Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/5b2e55ba301c7247e361b43596ddad354e37ea36.roa
File:                     5b2e55ba301c7247e361b43596ddad354e37ea36.roa (raw, json)
Hash identifier:          zBeOga3jWwVZQjvwKEb0N1846vYti8ktbtdUBMIGYgI=
Subject key identifier:   6C:29:21:31:24:EC:7D:BE:14:CA:52:B4:C5:E2:74:A5:37:1C:CB:86
Certificate issuer:       /CN=1579ac51896b95038727e3223b1d7ae2507073b5
Certificate serial:       23DD01
Authority key identifier: 98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/5b2e55ba301c7247e361b43596ddad354e37ea36.roa
Signing time:             Fri 18 Aug 2023 02:50:56 +0000
ROA not before:           Thu 17 Aug 2023 02:50:54 +0000
ROA not after:            Mon 18 Aug 2025 02:50:54 +0000
asID:                     395161
IP address blocks:        170.80.108.0/22 maxlen: 24
                          138.186.140.0/22 maxlen: 24
                          45.228.67.0/24 maxlen: 24
                          190.103.176.0/22 maxlen: 24
                          2800:ba0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350337 (0x23dd01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1579ac51896b95038727e3223b1d7ae2507073b5
        Validity
            Not Before: Aug 17 02:50:54 2023 GMT
            Not After : Aug 18 02:50:54 2025 GMT
        Subject: CN=5b2e55ba301c7247e361b43596ddad354e37ea36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:a7:37:1c:6b:66:77:47:e5:c7:a3:23:5d:
                    0e:4d:ae:c6:51:eb:4a:64:61:89:43:90:59:db:af:
                    92:2d:2a:b2:8b:d3:8c:5f:b9:c1:de:5c:9c:54:a6:
                    66:04:41:ab:a1:8b:7c:c0:52:e5:11:08:49:e2:05:
                    67:9c:bc:36:5e:75:0a:65:f2:cb:79:47:79:ff:d5:
                    49:92:28:17:d8:d5:72:e8:dc:60:c2:49:6c:67:24:
                    73:f6:22:82:21:46:86:5c:3d:eb:61:97:8d:f4:cd:
                    ad:d6:2d:ef:a2:a4:ad:6a:18:27:62:a7:65:4d:54:
                    d2:76:fc:e3:c1:1c:5c:59:48:10:e0:b2:c2:4b:c3:
                    44:f7:46:87:bf:20:6d:5f:06:1e:7e:c3:58:8b:3e:
                    79:8b:cd:88:c3:a7:91:f4:3e:e5:6b:17:00:0d:7a:
                    3e:78:f5:17:1a:4b:46:35:40:93:9f:06:b2:93:f6:
                    6c:f7:4d:f2:45:24:b3:de:ce:9e:64:81:7e:a7:e0:
                    43:89:8a:a4:e3:c2:57:fb:e4:52:17:f6:3f:56:aa:
                    24:78:af:50:24:20:10:4b:28:63:ec:37:cd:6b:78:
                    bd:f1:8e:42:9e:0f:01:0b:84:22:ad:df:37:ad:ff:
                    f8:5c:20:0e:69:a0:87:83:c3:41:ab:6f:0e:fd:91:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:29:21:31:24:EC:7D:BE:14:CA:52:B4:C5:E2:74:A5:37:1C:CB:86
            X509v3 Authority Key Identifier:
                keyid:98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/5b2e55ba301c7247e361b43596ddad354e37ea36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24
                  138.186.140.0/22
                  170.80.108.0/22
                  190.103.176.0/22
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:a2:25:25:d7:63:ff:93:89:76:50:9e:5b:63:ae:6a:7b:
         3b:12:14:5f:c0:1c:bd:87:60:5c:26:68:f2:92:8a:50:24:4f:
         34:fc:b6:9a:26:b4:45:f6:b1:c4:40:ba:c5:ec:30:9e:61:c9:
         75:65:ee:72:72:e2:f2:3d:db:c3:56:66:1f:ff:ea:2e:0d:eb:
         fe:0a:7f:fb:69:4f:06:d0:11:b0:33:2d:d7:c5:b8:93:23:89:
         0e:bc:6e:1f:bc:13:b6:78:6b:9b:b0:5d:88:6c:4b:82:fd:14:
         15:88:37:f1:02:40:44:20:80:e3:2a:da:92:23:ed:a2:92:56:
         8f:58:9e:33:7c:3a:e6:01:0c:f8:60:18:93:f6:20:72:58:b4:
         43:5e:a9:42:be:1b:40:71:5a:48:48:ab:af:e3:c7:7c:8c:86:
         58:37:f0:76:06:8c:98:93:6a:2f:b2:93:ca:28:4d:d9:f3:5f:
         1e:dd:f8:2e:cd:5e:3b:74:e8:27:dd:98:00:e5:2e:9e:58:89:
         e0:56:fe:ee:f7:b7:80:14:85:15:fd:61:94:fb:cb:95:98:dd:
         69:e2:5a:bf:92:6e:73:72:76:f6:4c:ae:aa:26:a3:bc:fc:c1:
         f0:5e:42:f0:28:31:c0:af:60:c1:2a:20:f5:e3:14:89:7d:91:
         73:88:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----