Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/e203c1e6941e02f21960a4f4b286f2767cd21113.roa
File:                     e203c1e6941e02f21960a4f4b286f2767cd21113.roa (raw, json)
Hash identifier:          vMeFrCqEfg9o6tz1JAp0MjqK2BUxWmnFV+z6g2WrRuU=
Subject key identifier:   0C:5F:92:2E:45:B8:ED:79:09:13:C5:0E:FB:40:A6:FC:6B:97:32:0D
Certificate issuer:       /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial:       24CF03
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/e203c1e6941e02f21960a4f4b286f2767cd21113.roa
Signing time:             Tue 17 Oct 2023 20:19:31 +0000
ROA not before:           Mon 16 Oct 2023 20:19:31 +0000
ROA not after:            Fri 17 Oct 2025 20:19:31 +0000
asID:                     264668
IP address blocks:        45.71.200.0/22 maxlen: 24
                          2803:2c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412291 (0x24cf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
        Validity
            Not Before: Oct 16 20:19:31 2023 GMT
            Not After : Oct 17 20:19:31 2025 GMT
        Subject: CN=e203c1e6941e02f21960a4f4b286f2767cd21113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:d3:45:40:0a:49:e1:bc:81:d5:69:8c:9f:
                    9f:93:2d:9c:94:d4:11:ac:94:f1:2a:f9:e0:2d:8e:
                    f4:2c:5f:d5:e7:3e:dc:a4:47:eb:83:be:87:20:4c:
                    c4:f4:12:eb:3a:69:28:63:bf:5d:4f:7b:71:cb:74:
                    d3:cd:7e:2f:02:0a:fa:89:43:d1:fe:83:3f:aa:2f:
                    ea:7e:f3:74:06:66:d1:db:5c:6f:53:8a:fb:8a:35:
                    34:8d:97:cf:99:e6:58:a2:be:6f:29:16:71:4b:92:
                    cb:00:4f:c5:c3:ef:b6:2d:0a:4e:94:03:a0:96:90:
                    d1:6c:9e:11:b9:19:07:c9:ca:61:04:13:76:97:75:
                    e9:31:71:b7:af:9c:ba:9c:b1:1a:82:7e:ce:42:97:
                    e4:8d:8c:d5:a5:ec:2c:e3:59:ef:01:31:38:8c:23:
                    14:2b:50:5d:f1:54:8b:81:7b:b9:95:df:9e:12:d3:
                    32:bf:93:a1:c1:c2:c1:4d:86:d9:dc:f9:9c:70:44:
                    07:74:53:4d:41:a4:98:bf:5c:7c:3c:b9:0c:0b:10:
                    6c:3f:1c:28:37:5e:85:d9:9d:84:e1:0f:56:b7:54:
                    d3:8d:c7:7a:a1:f5:7d:2c:12:70:a1:00:1e:e4:b3:
                    eb:ba:2f:aa:34:e5:a1:38:c1:a9:3c:ec:35:69:11:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5F:92:2E:45:B8:ED:79:09:13:C5:0E:FB:40:A6:FC:6B:97:32:0D
            X509v3 Authority Key Identifier:
                keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/e203c1e6941e02f21960a4f4b286f2767cd21113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.200.0/22
                IPv6:
                  2803:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:40:1a:d2:74:5f:6e:a6:94:28:67:ba:4f:76:9a:bc:ba:d1:
         4b:4b:5f:c0:ca:29:4c:0d:e7:6f:f2:36:69:a5:37:b3:71:10:
         f2:a8:3c:db:53:81:a3:48:9c:10:75:ea:fe:ca:ef:e7:29:99:
         24:b2:75:d2:56:e5:74:f0:ae:fb:58:63:54:bb:83:da:52:24:
         bc:56:71:a8:19:42:cb:03:24:63:74:81:43:b2:1b:3f:0e:d9:
         f4:c3:11:99:9b:97:26:e0:cd:c6:9f:89:08:02:6b:64:93:04:
         ac:d4:f4:0d:11:48:a9:45:09:de:f7:6a:90:f2:66:e2:7c:fe:
         51:eb:ce:02:cb:2e:6d:7d:08:f2:8a:24:66:40:a2:8d:15:d9:
         40:3c:a1:2d:b8:5a:9b:34:16:e4:a1:74:5b:73:71:03:8a:7d:
         83:5b:66:66:37:54:65:a9:e6:62:3f:49:0b:b2:95:d4:08:cf:
         2b:71:25:8f:78:f7:e2:0d:2c:64:e1:68:bb:7c:88:f1:e5:13:
         2e:1b:70:56:70:d6:cc:92:eb:ca:89:a8:70:4b:2c:73:81:60:
         47:3c:23:7c:1f:bf:52:ce:f8:0b:09:e8:b0:91:9f:b0:d5:c9:
         2e:29:bd:84:c1:96:c0:67:f0:7a:6a:c8:e8:1d:27:3a:1a:64:
         1f:14:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----