:aa:
         2f:f6:41:38:29:31:29:ce:a9:45:56:b9:cf:e6:67:e6:3c:4a:
         df:4e:a4:2e:99:cd:90:d9:48:37:0d:5a:09:66:04:25:9b:31:
         5a:24:2d:b2:90:2c:f3:73:9b:6a:d2:3b:2d:9a:da:d0:26:22:
         1e:c3:e9:8c:c2:b3:b5:90:a7:fa:5e:d3:9d:30:2a:df:12:67:
         0a:a0:aa:df:5c:57:8f:aa:61:92:d8:d0:58:f8:eb:27:76:4b:
         c5:6c:e8:a9:ea:a9:d0:f6:90:ee:31:e4:bf:cb:7a:99:55:fe:
         c4:f5:18:34:b5:ef:d3:86:0f:c3:a5:b8:35:4a:78:a3:e4:1a:
         7e:dc:b9:09:df:b5:6f:dc:a7:b9:64:39:51:9f:6e:53:6b:0e:
         8d:aa:8c:db:9c:06:86:15:63:b8:bc:00:e6:95:21:f8:15:eb:
         ce:d8:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----