Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11f02e9a-abd3-4fbe-94ef-9244a5b919a1/be20bc37d36ff7a95a0fc3f4deb9d71b4954ddd5.roa
File:                     be20bc37d36ff7a95a0fc3f4deb9d71b4954ddd5.roa (raw, json)
Hash identifier:          UMzmC3lgk+8YhaIXvisFojZTz8dVnTFjSGbBz3PBQ5Q=
Subject key identifier:   20:54:39:00:BF:16:08:5E:32:80:83:6C:A8:87:FE:63:13:B1:99:6D
Certificate issuer:       /CN=9b6a4592466e2c260c12ccdd831d325bf8a62810
Certificate serial:       14BABC
Authority key identifier: 20:60:C8:D1:31:D1:99:2D:52:DD:A8:A4:9A:8E:1E:50:D8:6A:89:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b6a4592466e2c260c12ccdd831d325bf8a62810.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11f02e9a-abd3-4fbe-94ef-9244a5b919a1/be20bc37d36ff7a95a0fc3f4deb9d71b4954ddd5.roa
Signing time:             Mon 29 May 2023 00:47:47 +0000
ROA not before:           Sun 28 May 2023 00:47:46 +0000
ROA not after:            Thu 29 May 2025 00:47:46 +0000
asID:                     265611
IP address blocks:        45.189.152.0/22 maxlen: 24
                          2806:368::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358524 (0x14babc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6a4592466e2c260c12ccdd831d325bf8a62810
        Validity
            Not Before: May 28 00:47:46 2023 GMT
            Not After : May 29 00:47:46 2025 GMT
        Subject: CN=be20bc37d36ff7a95a0fc3f4deb9d71b4954ddd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:6e:94:fe:c5:4f:2a:48:62:11:ce:a6:4b:
                    24:17:d0:66:f8:6a:17:02:e8:8c:ad:60:b7:7b:9d:
                    86:c2:d6:d3:d8:1a:20:cb:fe:91:f8:40:c3:47:ab:
                    4e:e1:a5:9b:e3:e2:4b:c7:1b:43:7e:30:e6:69:54:
                    9d:83:6e:d6:ea:54:7e:44:a7:e4:30:b0:36:93:b2:
                    be:b0:65:dd:8c:f0:b8:52:f1:cb:dd:e4:4e:2d:15:
                    68:e0:d0:c3:45:23:c4:87:18:b3:a5:8f:52:c6:2c:
                    c6:d8:93:0e:7d:f7:7f:48:f0:49:29:1c:0d:b5:6a:
                    3c:0e:24:6e:40:51:d7:47:84:c2:be:7c:94:98:8f:
                    09:54:d8:9e:85:5e:66:16:c6:0a:26:fd:74:5d:24:
                    cc:ad:eb:ed:dd:8c:d0:3f:7f:23:84:ea:eb:6d:51:
                    0f:1e:3d:f7:4a:83:e0:a7:15:60:3d:02:00:c4:7c:
                    27:56:e8:97:92:b7:9e:72:be:3b:79:e1:97:43:af:
                    74:95:d3:5d:7a:d8:94:ce:20:8b:29:83:1c:7e:8b:
                    56:15:fd:ad:1d:06:1e:c2:de:04:77:78:16:d6:31:
                    53:e9:5a:11:fd:29:1f:39:f2:92:91:c9:d3:0f:97:
                    93:53:06:29:e6:25:23:8f:06:8e:6d:85:7f:a9:21:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:39:00:BF:16:08:5E:32:80:83:6C:A8:87:FE:63:13:B1:99:6D
            X509v3 Authority Key Identifier:
                keyid:20:60:C8:D1:31:D1:99:2D:52:DD:A8:A4:9A:8E:1E:50:D8:6A:89:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b6a4592466e2c260c12ccdd831d325bf8a62810.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11f02e9a-abd3-4fbe-94ef-9244a5b919a1/be20bc37d36ff7a95a0fc3f4deb9d71b4954ddd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11f02e9a-abd3-4fbe-94ef-9244a5b919a1/9b6a4592466e2c260c12ccdd831d325bf8a62810.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.152.0/22
                IPv6:
                  2806:368::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:09:2e:02:7c:de:b0:6e:a8:e5:e8:d9:fd:0a:c6:0e:5b:3f:
         a4:4d:68:5d:6c:ad:e6:22:2a:ca:84:bc:3e:5c:2d:f3:20:7f:
         82:df:a0:89:e5:9f:5f:83:d5:8b:27:52:4b:17:2a:e1:af:54:
         78:75:05:77:a1:0e:45:db:33:f3:ac:73:53:47:95:c6:2e:36:
         be:70:e3:87:d1:9d:90:b6:c9:52:01:11:b0:2e:0d:8d:c5:5d:
         00:a3:59:dc:74:cd:6a:d8:e0:8c:d8:04:1c:02:f6:3e:a2:b0:
         75:fe:a8:8a:19:c4:0d:06:4f:f0:67:38:ac:98:78:2d:1e:c5:
         80:dc:13:7c:1f:65:dc:c6:21:25:9b:59:0e:ce:40:8e:4d:ae:
         23:c9:1f:60:7b:ee:4e:43:f1:61:0d:23:18:08:19:fe:fb:1b:
         27:46:e7:bd:ad:93:be:3b:bc:05:36:8e:44:f3:88:4f:32:3e:
         5e:c1:19:cf:03:5b:b7:79:ac:3e:96:e0:99:5b:7f:12:58:fa:
         01:41:b9:60:ea:e6:ad:ef:34:79:9e:04:28:b2:30:bd:5e:c3:
         59:cb:97:58:61:ce:44:08:46:6e:f7:4c:94:32:42:d2:c3:9c:
         a3:20:e7:b8:12:80:9c:0a:08:a2:29:b3:f3:d1:cc:eb:a7:03:
         53:ef:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----