Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12107725-66e1-4f31-b00c-c26916043218/9adf9862b160d9e0cc16d3efbae2f26583155c54.roa
File:                     9adf9862b160d9e0cc16d3efbae2f26583155c54.roa (raw, json)
Hash identifier:          YjU4OjdASsWU9K7qWmY2eyByusokC7e0BxF/bIPgbyc=
Subject key identifier:   0F:A0:C7:94:E0:E1:7F:1B:B6:64:F3:20:04:AA:D1:F3:88:E8:C5:78
Certificate issuer:       /CN=ee7680fdc2b32329e0ba65a964928a01859def71
Certificate serial:       1FDD9D
Authority key identifier: 6E:79:48:67:97:A8:D2:39:2E:33:08:26:27:18:68:D2:83:8F:BB:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee7680fdc2b32329e0ba65a964928a01859def71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12107725-66e1-4f31-b00c-c26916043218/9adf9862b160d9e0cc16d3efbae2f26583155c54.roa
Signing time:             Fri 23 Jun 2023 18:01:58 +0000
ROA not before:           Thu 22 Jun 2023 18:01:57 +0000
ROA not after:            Mon 23 Jun 2025 18:01:57 +0000
asID:                     267801
IP address blocks:        45.172.248.0/22 maxlen: 22
                          2801:19:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088349 (0x1fdd9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7680fdc2b32329e0ba65a964928a01859def71
        Validity
            Not Before: Jun 22 18:01:57 2023 GMT
            Not After : Jun 23 18:01:57 2025 GMT
        Subject: CN=9adf9862b160d9e0cc16d3efbae2f26583155c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:e3:5a:70:25:5e:2e:a2:16:33:ae:72:20:
                    bd:be:6e:b6:0a:90:59:5f:78:c3:07:94:af:fe:15:
                    e8:7b:54:02:7d:8d:59:b7:fd:89:a2:84:df:23:74:
                    5b:a8:22:fb:04:73:8b:00:9d:e2:ed:5b:dd:b1:c3:
                    58:86:5c:74:68:b1:db:9e:73:09:14:e7:b8:be:ff:
                    1c:e5:5f:9f:c5:e0:00:2e:ae:c6:37:36:21:2b:87:
                    7d:d1:8c:64:72:ec:bd:71:5a:79:22:40:eb:56:4c:
                    14:d9:24:1a:9d:f9:26:22:ec:9c:ed:9b:14:b3:7d:
                    18:37:b7:72:fd:f8:27:17:3a:8c:2c:69:36:47:43:
                    c7:9e:df:21:11:9a:ec:fe:fd:a2:06:96:64:88:8a:
                    85:9f:89:61:35:02:94:42:ed:8f:cb:fa:1b:4d:3a:
                    76:5e:8a:3c:f3:8f:a3:db:20:0f:4a:76:1f:a5:16:
                    49:c1:45:a5:ff:8d:d4:6f:6c:1f:d7:a5:6b:9b:ab:
                    7e:54:6b:1a:98:39:6b:4a:d3:d2:8b:45:6b:d4:1a:
                    11:23:95:2d:60:8a:8d:e4:4c:0b:e8:4c:20:79:25:
                    ba:71:77:c3:65:72:2f:17:b3:36:af:fa:0d:88:3d:
                    e5:8b:ec:1f:f5:ee:a1:bc:06:dc:25:a3:21:2e:cd:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A0:C7:94:E0:E1:7F:1B:B6:64:F3:20:04:AA:D1:F3:88:E8:C5:78
            X509v3 Authority Key Identifier:
                keyid:6E:79:48:67:97:A8:D2:39:2E:33:08:26:27:18:68:D2:83:8F:BB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee7680fdc2b32329e0ba65a964928a01859def71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12107725-66e1-4f31-b00c-c26916043218/9adf9862b160d9e0cc16d3efbae2f26583155c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12107725-66e1-4f31-b00c-c26916043218/ee7680fdc2b32329e0ba65a964928a01859def71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.248.0/22
                IPv6:
                  2801:19:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:63:1d:52:26:01:4f:12:0f:93:10:48:9e:88:0e:79:1a:67:
         e1:54:19:5e:0f:b3:c5:10:04:33:3d:64:db:80:66:64:29:ca:
         b2:66:71:59:5e:3e:26:4d:e0:ce:0b:80:e9:17:2b:4b:5d:45:
         d6:b3:05:59:61:eb:90:93:3b:ba:17:f8:20:a0:93:7a:3f:1d:
         7d:1a:18:3e:1f:65:56:b2:bb:05:19:56:3d:a8:dd:1d:a6:dd:
         08:e6:38:c4:2d:da:bc:ed:fa:11:cc:a3:cb:85:1d:b7:b6:12:
         86:f9:a8:86:5c:6e:eb:02:b1:09:77:ff:80:98:e4:04:9d:f9:
         f4:9b:ef:19:bc:33:27:46:a4:25:90:a6:8a:7d:d0:b1:dd:7b:
         ec:54:f0:49:e4:d9:93:5e:d3:91:0b:03:89:7c:db:9f:47:4c:
         f3:c7:3d:68:85:7f:c5:8e:a2:ce:07:85:af:33:e1:aa:17:ce:
         2c:21:96:8e:59:c0:99:d5:6b:58:13:e2:80:ac:83:6c:00:d0:
         44:8b:21:4b:dc:ef:1c:77:9e:28:33:6a:7f:78:a5:c6:af:c4:
         96:d7:e6:4e:1c:9b:36:a1:3b:67:79:4a:76:d3:85:2a:46:f5:
         d2:5c:fe:15:dd:61:69:52:2c:14:12:68:5b:58:6c:a2:14:15:
         c8:27:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----