Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/69b059617c3cc76a1feba8bc3f156a2be2e240c6.roa
File:                     69b059617c3cc76a1feba8bc3f156a2be2e240c6.roa (raw, json)
Hash identifier:          dJxFh2n6kI9fFbSlr2zyQ5EBzEmA5KVetYGxdHwAhEQ=
Subject key identifier:   59:0C:6A:B8:25:37:B8:2B:36:68:66:17:A1:62:D4:68:6B:BF:A9:4D
Certificate issuer:       /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial:       0D69CC
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/69b059617c3cc76a1feba8bc3f156a2be2e240c6.roa
Signing time:             Wed 19 Apr 2023 15:19:12 +0000
ROA not before:           Tue 18 Apr 2023 15:19:12 +0000
ROA not after:            Sat 19 Apr 2025 15:19:12 +0000
asID:                     263170
IP address blocks:        45.182.20.0/24 maxlen: 24
                          2803:2560::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879052 (0xd69cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Validity
            Not Before: Apr 18 15:19:12 2023 GMT
            Not After : Apr 19 15:19:12 2025 GMT
        Subject: CN=69b059617c3cc76a1feba8bc3f156a2be2e240c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:dc:7a:9e:39:11:37:67:7b:aa:f4:c9:a0:
                    da:1e:56:c0:56:e1:42:fb:78:9a:36:4a:72:aa:87:
                    23:b0:e3:ce:1b:e1:5f:3e:14:39:61:aa:eb:d4:f4:
                    7f:2e:88:49:30:6f:8b:43:65:31:3e:dd:48:31:11:
                    62:45:a1:8b:35:6f:c5:c8:18:68:c8:63:3a:e0:48:
                    0b:da:e5:e4:e4:05:ad:d9:4a:4c:35:ce:69:3c:9c:
                    de:2a:51:70:ee:35:fd:b1:4b:15:7a:68:6b:3e:aa:
                    6b:2b:89:56:3e:1f:fe:bc:94:66:2d:bf:f0:39:9d:
                    1b:bc:5c:ac:97:35:07:e5:53:bb:13:92:ab:26:78:
                    b1:ca:12:89:3e:13:d9:a4:f9:7f:04:17:27:df:ee:
                    f4:98:99:dc:23:6f:25:19:60:4f:a1:9d:2d:2b:50:
                    25:78:fd:17:99:8d:4b:c2:ec:a0:f6:ce:06:97:51:
                    8a:d5:d3:ca:c7:5f:bf:d0:a9:65:da:53:ca:b9:aa:
                    44:80:86:68:0d:1d:ef:e5:01:3c:e4:e2:5e:bd:7d:
                    09:6f:62:d0:0d:2b:51:76:e8:0d:3d:5b:21:bf:3e:
                    1a:79:36:1f:36:ce:c6:a3:0a:bc:e6:45:56:4e:50:
                    be:16:0c:71:e6:b2:44:21:35:32:d6:20:fc:ed:30:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0C:6A:B8:25:37:B8:2B:36:68:66:17:A1:62:D4:68:6B:BF:A9:4D
            X509v3 Authority Key Identifier:
                keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/69b059617c3cc76a1feba8bc3f156a2be2e240c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.20.0/24
                IPv6:
                  2803:2560::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:0b:6e:be:0a:66:ce:67:ea:9d:07:9e:53:2a:34:79:a4:40:
         af:5a:3e:b8:ac:48:6a:e9:ab:80:b4:64:d7:3d:e5:b4:d7:7b:
         df:16:9e:1d:48:68:1e:f5:b1:bb:2f:ab:57:e2:8b:a1:02:a5:
         41:ee:99:5a:7c:37:2f:7a:98:3b:bf:f0:65:1c:3e:c3:e9:fe:
         da:d6:8a:d5:41:01:bd:e6:a3:b0:47:38:1b:5d:d6:c5:d6:d7:
         79:b1:cc:2b:2f:92:db:2d:cf:8a:50:ae:d0:65:e5:c1:0d:99:
         14:28:95:56:5c:02:5a:96:80:12:18:83:1a:8e:d4:76:d3:21:
         cc:9d:24:37:e3:87:cd:2e:ca:e6:41:d2:3b:bc:10:21:38:c6:
         28:c9:1b:6f:66:6c:e9:17:01:ac:87:89:70:d3:13:1d:9c:d1:
         96:94:74:99:a5:98:41:ec:e8:ea:09:0d:72:7e:54:d7:88:91:
         15:21:fd:b5:35:91:7b:a1:67:00:f4:35:3b:ce:3e:7b:6c:a8:
         26:68:ba:23:40:42:96:75:78:74:cb:ba:65:3c:d2:71:1b:75:
         aa:6a:22:39:9a:6a:69:29:76:ec:cc:4b:c0:64:2e:1a:9b:9b:
         a5:1e:ca:bc:89:e4:1b:15:15:51:3c:34:46:79:8d:4b:1f:39:
         dd:05:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----