Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/d6cfb371f6e5f6ffacd93ea58d5a19252a475230.roa
File:                     d6cfb371f6e5f6ffacd93ea58d5a19252a475230.roa (raw, json)
Hash identifier:          NghxKGdVkEmlGvqaGSa2oHrq9GGg7JMW/l0ZfFkoSMM=
Subject key identifier:   C3:34:BA:01:A2:5D:89:BC:06:1C:30:C3:B1:BF:0D:DF:DC:3B:03:E5
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       133391
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/d6cfb371f6e5f6ffacd93ea58d5a19252a475230.roa
Signing time:             Mon 26 Jun 2023 19:46:25 +0000
ROA not before:           Sun 25 Jun 2023 19:46:24 +0000
ROA not after:            Thu 26 Jun 2025 19:46:24 +0000
asID:                     265671
IP address blocks:        45.4.206.0/23 maxlen: 23
                          2803:1ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258385 (0x133391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: Jun 25 19:46:24 2023 GMT
            Not After : Jun 26 19:46:24 2025 GMT
        Subject: CN=d6cfb371f6e5f6ffacd93ea58d5a19252a475230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:73:fd:6f:8d:b5:2b:c8:72:a9:de:96:69:62:
                    86:6b:2c:11:77:4c:98:b0:12:8e:cd:03:41:13:5f:
                    a9:92:8f:ac:26:20:da:ec:2f:64:65:30:3f:e3:a0:
                    32:3f:b4:9e:a9:b7:69:e2:71:a1:24:1b:98:ad:9c:
                    03:2c:9b:b1:98:50:1b:4b:d9:2e:e7:2e:68:22:a5:
                    6d:a4:db:cb:c8:71:55:ea:06:16:89:f2:ec:92:26:
                    3c:59:53:c8:d1:8a:79:0e:df:32:db:f9:dc:00:9e:
                    6e:e1:27:6a:ff:92:b6:be:9e:c5:43:72:44:6e:9a:
                    23:bd:55:0c:d4:ae:6d:86:67:db:4e:63:d8:d8:2b:
                    f6:d7:f8:a5:dd:94:8c:d6:e4:2f:f7:fc:8c:40:67:
                    48:57:79:66:ea:4e:c8:5f:22:29:58:21:9b:a6:11:
                    1b:c3:65:48:2d:88:34:5c:e7:6d:d9:0a:1f:9f:fa:
                    57:5d:c5:10:b5:aa:f5:a1:5b:dc:ce:c2:b2:68:e2:
                    63:4e:29:e4:fd:ac:64:c8:44:ae:4d:9a:c4:64:94:
                    dd:ef:88:8a:07:a3:4a:f5:27:24:c6:15:70:81:74:
                    f1:8d:0c:ce:b7:71:49:12:f5:98:88:23:23:fe:00:
                    0f:6c:e3:d3:13:c0:3e:f1:4b:f6:5a:c6:94:a4:de:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:34:BA:01:A2:5D:89:BC:06:1C:30:C3:B1:BF:0D:DF:DC:3B:03:E5
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/d6cfb371f6e5f6ffacd93ea58d5a19252a475230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.206.0/23
                IPv6:
                  2803:1ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:59:90:be:b6:b2:3d:ee:af:c2:de:44:97:4c:5c:54:34:ea:
         ca:c6:b7:f1:ea:cd:e4:de:b7:93:82:7a:4e:e8:d7:e4:d2:ed:
         fe:0e:0a:07:65:ee:6e:14:e2:9b:23:bb:bc:ae:55:36:12:a4:
         dd:18:e7:f4:74:05:7d:58:eb:59:11:02:fc:cf:95:1a:f9:c9:
         ff:07:93:01:d7:ce:fc:79:15:6f:6d:c7:3e:50:c0:fa:1a:20:
         9d:02:e4:19:cc:46:a6:f2:86:92:6e:48:16:d4:a1:67:a4:0a:
         f7:f7:98:fe:4b:04:69:14:2a:a7:ad:21:55:dc:18:bd:ee:09:
         a4:93:64:32:d4:de:32:e7:b2:fc:45:1d:82:17:d4:24:55:cf:
         07:96:94:e1:b2:ed:b9:6d:1a:f5:b0:dd:f2:b8:ad:41:4f:ff:
         a6:90:d6:19:1d:68:2f:30:d9:0a:e6:a2:67:32:1c:f0:ac:08:
         12:37:77:12:17:26:98:fc:bb:be:4d:7c:35:dc:ae:07:60:24:
         3b:f5:75:95:a0:75:bd:cc:56:cb:cc:48:f0:64:97:da:83:66:
         bb:f4:1d:1f:23:14:c6:2c:98:61:5f:54:b2:93:91:44:72:71:
         31:c1:db:70:4a:0e:a5:57:28:c6:a5:97:49:7f:49:b6:3b:f5:
         c4:97:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----