Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/e15efc4d84d449a85f66b68462917881f609dfa4.roa
File:                     e15efc4d84d449a85f66b68462917881f609dfa4.roa (raw, json)
Hash identifier:          rzNrYZClgGAkibdSkJlzQyNR3llWmxHl1R4l+aAoL2I=
Subject key identifier:   64:F8:A9:72:05:DC:7A:10:B1:F5:2E:FB:CA:77:7D:99:B7:33:8C:DB
Certificate issuer:       /CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
Certificate serial:       0F9E
Authority key identifier: 69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/e15efc4d84d449a85f66b68462917881f609dfa4.roa
Signing time:             Mon 25 Sep 2023 00:10:40 +0000
ROA not before:           Sun 24 Sep 2023 00:10:40 +0000
ROA not after:            Thu 25 Sep 2025 00:10:40 +0000
asID:                     64153
IP address blocks:        45.68.40.0/22 maxlen: 22
                          2801:19:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3998 (0xf9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
        Validity
            Not Before: Sep 24 00:10:40 2023 GMT
            Not After : Sep 25 00:10:40 2025 GMT
        Subject: CN=e15efc4d84d449a85f66b68462917881f609dfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:96:81:37:72:b9:03:43:51:bc:5e:a9:10:
                    11:cc:04:36:47:d5:cd:54:89:c7:91:f8:65:e0:6c:
                    37:b9:a7:5a:84:e1:f9:f6:7a:85:5e:50:0b:8c:21:
                    6e:1b:7f:39:86:ce:5b:5f:66:9a:58:16:b5:0a:cf:
                    8f:b5:69:7d:ea:e9:68:fe:22:af:18:15:45:96:34:
                    26:ad:21:87:28:cc:f3:4d:91:e8:1b:50:b1:f5:fe:
                    7b:22:34:65:02:02:21:08:72:ec:4c:1a:b5:40:52:
                    30:f3:93:e6:94:b9:64:83:bc:be:3f:16:6c:0f:b0:
                    dc:e1:e2:ba:83:62:f1:5b:0b:09:bb:a0:31:f8:0d:
                    a5:34:52:0b:87:bc:2e:96:45:10:74:98:e1:ba:54:
                    9e:9e:37:ed:76:f8:61:f7:37:9f:a9:b8:3e:12:0a:
                    dd:ea:2e:4c:1a:6a:31:53:ec:5a:73:61:1e:91:08:
                    d4:e1:79:8b:83:d9:cb:02:fb:88:07:77:fe:c8:9c:
                    28:9a:4c:9b:90:60:8f:45:74:47:ac:42:83:e7:68:
                    b0:4b:63:f9:3d:da:5f:10:9f:ba:ac:47:2e:6a:fe:
                    e1:a6:f4:0c:97:6c:19:44:85:c8:9f:d6:29:d7:14:
                    ea:0b:e9:1e:a7:5c:69:92:28:d6:6c:75:2a:9f:33:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F8:A9:72:05:DC:7A:10:B1:F5:2E:FB:CA:77:7D:99:B7:33:8C:DB
            X509v3 Authority Key Identifier:
                keyid:69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/e15efc4d84d449a85f66b68462917881f609dfa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/58f96ca109bc5993a1bf6e91b30fce649102e01e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.40.0/22
                IPv6:
                  2801:19:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:40:bd:64:dd:30:12:b4:f4:c2:30:c9:77:d4:22:25:5b:
         34:66:a3:4f:64:06:e5:4c:65:7f:ef:37:d3:d3:69:b3:58:f7:
         4e:60:6a:0c:f1:a5:fc:92:0e:fb:2d:54:e3:2e:de:9e:a2:58:
         4a:83:40:bd:fd:8d:e0:50:ad:8e:28:c2:2d:05:95:a5:07:a5:
         84:f6:f2:03:25:28:c4:2e:23:37:a9:2a:20:b5:14:65:a3:c4:
         03:e7:9d:08:c5:77:56:78:bd:09:fb:b8:bc:d3:9a:b8:41:4d:
         b8:cb:1a:92:e9:41:bc:36:0b:f7:c6:26:e8:23:53:b2:72:54:
         3c:cc:2f:87:d2:20:b9:33:90:e9:14:d8:c5:cc:5b:42:69:4a:
         74:f0:33:ee:7e:1a:e6:20:64:d4:8d:7d:c6:cd:9d:63:66:96:
         d0:aa:33:8f:1d:de:1b:f9:56:0e:97:72:4f:08:0b:6c:53:f9:
         93:47:da:88:e4:1a:9d:fb:7f:47:0a:ae:17:a1:2f:7d:1e:ca:
         3d:c1:fd:d7:73:1a:53:a9:7c:50:70:38:57:01:13:18:e1:fe:
         96:85:48:ae:27:66:45:40:f3:38:a3:9b:1e:84:b7:4d:d4:6e:
         54:8e:9e:31:5c:81:72:02:e5:b2:b5:e9:13:14:73:e6:0c:53:
         b2:b6:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----