Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/cdbe871b0b7737ec616fa5fdccf566e871ab4da7.roa
File:                     cdbe871b0b7737ec616fa5fdccf566e871ab4da7.roa (raw, json)
Hash identifier:          aabaY1jRcGxYqvMq7EvdrhIHbns3+WTE704cFSikZhU=
Subject key identifier:   86:01:05:1F:71:3E:BD:37:D5:27:9B:DA:96:B7:ED:5D:65:51:33:67
Certificate issuer:       /CN=5aaa493ee6730d1d0651bc5daec8b738e5737278
Certificate serial:       04CB
Authority key identifier: EC:63:92:BE:BF:A3:56:38:66:04:40:E2:71:62:91:99:A4:56:2E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5aaa493ee6730d1d0651bc5daec8b738e5737278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/cdbe871b0b7737ec616fa5fdccf566e871ab4da7.roa
Signing time:             Sat 07 Oct 2023 23:29:37 +0000
ROA not before:           Fri 06 Oct 2023 23:29:37 +0000
ROA not after:            Tue 07 Oct 2025 23:29:37 +0000
asID:                     265596
IP address blocks:        45.181.40.0/23 maxlen: 23
                          2806:345::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aaa493ee6730d1d0651bc5daec8b738e5737278
        Validity
            Not Before: Oct  6 23:29:37 2023 GMT
            Not After : Oct  7 23:29:37 2025 GMT
        Subject: CN=cdbe871b0b7737ec616fa5fdccf566e871ab4da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:e8:b2:71:37:3d:53:63:3b:fd:da:16:d4:
                    64:a5:c2:bb:8d:06:4f:d0:38:c1:bf:94:f5:fa:13:
                    0d:33:b9:c0:4a:27:66:f7:4a:17:23:81:d5:74:b1:
                    b2:87:00:cc:9e:76:ce:f0:09:70:21:f7:7b:87:e8:
                    02:d9:a2:e0:7e:e8:c0:ec:d7:7f:cb:42:1b:57:d4:
                    a4:11:b9:33:5a:2b:6f:df:26:88:84:2f:a2:aa:65:
                    20:7e:23:46:bb:2c:a5:bc:c8:d2:9c:83:e7:7a:96:
                    a8:6a:92:a7:85:bf:89:62:76:65:68:c1:48:d1:70:
                    5f:50:09:7c:ed:93:51:31:ec:b3:10:98:50:65:24:
                    f9:c9:fc:a4:ae:d0:3f:46:e7:98:39:c1:ba:f4:c8:
                    95:ad:1e:c4:e4:6e:c2:55:98:f6:d4:25:b4:6d:f4:
                    47:d9:6e:41:7a:7d:f0:e2:8d:34:7c:c5:84:1b:3e:
                    7e:89:77:c7:54:67:57:3a:57:4c:38:a4:88:d3:d4:
                    5e:6d:7f:1e:0d:ca:df:7b:1f:77:d8:cf:f2:13:23:
                    bb:3f:f0:63:25:3c:8b:81:9a:8d:3d:c8:1e:25:9e:
                    2d:4c:28:bb:9e:2b:3d:20:cd:42:98:43:b8:dc:1e:
                    a0:33:92:03:7a:94:28:8b:28:74:30:25:f4:56:15:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:05:1F:71:3E:BD:37:D5:27:9B:DA:96:B7:ED:5D:65:51:33:67
            X509v3 Authority Key Identifier:
                keyid:EC:63:92:BE:BF:A3:56:38:66:04:40:E2:71:62:91:99:A4:56:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5aaa493ee6730d1d0651bc5daec8b738e5737278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/cdbe871b0b7737ec616fa5fdccf566e871ab4da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e514a47a-9d8e-4433-97fd-fb80dfaf4ecf/5aaa493ee6730d1d0651bc5daec8b738e5737278.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.40.0/23
                IPv6:
                  2806:345::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:10:0c:6f:b1:7a:05:8a:ca:b7:8b:5c:81:47:23:1c:66:1f:
         65:14:f9:69:11:4d:53:20:0b:5f:ba:45:19:ef:5e:41:a2:08:
         cb:40:3f:bd:7c:2e:fd:3a:ad:11:e8:f7:88:b7:b2:51:22:b6:
         1e:cd:1d:51:f5:12:8a:62:73:bd:a9:02:d8:cb:d9:91:8d:c1:
         30:86:52:1f:e2:db:20:51:dc:17:e0:15:d0:c6:1f:64:6b:c4:
         f6:c5:c3:7c:e5:a3:a4:f3:7a:25:03:3e:24:e7:cc:d1:af:f7:
         38:cc:f1:d0:6c:b2:75:2a:6e:20:75:6f:b1:86:23:0b:db:99:
         d1:fc:eb:e8:cd:c4:09:ea:4f:80:91:eb:3e:4a:24:ce:8e:7d:
         b3:b6:26:68:3e:2a:cd:e6:71:30:c9:4e:16:53:44:14:70:57:
         1e:2b:50:d1:36:d9:ac:ab:63:bd:46:63:60:2e:7f:65:1a:00:
         43:15:c0:a3:36:42:a4:c5:9e:1b:c6:97:7c:98:c5:67:8c:0f:
         84:72:8b:eb:d7:78:52:84:72:86:f2:bb:f2:ad:5d:48:15:09:
         60:0f:fb:4c:c6:12:c7:31:f1:29:08:40:39:33:c4:f1:8b:bf:
         8e:87:4f:1c:7b:af:19:78:0a:e7:98:4c:fc:4d:91:64:ac:db:
         4d:6f:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----