Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/62788f50965813c61393c9c1b06f056712277644.roa
File:                     62788f50965813c61393c9c1b06f056712277644.roa (raw, json)
Hash identifier:          TA12PgszAHsSh6pFZ6p/JIcg3Hdan812jLp4gx/Wmlw=
Subject key identifier:   CE:53:6B:B5:3E:9C:DA:1F:58:13:09:B7:39:84:48:CE:55:B6:5C:32
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       18D269
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/62788f50965813c61393c9c1b06f056712277644.roa
Signing time:             Mon 12 Sep 2022 10:18:55 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Sun 18 Jul 2027 03:00:00 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          45.186.144.0/23 maxlen: 24
                          45.186.144.0/24 maxlen: 24
                          45.186.145.0/24 maxlen: 24
                          45.186.146.0/24 maxlen: 24
                          45.186.146.0/23 maxlen: 24
                          45.186.147.0/24 maxlen: 24
                          2803:f60::/32 maxlen: 48
                          2803:f60::/40 maxlen: 40
                          2803:f60:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626729 (0x18d269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2027 GMT
        Subject: CN=62788f50965813c61393c9c1b06f056712277644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:fa:dd:21:58:b6:f4:fe:3c:84:dc:b3:29:
                    8b:d5:73:ef:eb:c7:e8:84:1c:c3:9e:c6:81:f5:81:
                    d4:fe:02:38:05:89:09:81:a1:19:d5:03:78:67:1c:
                    b1:00:0e:06:b5:7c:b6:91:ad:82:ee:c8:0a:6e:60:
                    32:f6:f8:ba:b6:98:76:ee:b6:67:27:9a:ec:e7:4d:
                    cc:3f:bd:ec:eb:37:e2:79:74:23:be:77:a7:e2:c8:
                    4a:c0:68:b4:7a:86:c2:1a:17:f7:79:d1:80:a0:25:
                    62:44:d9:92:98:f3:78:61:56:3e:4b:04:5c:f7:f9:
                    0d:a4:a9:17:69:7c:f3:d3:7c:87:7f:e1:db:8c:d0:
                    0b:f6:db:57:34:ed:97:0d:aa:07:4a:3e:ae:fe:a4:
                    63:05:c1:c0:5b:a5:7b:2d:93:b8:65:03:ac:39:88:
                    30:d0:60:58:9f:61:89:31:a6:3f:22:a5:20:e3:84:
                    5e:f0:b3:d1:02:d3:d7:9e:78:92:69:1a:82:64:87:
                    60:ae:a7:da:a1:99:db:4e:8a:b4:ff:81:07:a5:47:
                    ac:31:b7:78:9e:51:31:cc:ba:f1:00:26:a5:a2:b7:
                    45:70:f2:d4:88:98:a8:34:93:8e:ad:12:0c:bd:87:
                    79:9b:88:1d:3b:9d:da:6a:ce:5d:c1:d4:2a:50:3b:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:6B:B5:3E:9C:DA:1F:58:13:09:B7:39:84:48:CE:55:B6:5C:32
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/62788f50965813c61393c9c1b06f056712277644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:43:d9:c1:ad:8b:27:9c:32:ff:ac:74:c2:a9:9d:95:42:36:
         3c:3b:1a:d1:de:3f:bb:7c:2b:07:ad:f4:72:3b:40:87:00:ef:
         61:2e:43:3f:ea:8b:d2:42:d3:97:b2:69:1b:4a:21:64:c6:c2:
         fb:07:f6:9e:58:72:de:e1:ba:80:47:1b:6d:ad:7d:2b:cc:5a:
         f3:e9:83:84:56:8c:da:13:50:c0:49:e9:ab:7f:b8:18:ce:2a:
         61:43:41:23:1e:94:ad:5b:4e:65:bb:8f:29:b8:f9:09:13:e7:
         29:d1:5a:10:d8:0c:c0:58:1b:33:84:35:3d:91:c4:5f:e1:14:
         3a:80:d3:27:d6:10:0e:ae:8a:13:c1:17:1f:67:21:d6:5c:7f:
         5a:0e:9e:96:8d:01:6f:5a:fb:1f:b0:f0:2d:02:11:33:51:33:
         1c:ef:36:f6:f0:2f:38:a4:34:0d:a4:56:4c:eb:1d:09:14:51:
         10:ec:75:6b:f0:2e:65:c4:ee:38:68:af:db:09:7c:ff:0e:44:
         9c:5f:78:31:30:63:2d:d0:55:0c:03:55:f8:d9:da:5a:80:0f:
         53:4c:20:2d:a7:d2:d0:81:c6:32:12:14:42:a6:b3:17:01:56:
         dc:ea:52:ee:a9:d0:b1:11:d8:8f:0b:41:73:a6:af:e8:5a:64:
         9a:94:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----