Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/d765dbde7c45b4100db43be8ab2eed0375b58db8.roa
File:                     d765dbde7c45b4100db43be8ab2eed0375b58db8.roa (raw, json)
Hash identifier:          unV+aB9ioLNuI8J/UYpkHDW5nPlVtL9T+cEhHZRtD6w=
Subject key identifier:   9A:D7:FB:8C:E9:39:72:36:19:A4:84:A4:57:02:8C:C2:30:B3:CE:EF
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       12DE7A
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/d765dbde7c45b4100db43be8ab2eed0375b58db8.roa
Signing time:             Tue 29 Mar 2022 01:26:08 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     269910
IP address blocks:        45.191.84.0/22 maxlen: 24
                          2803:ece0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236602 (0x12de7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=d765dbde7c45b4100db43be8ab2eed0375b58db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:23:ec:30:85:2d:bb:35:6b:d8:de:5e:bb:
                    14:94:d4:61:72:ee:cc:6a:e0:dd:f7:28:f8:21:43:
                    86:54:34:7d:a7:e1:d3:cc:41:a1:6f:01:02:28:a6:
                    71:c7:d9:ce:f5:f5:90:db:40:7f:9c:2e:51:00:9d:
                    33:83:4f:40:e8:b3:0d:d9:4e:4e:65:e7:17:24:4f:
                    94:59:30:8f:2d:a1:1e:f7:db:78:08:34:cc:a0:9c:
                    b8:54:b2:1c:ce:99:40:bf:0f:93:52:48:f6:25:ae:
                    bd:ff:34:f1:f2:c9:95:d3:ef:27:86:5d:3b:a9:67:
                    91:83:69:84:df:a9:04:f6:af:d0:e3:fe:0b:b3:da:
                    e1:82:fe:50:64:fd:df:f1:ca:81:76:d6:e4:bd:4f:
                    1c:91:c4:69:2e:ce:8a:10:d5:25:92:51:76:28:dd:
                    a7:10:31:b8:82:a7:93:fc:d0:1c:48:45:51:29:97:
                    22:2d:07:6a:b2:0e:14:9f:60:31:76:0e:42:3a:fc:
                    1b:87:34:bd:fb:4f:25:43:2c:9b:38:d8:c8:d5:90:
                    8d:94:ae:e9:2e:f9:47:48:29:75:aa:04:e5:98:5f:
                    71:be:af:53:f3:20:43:d3:87:d0:8a:8a:b0:16:a8:
                    6c:78:a2:fb:05:36:2e:3a:1a:fc:9a:65:b0:6b:a1:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:FB:8C:E9:39:72:36:19:A4:84:A4:57:02:8C:C2:30:B3:CE:EF
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/d765dbde7c45b4100db43be8ab2eed0375b58db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:df:5d:2f:6a:78:c2:f4:66:bf:de:27:73:fd:66:03:10:
         73:d2:19:df:1c:91:90:88:6a:eb:29:91:f3:1a:ad:eb:eb:5f:
         89:3b:da:eb:c3:c5:ab:a7:50:e7:a3:af:b0:a1:fb:52:08:86:
         a5:6d:4b:cf:50:cb:df:18:d1:16:c2:bd:14:b1:f0:9a:cd:52:
         e3:0e:78:f1:ba:11:6f:10:c4:3b:66:23:fa:3e:f2:15:d7:48:
         08:3c:43:6f:5d:04:65:bd:ae:71:58:f7:28:01:fa:a3:ae:ce:
         82:63:d3:42:88:14:75:28:20:7a:cb:49:28:6b:4b:81:3f:ba:
         3c:ec:79:3f:cd:94:1c:ec:0a:52:d9:4e:6e:f5:82:27:67:32:
         e1:ea:63:38:30:72:84:dd:a2:06:aa:e0:f0:06:37:f5:84:22:
         ed:27:26:63:97:35:42:f5:e8:52:a9:d1:e7:04:ea:e9:e9:8f:
         2e:97:4d:7b:95:a0:f7:4d:06:15:5e:9f:9c:f1:f1:ad:f1:5b:
         7d:ce:f4:60:d6:75:c6:9b:54:e6:9d:08:3a:c8:cc:f8:97:70:
         cf:d0:46:0a:a3:77:a5:4b:b4:fb:cf:83:38:85:d3:5a:f3:78:
         6b:6b:54:a0:cf:62:68:f1:9f:24:74:71:f4:60:9b:70:c4:8a:
         d3:20:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----