Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/fc20577fc25b7f9c26f8f4b86f211a6cc9c99d74.roa
File:                     fc20577fc25b7f9c26f8f4b86f211a6cc9c99d74.roa (raw, json)
Hash identifier:          g3codHKX6HvjtNQKXnieLQEjIWKjwmZa2hm71Ku5yo4=
Subject key identifier:   05:A7:A9:59:CA:DD:EB:83:14:B0:65:FE:D7:7F:FD:90:EC:97:CA:22
Certificate issuer:       /CN=f85310cb09e317af1a1a72943ec326837f291fc2
Certificate serial:       1F1F62
Authority key identifier: 17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/fc20577fc25b7f9c26f8f4b86f211a6cc9c99d74.roa
Signing time:             Sun 25 Jun 2023 22:14:21 +0000
ROA not before:           Sat 24 Jun 2023 22:14:21 +0000
ROA not after:            Wed 25 Jun 2025 22:14:21 +0000
asID:                     269855
IP address blocks:        45.187.48.0/22 maxlen: 24
                          2803:a760::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039650 (0x1f1f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85310cb09e317af1a1a72943ec326837f291fc2
        Validity
            Not Before: Jun 24 22:14:21 2023 GMT
            Not After : Jun 25 22:14:21 2025 GMT
        Subject: CN=fc20577fc25b7f9c26f8f4b86f211a6cc9c99d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:f3:31:ad:97:6f:5c:c2:58:d6:f9:93:1a:
                    b9:4d:81:bc:9b:c6:68:d4:23:8c:8f:61:f8:12:57:
                    19:fc:74:1f:37:bf:99:10:39:36:59:34:fe:7c:8f:
                    df:c3:d2:2c:c1:40:5d:ce:70:a3:41:42:46:8b:1a:
                    43:86:66:90:3d:12:97:83:a7:06:b9:d6:17:e3:ce:
                    ec:75:c4:9e:08:8e:84:57:e9:e3:45:87:01:81:a9:
                    37:a6:9c:0f:07:00:e9:69:1f:93:16:f0:29:fc:6b:
                    c0:e2:6c:84:9d:57:30:b4:47:f4:b3:62:fe:96:c4:
                    0b:8b:86:de:45:24:87:c0:4f:e9:22:c0:b7:86:7a:
                    3a:c8:99:83:8f:a8:19:2d:9c:c9:91:4c:f4:64:a8:
                    2e:ce:b2:71:81:4d:57:11:37:9c:83:d4:ac:34:66:
                    42:89:ef:a7:df:f3:06:e2:6d:85:3f:53:83:70:28:
                    08:33:4c:a8:fd:78:77:e6:06:11:f1:9e:55:1b:fd:
                    32:47:62:44:b5:3d:a1:42:5f:1e:38:d6:0c:86:53:
                    ef:ed:30:bd:89:b9:c1:13:11:f2:51:69:8c:c4:4f:
                    ec:66:ae:6b:bf:90:78:57:20:03:6f:78:7f:bb:dc:
                    f2:04:15:d3:bd:e9:a6:dc:2a:63:66:d6:e8:17:c1:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A7:A9:59:CA:DD:EB:83:14:B0:65:FE:D7:7F:FD:90:EC:97:CA:22
            X509v3 Authority Key Identifier:
                keyid:17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/fc20577fc25b7f9c26f8f4b86f211a6cc9c99d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.48.0/22
                IPv6:
                  2803:a760::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:0d:66:6b:b1:b7:bd:56:0b:d6:3a:84:15:e7:f3:6b:34:
         d5:b8:c0:80:79:10:7b:aa:32:b2:7f:93:e6:10:ec:4c:7e:37:
         3c:e0:5f:07:cd:0d:9c:9a:8b:35:ea:77:7c:99:c2:60:13:f2:
         46:ae:99:d9:5e:a4:39:e3:14:0a:5e:6b:5e:ab:8e:34:37:aa:
         cf:ae:c8:e6:48:84:84:db:33:24:86:64:f6:62:e3:1e:4d:38:
         ad:ab:2b:2c:ce:f7:a8:c5:70:75:ce:c5:98:fc:aa:47:bf:56:
         ab:f3:24:cd:5d:50:1c:b9:2e:ef:0d:ab:ee:e9:a4:11:0e:fb:
         a3:b0:94:8f:ef:46:be:76:97:37:ad:ab:12:1e:78:b8:41:1d:
         93:4f:e2:72:3d:2f:58:98:f6:50:9d:8a:9f:15:6b:eb:e4:9a:
         d9:0b:a8:1d:33:10:59:38:46:d7:c8:6f:70:85:58:38:cc:2f:
         74:75:f2:e9:2d:d6:f1:bf:34:c8:7f:d4:53:90:ed:a0:d9:63:
         04:42:57:bb:90:91:ea:38:14:c3:d9:56:f4:4e:a6:df:ab:85:
         2a:eb:2e:68:a7:7c:31:e7:96:0e:54:dc:68:50:38:cb:1a:61:
         d8:19:0f:0b:18:dc:38:5c:5f:7e:67:a9:d7:86:dd:20:99:c7:
         83:f4:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----