Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/0efae12ed90f5ebaa329eb1b9c46fce4ad8bf646.roa
File:                     0efae12ed90f5ebaa329eb1b9c46fce4ad8bf646.roa (raw, json)
Hash identifier:          JEqojTitMKxFhljVQxxgCvE7UD0elmlh4VIr2xj/3oo=
Subject key identifier:   74:36:48:8E:9A:C1:35:D6:F6:E3:12:9C:A6:DF:95:EC:A5:96:7E:3E
Certificate issuer:       /CN=cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4
Certificate serial:       134390
Authority key identifier: 89:1E:94:5D:0F:B8:31:0C:7B:4B:D0:7A:D8:3C:D7:AB:FA:ED:7C:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/0efae12ed90f5ebaa329eb1b9c46fce4ad8bf646.roa
Signing time:             Fri 05 May 2023 21:05:29 +0000
ROA not before:           Thu 04 May 2023 21:05:28 +0000
ROA not after:            Mon 05 May 2025 21:05:28 +0000
asID:                     267772
IP address blocks:        45.169.251.0/24 maxlen: 24
                          2803:c7a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262480 (0x134390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4
        Validity
            Not Before: May  4 21:05:28 2023 GMT
            Not After : May  5 21:05:28 2025 GMT
        Subject: CN=0efae12ed90f5ebaa329eb1b9c46fce4ad8bf646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:15:4e:0a:e9:3f:fd:03:7c:28:a8:50:e5:
                    2c:48:ad:d1:b3:22:70:42:d4:70:8a:07:c7:3b:6c:
                    6d:31:5d:13:85:03:5f:b6:99:a1:10:cb:e2:c4:99:
                    7c:d0:3f:2a:1b:fe:f0:b6:21:5a:d8:30:df:41:ad:
                    10:4c:e5:67:66:4c:41:ba:92:b8:87:a7:5d:ca:bc:
                    90:be:8e:cd:72:5e:2c:83:25:50:53:88:04:38:2c:
                    05:51:f8:f5:6f:f8:a3:43:34:d4:50:60:5f:13:04:
                    19:6b:fc:f6:bc:04:9f:5c:07:25:01:9a:4a:d4:0a:
                    83:33:13:57:cb:a5:6a:1d:3a:1d:a7:c9:a6:c5:87:
                    31:f5:d4:00:f5:57:e1:fb:54:47:5c:37:e4:be:a0:
                    6c:23:c9:33:8c:0b:08:f0:4c:5d:c0:b8:74:df:70:
                    4d:3a:60:a1:25:9a:fd:68:69:65:53:ff:e7:c4:78:
                    73:53:ac:60:05:f7:5b:36:5b:91:1f:ff:a8:29:c0:
                    42:69:88:ea:65:d8:34:16:ae:2d:7e:ae:f3:34:1e:
                    77:bc:7a:d0:a6:1f:8b:4a:42:78:fb:62:9d:95:de:
                    b3:99:ac:76:87:73:4b:7f:55:4d:ba:4e:4f:e5:30:
                    b2:a2:49:01:42:10:4b:61:1c:ba:fb:6f:b1:62:2c:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:36:48:8E:9A:C1:35:D6:F6:E3:12:9C:A6:DF:95:EC:A5:96:7E:3E
            X509v3 Authority Key Identifier:
                keyid:89:1E:94:5D:0F:B8:31:0C:7B:4B:D0:7A:D8:3C:D7:AB:FA:ED:7C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/0efae12ed90f5ebaa329eb1b9c46fce4ad8bf646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.251.0/24
                IPv6:
                  2803:c7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:5c:cc:88:6e:3a:e8:a6:97:3c:e7:37:90:8e:ae:b5:7b:
         49:b3:b6:a6:7d:fb:31:c2:95:c7:f6:d1:55:4a:6d:86:56:fd:
         4a:08:58:0d:38:f0:63:6d:ad:c0:ba:0b:36:96:8e:ab:b0:d4:
         65:cf:21:65:ed:0f:9a:12:e9:3c:8d:0a:70:1f:33:1f:0b:1b:
         ef:5f:74:09:e7:90:0a:45:e6:e4:22:cf:7e:3f:96:3b:0e:5b:
         90:df:b4:79:e7:1a:e3:b9:9e:ba:73:b6:de:0c:61:bf:c5:44:
         87:bf:fc:ab:07:ce:bc:20:90:6d:46:02:3b:03:35:6a:fc:3a:
         61:51:72:0c:f8:f0:17:ca:01:87:6a:8f:fa:31:d0:7a:7b:58:
         c8:4b:b5:d6:ac:dc:12:60:61:b1:80:a2:d6:95:b6:98:6d:aa:
         83:a3:d1:cf:ba:2a:65:5a:02:f8:6c:9d:c6:ea:6e:40:57:a1:
         79:7b:8f:8b:f3:29:10:d1:d0:12:90:ce:2c:3d:f5:2c:fa:06:
         12:fa:8a:05:83:52:05:15:56:67:a7:e6:ba:f7:5b:ea:c6:cf:
         ab:b6:32:b0:09:87:ae:8d:ec:22:9b:68:a1:41:e7:4d:73:90:
         64:76:20:50:00:16:eb:58:96:67:78:2e:7f:cc:ab:6f:3b:41:
         5c:dc:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----