Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/67ec5e34b53789fb8e706a7d600f9208e6cd7dc8.roa
File:                     67ec5e34b53789fb8e706a7d600f9208e6cd7dc8.roa (raw, json)
Hash identifier:          6NAW2Q5Ci3iFVEmgXnlx5p8/TL39y/NZQSFopPX1+Ws=
Subject key identifier:   B6:04:C2:FD:5E:DA:47:6F:1D:0E:DA:FB:F1:ED:8F:6F:27:7F:F0:B9
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       2494C4
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/67ec5e34b53789fb8e706a7d600f9208e6cd7dc8.roa
Signing time:             Sun 12 Nov 2023 14:17:04 +0000
ROA not before:           Sun 12 Nov 2023 14:17:04 +0000
ROA not after:            Wed 12 Nov 2025 14:17:04 +0000
asID:                     266717
IP address blocks:        45.231.54.0/24 maxlen: 24
                          2801:1d:a002::/47 maxlen: 48
                          2801:1d:a000::/48 maxlen: 48
                          2801:1d:a008::/45 maxlen: 48
                          2801:1d:a006::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397380 (0x2494c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Nov 12 14:17:04 2023 GMT
            Not After : Nov 12 14:17:04 2025 GMT
        Subject: CN=67ec5e34b53789fb8e706a7d600f9208e6cd7dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:4f:c5:2c:ba:ef:1f:ce:d1:46:31:c6:28:
                    f1:c0:ff:c9:2f:ae:cd:85:0b:a4:61:45:f2:67:20:
                    c2:67:d2:af:50:c9:12:af:39:69:0a:23:1d:ae:9d:
                    9e:a1:a8:14:47:6a:37:86:60:b4:7f:f0:41:9a:c2:
                    f1:8f:2f:dc:cd:32:4c:15:99:c9:f3:a7:6c:1b:7a:
                    a5:08:a0:ff:05:5d:ba:40:59:25:8b:66:3b:87:ee:
                    44:e5:ea:15:5b:1a:f9:f8:c7:5f:18:95:8b:c1:40:
                    30:d4:e4:c6:93:2d:ed:89:fb:be:e0:83:72:90:ee:
                    2c:de:cf:e2:50:4f:00:75:40:2b:54:7c:77:9e:e3:
                    82:45:26:c4:d8:3e:dc:f5:ad:a7:61:ad:aa:d8:5e:
                    90:94:52:f5:91:84:4d:ed:0b:a7:a7:ba:dc:e6:3c:
                    a4:3d:ad:93:70:31:5b:14:dd:a4:58:8c:5b:78:ab:
                    f6:00:22:6b:ff:30:d3:83:19:14:4b:60:10:e1:cf:
                    fe:e2:ba:1a:84:09:aa:db:f7:97:47:0b:3b:e5:d8:
                    fd:9e:d3:71:20:00:13:c9:5f:4a:a9:a3:7c:e3:ce:
                    8c:76:89:75:62:9c:a3:d3:97:e7:7d:1c:a9:d3:2d:
                    5a:25:cc:d1:97:de:39:12:72:7e:62:a7:3c:45:9c:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:C2:FD:5E:DA:47:6F:1D:0E:DA:FB:F1:ED:8F:6F:27:7F:F0:B9
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/67ec5e34b53789fb8e706a7d600f9208e6cd7dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24
                IPv6:
                  2801:1d:a000::/48
                  2801:1d:a002::/47
                  2801:1d:a006::-2801:1d:a00f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:d1:9d:00:b4:1d:6f:81:75:ae:9b:ba:e6:eb:de:6f:96:
         de:5f:44:4a:62:b0:87:b6:89:6a:61:25:26:e8:c2:19:f3:52:
         9c:71:e2:b2:78:3b:73:21:d6:50:64:64:8b:4c:15:37:fe:bd:
         79:19:9c:0a:4a:32:07:a5:9a:5c:f5:d1:e7:21:ef:9d:93:0b:
         14:42:ec:8a:e6:13:72:82:ef:98:98:49:4f:32:6e:43:41:2d:
         c2:b5:e4:72:64:3d:6e:3c:cd:f2:81:01:59:91:e3:40:ad:64:
         54:68:ac:a3:97:a4:11:e1:34:52:88:a8:89:18:7d:0f:61:11:
         6e:e1:2f:f5:ba:c8:a9:29:99:9e:9d:a5:a2:27:16:5b:a6:b7:
         fb:8c:6d:76:e6:8c:c6:b2:3a:61:95:ef:f6:f2:e2:fe:6a:39:
         a0:84:1a:e9:8f:ff:84:d1:f6:77:a9:16:70:21:21:ed:49:64:
         ef:e1:18:98:19:de:fa:89:81:0b:59:1a:d3:d5:4e:35:dc:e6:
         c8:44:c1:26:24:03:a2:57:fc:e8:f0:07:9e:67:17:16:7b:c9:
         aa:bf:b6:23:0d:b0:89:45:fe:28:41:7a:a3:ca:aa:d9:9f:c6:
         d8:9f:bd:2c:b5:18:a8:69:e1:23:46:04:d6:02:11:a9:d2:82:
         87:f2:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----