Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/4de048f51f733cb89279290ac577a43a8c95e502.roa
File:                     4de048f51f733cb89279290ac577a43a8c95e502.roa (raw, json)
Hash identifier:          HqNYcPiTWq2w+b39ExJXH27E1CijKoHXDj90EHe3G+M=
Subject key identifier:   92:EB:A9:B5:4B:70:5F:F4:01:6D:50:35:E2:EC:1A:01:F4:88:4C:AC
Certificate issuer:       /CN=94373e51445c3d1c9effa7de1799d8fbf06485a9
Certificate serial:       21BB45
Authority key identifier: 04:B0:38:1B:45:4A:84:75:75:1A:AD:A3:2A:9F:91:63:F7:6A:C5:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94373e51445c3d1c9effa7de1799d8fbf06485a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/4de048f51f733cb89279290ac577a43a8c95e502.roa
Signing time:             Mon 01 Apr 2024 19:32:36 +0000
ROA not before:           Mon 01 Apr 2024 19:32:35 +0000
ROA not after:            Sun 01 Apr 2029 19:32:35 +0000
asID:                     265848
IP address blocks:        45.224.104.0/22 maxlen: 22
                          2803:4a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210629 (0x21bb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94373e51445c3d1c9effa7de1799d8fbf06485a9
        Validity
            Not Before: Apr  1 19:32:35 2024 GMT
            Not After : Apr  1 19:32:35 2029 GMT
        Subject: CN=4de048f51f733cb89279290ac577a43a8c95e502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:3a:a8:0a:d4:72:93:bb:21:bc:b9:21:19:
                    22:fc:ec:c4:0b:b5:09:1b:d8:9f:5c:e2:ec:49:e8:
                    57:bc:dd:39:24:90:e9:af:1f:e1:40:9b:51:c9:2e:
                    cd:28:18:0e:b9:bf:f5:92:96:7e:e9:8a:f6:3d:8a:
                    f2:05:fb:ac:b6:85:80:f2:98:52:03:21:28:64:53:
                    5f:85:83:7d:c8:34:5d:f0:62:99:db:ad:93:58:4a:
                    c4:7e:ae:e3:61:62:10:a6:0a:53:7f:30:7d:89:e0:
                    6d:a2:ec:b0:9b:6e:7c:f0:c9:31:67:a6:8c:fb:32:
                    a3:23:71:47:c3:f4:8e:36:0a:b2:bd:4b:e1:63:67:
                    a9:40:1a:30:ae:c6:5f:fb:df:3f:5c:4e:02:fc:7e:
                    ec:18:d3:c7:8a:1a:99:00:e9:28:4a:63:e5:b3:c4:
                    84:a5:cc:13:2b:c0:bc:58:38:d2:f6:d4:a1:ae:a3:
                    c9:ea:71:98:ff:95:8f:5c:82:56:24:29:10:95:ac:
                    bc:5f:16:53:d5:16:bd:b7:a4:04:4e:24:98:02:9b:
                    eb:15:9a:b5:11:b3:3f:a0:3f:3f:8e:a8:03:12:29:
                    34:14:87:c2:f6:69:15:f0:a1:3f:40:ed:eb:0e:b1:
                    0a:76:88:16:96:98:39:7f:e4:fc:14:f9:31:4f:b2:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EB:A9:B5:4B:70:5F:F4:01:6D:50:35:E2:EC:1A:01:F4:88:4C:AC
            X509v3 Authority Key Identifier:
                keyid:04:B0:38:1B:45:4A:84:75:75:1A:AD:A3:2A:9F:91:63:F7:6A:C5:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94373e51445c3d1c9effa7de1799d8fbf06485a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/4de048f51f733cb89279290ac577a43a8c95e502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8e30337-6e7e-42f1-87d3-fa1fca5d2c22/94373e51445c3d1c9effa7de1799d8fbf06485a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.104.0/22
                IPv6:
                  2803:4a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:bc:7c:64:33:96:40:e2:1b:13:d5:a1:0e:16:8d:42:39:
         9a:ea:9a:49:b1:e6:84:ee:c2:c5:97:b4:19:eb:50:da:57:5e:
         eb:6c:7d:c9:a8:5c:2b:d8:f3:e1:d2:9b:7d:50:ab:60:de:07:
         9a:6e:95:af:02:76:c6:83:81:08:0a:f2:23:be:bf:fd:35:2b:
         60:d0:70:13:42:86:2f:41:2a:66:fd:a9:7b:25:d5:2e:b4:49:
         d0:ab:13:be:44:14:8b:40:7f:59:84:3f:b8:45:62:0a:65:ec:
         9b:25:e6:cd:2a:b5:82:8b:2d:2b:f2:96:4a:5e:d3:50:6d:42:
         99:fb:c3:27:a9:e0:e8:8f:18:c7:50:8f:c5:b1:d0:cd:b3:46:
         27:3a:d2:84:4b:df:26:6e:67:ef:a6:28:dc:b8:4e:e5:07:5a:
         f2:76:8a:cc:d9:41:8b:30:12:04:4a:ec:34:ac:c9:15:2c:86:
         58:85:f6:c7:3f:2e:3f:53:44:d5:3c:97:11:15:99:a3:00:e2:
         af:07:6c:c3:cf:e8:20:ed:a7:d3:93:b1:08:5c:d3:cc:b7:3f:
         f9:65:d1:5a:78:12:cf:2e:61:5a:f2:04:82:e5:ab:82:4e:5e:
         42:d5:1f:e2:8b:1c:95:7d:f6:b6:58:f2:31:ef:a9:64:64:b1:
         fd:43:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----