Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/312d574b1fac3794a5153cce8e7d94274b41c2b4.roa
File:                     312d574b1fac3794a5153cce8e7d94274b41c2b4.roa (raw, json)
Hash identifier:          gP7qxrIk9eE+ZjQE6qXS+cdc3RvlkRoeAnDMKGcWR8k=
Subject key identifier:   65:B8:44:88:FF:7A:4B:79:38:2B:6E:68:7B:9F:43:EB:ED:96:89:CA
Certificate issuer:       /CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
Certificate serial:       18FD55
Authority key identifier: ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/312d574b1fac3794a5153cce8e7d94274b41c2b4.roa
Signing time:             Tue 12 Jul 2022 17:59:50 +0000
ROA not before:           Tue 12 Jul 2022 03:00:00 +0000
ROA not after:            Fri 12 Jul 2024 03:00:00 +0000
asID:                     3356
IP address blocks:        45.65.203.0/24 maxlen: 24
                          2801:1a:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637717 (0x18fd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0973f64f8f7a17366a92ab7845b32edddce23cd
        Validity
            Not Before: Jul 12 03:00:00 2022 GMT
            Not After : Jul 12 03:00:00 2024 GMT
        Subject: CN=312d574b1fac3794a5153cce8e7d94274b41c2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:1b:e0:3b:a8:7b:68:63:d7:3d:56:43:22:
                    27:84:df:e2:85:e8:22:9b:08:4c:ca:7c:0c:d6:f9:
                    47:3a:2d:82:d6:eb:58:af:bc:e2:9f:3c:90:49:3d:
                    1a:ad:35:73:e0:71:78:37:d2:cc:f7:e2:d6:69:05:
                    76:67:a5:e1:d6:de:4c:5f:7e:2e:09:95:ff:75:a2:
                    38:cf:fa:2b:68:3c:90:10:20:37:28:08:14:22:56:
                    6f:95:19:68:b5:ed:2e:96:45:83:0d:63:ae:aa:ed:
                    f2:21:1b:6f:d8:95:96:0a:fb:85:59:b1:07:ac:be:
                    e6:83:7a:3c:fd:c1:3c:dd:f8:49:9b:ea:c1:a5:e2:
                    7e:7d:05:f5:04:a3:21:3a:e1:ba:25:a4:52:c1:a0:
                    36:e4:fe:4a:9c:a9:4d:b3:dc:07:d6:d2:4c:7d:02:
                    c7:8e:1f:50:b2:e7:de:6a:5b:dc:77:8a:eb:1f:66:
                    ce:4f:a0:13:15:66:56:72:3a:7a:71:29:06:d3:7d:
                    ab:b4:48:a7:e7:6a:ca:44:e2:3d:4e:1a:9b:35:8c:
                    09:8f:e7:1d:cc:e5:1f:14:ab:cb:e5:3f:49:74:08:
                    5c:ed:b1:21:0f:da:66:53:1a:99:d8:72:ba:15:90:
                    f8:f6:c1:4a:22:6c:81:81:32:d6:63:94:29:57:de:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B8:44:88:FF:7A:4B:79:38:2B:6E:68:7B:9F:43:EB:ED:96:89:CA
            X509v3 Authority Key Identifier:
                keyid:ED:12:6C:20:6F:96:13:60:53:21:3B:B8:B6:37:0E:8A:83:B0:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0973f64f8f7a17366a92ab7845b32edddce23cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/312d574b1fac3794a5153cce8e7d94274b41c2b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/326db356-47be-4fd5-81f9-79e20824eeb9/f0973f64f8f7a17366a92ab7845b32edddce23cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:19:94:61:51:cf:d8:fd:a1:e5:0b:d9:d5:e2:40:c0:43:00:
         d6:3b:ec:8e:1d:9c:86:cf:6a:bf:5a:86:27:18:f5:83:44:ad:
         c7:60:08:00:92:d3:51:04:92:f0:99:ad:ad:5a:2d:63:b6:8c:
         4a:d3:39:5d:cf:5d:dd:8d:24:29:74:c3:8b:0f:6f:51:78:2d:
         12:26:bc:93:a4:e1:5f:c4:96:78:df:12:7f:f6:46:7d:00:d7:
         72:0a:bd:a7:51:3a:e6:a4:de:b4:0d:13:4c:a5:eb:c0:9c:b0:
         14:45:44:60:a3:c4:66:4e:5b:ae:61:f0:3a:7c:31:a9:a1:db:
         34:ec:bb:b0:eb:28:5e:16:ed:0e:b2:4a:12:be:84:76:74:c7:
         3d:fa:6e:7d:4e:7d:02:6b:29:ae:92:31:e0:b3:5c:0a:bf:20:
         be:1f:c0:9b:66:48:cb:6d:b7:73:25:a1:19:49:14:e1:79:a4:
         3d:4b:c7:48:40:42:0c:ca:f8:4f:fa:8c:be:6b:21:34:bf:7a:
         33:be:de:93:94:fa:53:12:ca:7f:04:85:d7:c0:71:81:91:38:
         7c:f9:9b:3d:9d:36:9d:68:65:cf:39:8b:07:46:fd:df:dc:21:
         bd:a5:66:c1:99:97:be:85:c8:b9:cc:66:2a:98:44:8f:dd:46:
         9a:e8:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----