Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/e25fa948cf84f01c22dd340b77e15703bc2f738e.roa
File:                     e25fa948cf84f01c22dd340b77e15703bc2f738e.roa (raw, json)
Hash identifier:          0Q+Ir3evpBD+BmZrgEiddat6g6R262X9rFaHdV5wHWw=
Subject key identifier:   31:06:8F:1E:0C:2F:EC:80:4A:CF:00:66:1B:81:35:03:14:D1:4F:C8
Certificate issuer:       /CN=3de346d72310bab51ac273683c8ba38961c45620
Certificate serial:       C0C2
Authority key identifier: 7E:7B:0B:88:EB:97:2B:61:59:40:D8:62:57:EB:B0:B0:AC:4A:AA:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3de346d72310bab51ac273683c8ba38961c45620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/e25fa948cf84f01c22dd340b77e15703bc2f738e.roa
Signing time:             Tue 25 Jul 2023 13:25:42 +0000
ROA not before:           Mon 24 Jul 2023 13:25:42 +0000
ROA not after:            Fri 25 Jul 2025 13:25:42 +0000
asID:                     267883
IP address blocks:        45.177.204.0/22 maxlen: 24
                          2803:ea60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49346 (0xc0c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de346d72310bab51ac273683c8ba38961c45620
        Validity
            Not Before: Jul 24 13:25:42 2023 GMT
            Not After : Jul 25 13:25:42 2025 GMT
        Subject: CN=e25fa948cf84f01c22dd340b77e15703bc2f738e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:38:83:06:41:b3:4a:b3:10:5b:42:66:b1:
                    2e:74:18:15:28:e7:79:fb:cc:40:51:29:83:c8:f3:
                    09:4c:fe:ba:39:88:40:aa:c6:3a:5d:11:55:c9:bd:
                    a4:4d:13:34:e8:6e:21:4c:d2:e2:0e:d4:31:ec:53:
                    47:a7:ad:a6:ae:47:bb:34:1c:54:f5:5e:e4:d8:e3:
                    c8:5f:f7:34:d3:c1:75:16:cd:75:05:e2:98:6f:85:
                    a2:be:a5:f8:90:c6:c8:6e:ab:7f:0a:e5:10:0f:fb:
                    2a:f9:84:60:5e:22:f1:95:3b:6f:61:40:8f:80:4b:
                    3a:19:dc:81:9c:54:c7:63:48:39:73:49:77:93:01:
                    00:5e:c0:5f:89:41:8d:d1:e6:b2:c8:49:65:25:20:
                    e5:0f:dd:94:07:0b:ef:f4:fb:ff:ab:90:da:b8:df:
                    9c:d5:90:cb:95:67:b0:0b:29:58:d1:bd:3f:bf:f5:
                    ce:29:2b:27:33:fc:39:92:67:c4:6e:ba:a1:3a:00:
                    6c:69:4a:6a:e8:88:3f:7f:89:87:43:95:0b:01:65:
                    1c:02:fb:e6:28:16:04:a1:3e:74:72:4f:e7:d9:88:
                    9e:5e:37:12:a4:92:67:4b:89:22:8c:38:cf:6f:f5:
                    d7:0a:02:76:73:6a:f0:3b:87:0d:88:4f:c8:e9:b2:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:06:8F:1E:0C:2F:EC:80:4A:CF:00:66:1B:81:35:03:14:D1:4F:C8
            X509v3 Authority Key Identifier:
                keyid:7E:7B:0B:88:EB:97:2B:61:59:40:D8:62:57:EB:B0:B0:AC:4A:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3de346d72310bab51ac273683c8ba38961c45620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/e25fa948cf84f01c22dd340b77e15703bc2f738e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/3de346d72310bab51ac273683c8ba38961c45620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.204.0/22
                IPv6:
                  2803:ea60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:39:d0:a6:08:0e:5b:3e:f3:f2:ce:83:69:26:a8:ab:06:
         dc:ad:c7:9a:28:d1:6b:bf:72:79:84:29:e5:39:89:54:5b:64:
         96:63:b7:7a:24:ec:29:04:c8:92:4b:b2:9f:37:65:66:20:b0:
         5c:85:be:2d:49:97:0f:cd:ae:69:92:e1:dd:89:ee:db:2b:fb:
         7c:85:50:af:12:b5:02:b7:db:ee:98:fb:11:66:d0:d4:34:69:
         bc:20:d1:69:ee:ec:97:5f:3a:71:0e:ec:38:51:2f:90:d0:78:
         0c:03:ee:30:3d:e1:86:d8:27:03:5a:9c:1d:a9:d9:37:e5:d1:
         7a:c4:66:02:4b:09:dc:b8:3d:e1:39:35:46:af:54:bd:77:b2:
         f3:a9:48:53:4a:b5:40:ef:b5:5d:b6:bc:dc:b1:91:76:cd:08:
         e5:7c:d7:98:d9:4a:24:a8:7b:47:d1:f5:42:24:c0:26:2a:5b:
         78:d4:59:9d:6b:24:63:c0:26:6f:6a:fc:7c:eb:95:4d:77:61:
         a7:5d:aa:72:14:57:88:b6:5d:9b:17:66:22:27:e3:7e:a0:eb:
         26:da:80:6e:ab:0b:c2:67:92:17:c7:c4:1b:ae:bc:36:93:25:
         48:ee:38:0d:3e:95:36:88:b5:10:f5:97:4f:b7:29:28:fa:b7:
         0e:18:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----