Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/1cd2889552779feede4cd338336caafbd3c6905a.roa
File:                     1cd2889552779feede4cd338336caafbd3c6905a.roa (raw, json)
Hash identifier:          T37SIr1u9YNa3IiTFXZ3XnM3iqk4bpI25v/XVzNU+j8=
Subject key identifier:   AC:D9:07:69:73:B1:C9:BD:E4:AE:22:A9:03:BF:65:8C:25:F2:D3:E4
Certificate issuer:       /CN=08e5d5ba16af3e37e19c92b3d1d2702ab69929f4
Certificate serial:       1C9FFE
Authority key identifier: 77:F1:84:AE:EC:1F:E7:98:9F:6D:2F:63:52:97:45:EB:69:13:D6:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e5d5ba16af3e37e19c92b3d1d2702ab69929f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/1cd2889552779feede4cd338336caafbd3c6905a.roa
Signing time:             Thu 09 Feb 2023 17:16:14 +0000
ROA not before:           Sun 21 Mar 2021 14:36:18 +0000
ROA not after:            Tue 24 Mar 2026 14:36:18 +0000
asID:                     272929
IP address blocks:        45.167.248.0/24 maxlen: 24
                          2803:cda0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875966 (0x1c9ffe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e5d5ba16af3e37e19c92b3d1d2702ab69929f4
        Validity
            Not Before: Mar 21 14:36:18 2021 GMT
            Not After : Mar 24 14:36:18 2026 GMT
        Subject: CN=1cd2889552779feede4cd338336caafbd3c6905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:16:c6:26:f6:5b:c1:ba:a8:72:92:df:cb:
                    74:ba:e8:5c:2f:b7:75:90:0a:21:63:f9:0f:80:04:
                    25:b0:e1:35:d1:05:ef:e0:62:f2:45:94:ed:c9:5e:
                    85:0e:c2:12:1f:1b:b5:ed:79:18:29:2f:c4:d9:44:
                    d0:13:27:89:c6:46:c3:d6:9f:ef:dd:ca:c1:2b:00:
                    38:ee:95:70:12:c1:68:72:49:35:aa:47:66:16:76:
                    b8:12:95:9f:e9:8b:07:e1:53:15:6a:74:f1:97:c2:
                    a7:b1:da:63:89:bf:ba:70:80:76:79:f7:a1:8f:95:
                    54:94:97:ec:18:9a:00:f2:10:df:ad:be:78:15:f1:
                    92:d4:9d:2d:64:50:b7:c4:8c:87:e6:aa:27:23:2f:
                    d0:8a:11:86:87:5d:cc:fe:01:66:30:45:42:cc:95:
                    c4:09:59:5b:13:0f:ac:8b:5a:4d:2a:0c:01:a7:07:
                    5c:96:29:6a:1a:96:fa:dd:1d:08:68:74:5e:53:dd:
                    06:6a:a2:d6:01:6f:f3:00:08:05:fe:f5:3c:9b:54:
                    42:8e:d1:f4:5c:5f:dd:2e:82:76:c8:28:ef:5a:9b:
                    b2:91:79:5e:28:5a:61:2b:78:c6:bb:9b:b1:0c:ce:
                    c1:16:f2:49:a9:12:12:23:b6:a0:1c:fc:a3:1f:da:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D9:07:69:73:B1:C9:BD:E4:AE:22:A9:03:BF:65:8C:25:F2:D3:E4
            X509v3 Authority Key Identifier:
                keyid:77:F1:84:AE:EC:1F:E7:98:9F:6D:2F:63:52:97:45:EB:69:13:D6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e5d5ba16af3e37e19c92b3d1d2702ab69929f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/1cd2889552779feede4cd338336caafbd3c6905a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/08e5d5ba16af3e37e19c92b3d1d2702ab69929f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.248.0/24
                IPv6:
                  2803:cda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:7b:e6:d0:19:b1:f8:7f:c5:93:6f:55:a8:80:90:c4:5e:
         cb:58:54:b8:70:a2:fe:3b:8a:66:c8:97:bf:56:b0:c2:ac:de:
         9f:88:66:91:12:c8:ab:51:c6:db:ea:c1:0e:89:b2:63:d5:98:
         ed:57:68:81:fc:90:de:c1:45:dd:cd:08:cd:b2:68:fb:6d:35:
         46:b7:2a:f8:e4:da:ec:2b:22:33:03:2c:ed:78:cb:67:f1:55:
         46:90:ce:2e:16:74:e0:75:2e:0b:d6:0f:12:53:1c:e5:fb:03:
         7c:fd:74:52:1e:33:90:e7:9b:51:9f:9a:98:3a:41:69:18:73:
         09:9e:98:fc:fd:ab:de:30:bc:3f:e3:58:6f:b2:f5:43:d4:68:
         cf:8c:6d:56:a1:3d:18:30:a4:9a:e0:97:41:e3:64:cb:be:b1:
         c2:2d:f0:12:21:e8:35:9a:84:d2:17:1a:e2:bc:af:d6:1d:24:
         33:3c:3f:7b:f3:ef:a4:ec:97:18:02:f9:b3:e2:74:c7:b3:ab:
         4d:e7:cc:b5:d2:2e:c7:94:a7:c9:68:16:24:9d:d0:00:64:19:
         fc:9a:79:06:24:a8:1b:ac:f8:71:6e:6f:15:61:1c:da:49:d4:
         b9:e5:d2:30:de:97:9a:ac:e4:35:ee:a4:83:f3:41:b6:a5:47:
         33:96:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----