Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/a1ef71fc6dcd79e99fe4d3b11575fb6daf57c484.roa
File:                     a1ef71fc6dcd79e99fe4d3b11575fb6daf57c484.roa (raw, json)
Hash identifier:          PA0xB5yt12KOzuqWuVOA+6uZmX8GSioh3PYJ9NRfqjU=
Subject key identifier:   CF:67:B5:AF:F4:F0:23:F9:CA:17:47:96:71:A2:47:C1:0A:99:B1:A9
Certificate issuer:       /CN=efec64f7ac53e798e9b5922f62077081e72cc466
Certificate serial:       0371C7
Authority key identifier: CD:D2:B1:05:0B:37:BF:64:CE:59:8F:1F:50:1F:47:D0:7E:A1:3D:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efec64f7ac53e798e9b5922f62077081e72cc466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/a1ef71fc6dcd79e99fe4d3b11575fb6daf57c484.roa
Signing time:             Mon 05 Jun 2023 19:24:30 +0000
ROA not before:           Sun 04 Jun 2023 19:24:29 +0000
ROA not after:            Thu 05 Jun 2025 19:24:29 +0000
asID:                     265578
IP address blocks:        45.174.172.0/22 maxlen: 24
                          2806:332::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225735 (0x371c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efec64f7ac53e798e9b5922f62077081e72cc466
        Validity
            Not Before: Jun  4 19:24:29 2023 GMT
            Not After : Jun  5 19:24:29 2025 GMT
        Subject: CN=a1ef71fc6dcd79e99fe4d3b11575fb6daf57c484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5b:83:20:50:83:da:a7:49:0a:8a:5c:33:a4:
                    2f:79:13:61:63:2b:7a:bf:3b:4e:31:b7:d0:d3:32:
                    d8:25:f6:b2:14:6e:01:47:b5:3d:1a:b8:5d:a6:dd:
                    9a:9a:a1:aa:f5:ff:3d:f0:86:1d:be:3b:e9:52:55:
                    02:9b:05:29:20:1a:81:16:12:f6:19:47:48:fb:6c:
                    e5:b3:09:6b:d2:2e:87:38:93:51:29:ce:c3:7c:ff:
                    d0:e9:77:56:28:6f:b8:73:30:ce:d6:1a:30:ed:de:
                    66:9e:93:de:21:5e:d8:81:ee:3e:ad:e4:26:2f:22:
                    d7:83:e1:7e:0d:25:21:ab:70:97:ba:43:9e:1b:7f:
                    9b:7b:4e:99:57:94:6e:f1:8b:80:e6:3f:29:f9:50:
                    11:c6:fb:85:2d:d4:e3:b6:75:49:59:25:b3:ef:9a:
                    41:e7:2e:e4:e7:de:13:04:fb:6a:be:2b:fa:64:80:
                    13:20:4a:45:90:51:b3:db:09:e6:a5:ff:53:e5:a9:
                    5a:84:70:f2:ec:ef:48:61:c5:d8:4c:0e:f8:10:2f:
                    7b:3a:9b:fc:69:51:af:fc:8f:43:57:ad:0e:fd:e6:
                    ef:ec:4e:14:e9:c1:91:86:2c:dd:46:34:49:8f:54:
                    2e:14:55:7d:02:3c:83:57:f4:99:53:06:d5:d4:bc:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:B5:AF:F4:F0:23:F9:CA:17:47:96:71:A2:47:C1:0A:99:B1:A9
            X509v3 Authority Key Identifier:
                keyid:CD:D2:B1:05:0B:37:BF:64:CE:59:8F:1F:50:1F:47:D0:7E:A1:3D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efec64f7ac53e798e9b5922f62077081e72cc466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/a1ef71fc6dcd79e99fe4d3b11575fb6daf57c484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/efec64f7ac53e798e9b5922f62077081e72cc466.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.172.0/22
                IPv6:
                  2806:332::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:4a:0f:2e:9e:ee:c0:26:05:91:94:31:c2:47:3e:b9:7a:
         8d:7f:a8:0c:19:a3:06:aa:5e:e9:14:ed:03:e9:74:27:df:e2:
         7c:e9:01:f9:7f:02:3b:22:89:ea:27:72:f3:2d:8f:46:36:f3:
         84:32:44:de:5d:93:5a:bd:b4:28:7c:c7:a8:c5:b1:5a:59:5e:
         41:d1:3f:81:4d:3e:a9:bb:2d:7c:d3:9b:91:f2:22:17:fd:94:
         23:bf:d1:75:b0:7e:72:3b:b7:e8:d8:86:20:3e:3d:44:39:27:
         9d:38:59:46:79:a4:99:02:90:f4:b1:b0:e1:80:10:83:58:8c:
         66:de:b3:dd:04:4c:d3:d9:47:9e:92:8f:1d:8d:97:cc:b0:fa:
         57:2a:46:2a:39:82:56:11:62:1d:3e:7f:07:ac:40:d3:b0:46:
         d9:54:de:a9:fb:d0:90:84:de:d8:f8:ba:c5:8e:6a:ec:79:70:
         d6:3e:6f:10:8f:71:62:8e:f2:f5:84:df:ef:78:0d:75:2b:f2:
         c9:9f:1c:14:9f:15:b3:cc:dd:0b:b5:54:d0:4b:c0:94:49:1d:
         b1:fb:71:99:33:51:7f:e8:90:ae:5a:a6:d4:ca:ab:a3:17:92:
         94:c9:35:03:5c:81:15:d6:73:5e:48:f9:dc:ba:74:4d:0f:f6:
         db:70:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----