Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/8b8ceb522fcb85d8822cc2a072029d1e55c0efc9.roa
File:                     8b8ceb522fcb85d8822cc2a072029d1e55c0efc9.roa (raw, json)
Hash identifier:          Pg4N+cZ+Q9EPNGPOm8XIVj93YWRp6YqWJDZHnRtMD2c=
Subject key identifier:   DA:46:F8:0B:8C:54:42:BD:B3:DC:7A:8E:62:FE:BD:55:94:47:6A:77
Certificate issuer:       /CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
Certificate serial:       04E1
Authority key identifier: 9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/8b8ceb522fcb85d8822cc2a072029d1e55c0efc9.roa
Signing time:             Fri 10 Jun 2022 14:34:25 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     269814
IP address blocks:        45.186.24.0/22 maxlen: 24
                          2803:7b60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=8b8ceb522fcb85d8822cc2a072029d1e55c0efc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:68:09:db:70:25:c7:cb:a4:c0:15:8f:43:
                    67:4f:4d:13:73:a1:bc:57:62:fb:db:a3:f1:af:35:
                    06:9a:80:ad:27:40:a0:23:83:10:ad:b1:93:4c:a4:
                    25:8f:a3:37:46:bc:18:49:17:66:d0:e5:77:a6:c0:
                    68:98:11:2e:bb:28:39:66:d7:cd:d8:38:db:ef:cd:
                    85:45:97:e1:27:41:2c:4a:97:77:4f:2e:6c:ea:e8:
                    bc:9a:0c:93:b0:89:dd:0d:bb:dc:5e:11:ef:ad:a4:
                    16:ed:73:6f:ab:4a:a7:77:9b:f1:ed:41:59:8c:1d:
                    60:76:db:82:2d:f0:23:b6:83:cf:14:65:c3:98:58:
                    80:63:4a:c9:ea:30:18:c6:83:09:0a:b3:fe:c5:b0:
                    dd:d6:15:39:22:b4:57:1b:b8:ed:98:89:27:f8:d7:
                    21:6a:8d:5c:e1:7f:8e:39:fc:98:cf:86:00:8c:2e:
                    80:ae:c0:23:21:fb:c8:7b:da:0d:b3:1e:d6:1c:98:
                    43:cf:00:47:98:13:59:4c:70:a1:b7:5c:93:ff:41:
                    a2:ba:53:2c:3a:24:21:4d:0b:04:47:13:ce:95:dc:
                    cf:de:fa:a6:66:c7:64:ad:c2:84:7f:f6:fb:06:33:
                    f4:92:e9:0d:4b:32:7f:2e:7a:b6:d1:f5:f2:03:b3:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:46:F8:0B:8C:54:42:BD:B3:DC:7A:8E:62:FE:BD:55:94:47:6A:77
            X509v3 Authority Key Identifier:
                keyid:9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/8b8ceb522fcb85d8822cc2a072029d1e55c0efc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/22
                IPv6:
                  2803:7b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:db:ec:a5:b7:fb:93:27:f9:9b:80:dc:17:aa:10:f5:86:54:
         e0:b4:02:91:56:94:13:22:d5:63:38:81:bd:8b:43:71:b9:a2:
         ca:50:7e:1f:0a:61:6a:d2:84:6e:ea:86:28:ff:3c:1b:8b:43:
         30:19:52:02:cd:d0:42:17:5e:1d:98:e3:92:c0:76:b8:5d:df:
         29:df:3d:f2:0e:f6:8b:dc:e7:8f:d4:49:c6:30:b0:91:a9:b5:
         09:e0:91:e4:0d:9f:28:33:84:43:36:bc:68:95:e8:59:00:05:
         42:df:06:2c:80:70:17:98:5c:8b:7f:74:cb:1f:0f:2f:b9:03:
         8e:47:fa:92:54:a6:8c:ad:2b:72:a1:49:25:d1:6d:e3:64:bf:
         f7:dd:8a:a6:d2:ed:45:2c:a2:e8:dd:ea:85:fb:1b:66:40:5a:
         16:e7:a7:14:57:07:79:65:0d:d9:08:0a:f3:97:fb:7b:7c:45:
         ad:3a:31:74:94:75:8a:a7:98:26:3a:14:ae:00:ce:e8:8b:4b:
         4a:2c:9c:9c:ae:45:8b:32:91:a7:a4:db:90:40:28:b8:de:41:
         23:43:86:62:d7:cd:c2:49:90:22:97:c3:88:1e:1d:cc:70:84:
         7c:f0:62:ad:fb:85:81:19:72:25:18:6a:88:8f:5e:15:98:7b:
         f2:e4:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----