Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/fccf8ef4cdfe1f13be28c2cb43e9ecb032ce80a9.roa
File:                     fccf8ef4cdfe1f13be28c2cb43e9ecb032ce80a9.roa (raw, json)
Hash identifier:          ygTvPvKYTt2UUmO54ITyP6Wlnll5li6eMAznguCpbY0=
Subject key identifier:   F2:22:43:1D:F8:DA:C3:19:C1:15:97:B4:B4:76:87:B6:74:C7:3C:53
Certificate issuer:       /CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
Certificate serial:       1BD577
Authority key identifier: 38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/fccf8ef4cdfe1f13be28c2cb43e9ecb032ce80a9.roa
Signing time:             Fri 24 Mar 2023 08:31:29 +0000
ROA not before:           Thu 23 Mar 2023 08:31:29 +0000
ROA not after:            Sat 22 Mar 2025 08:31:29 +0000
asID:                     269875
IP address blocks:        45.190.16.0/23 maxlen: 23
                          45.190.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824119 (0x1bd577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
        Validity
            Not Before: Mar 23 08:31:29 2023 GMT
            Not After : Mar 22 08:31:29 2025 GMT
        Subject: CN=fccf8ef4cdfe1f13be28c2cb43e9ecb032ce80a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:b7:07:50:77:80:7b:59:f3:3d:48:f9:c4:
                    7b:2f:2c:24:30:86:8f:31:38:6b:09:f0:cf:ca:74:
                    55:e9:66:e7:53:92:2f:43:59:a4:d1:3e:ca:7f:0c:
                    67:c0:16:9c:78:06:9c:48:b8:10:a3:a5:c8:0b:29:
                    7f:81:68:d0:ec:01:2b:84:63:72:55:33:b1:84:b6:
                    c9:da:c9:ff:ff:36:03:5c:9f:02:b9:02:91:d3:34:
                    8b:18:45:a7:81:72:a7:4b:d2:e4:99:e1:4f:52:f6:
                    40:fd:1f:14:d9:e7:c3:8d:34:2e:50:13:87:b2:7d:
                    24:dd:9e:e3:a7:7e:0e:a3:84:8c:f7:48:b1:a8:f5:
                    d9:ed:14:a9:27:7c:b2:93:34:aa:4e:d2:e3:f9:65:
                    f4:b7:06:4d:b2:b8:66:a4:7c:ce:0b:71:29:9d:63:
                    8a:05:e0:be:60:2b:68:0f:a5:82:b7:88:47:36:dd:
                    de:5f:e1:bf:b7:93:76:d1:5b:2a:17:4e:b7:04:47:
                    47:74:53:3a:99:3a:67:a3:95:7f:91:4a:14:47:97:
                    6f:cb:88:8d:f2:08:3f:19:03:49:0f:14:82:0b:64:
                    12:a0:82:24:f3:a5:e0:b7:4c:ac:7b:44:58:ff:40:
                    46:19:d4:34:c5:14:cb:c6:7b:14:18:0f:e0:5d:cf:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:22:43:1D:F8:DA:C3:19:C1:15:97:B4:B4:76:87:B6:74:C7:3C:53
            X509v3 Authority Key Identifier:
                keyid:38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/fccf8ef4cdfe1f13be28c2cb43e9ecb032ce80a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:96:23:a3:62:c6:72:bb:5c:82:cd:1a:9c:cb:ef:9c:57:
         1f:3e:3a:e4:0a:12:2d:bc:f4:37:7b:00:6d:ca:2c:95:ab:40:
         95:e3:73:6f:35:b8:a9:3e:38:38:90:7e:95:b1:9a:4a:f3:dc:
         25:fb:d5:68:14:82:af:ac:2d:5e:1a:e8:c8:6a:e7:ac:be:b7:
         d1:32:47:6f:23:97:cf:a9:34:e5:2c:ce:b8:d7:3b:ed:3e:75:
         35:f1:c3:70:ac:f3:e6:cc:34:a0:7b:69:18:62:4f:3a:5a:b0:
         29:cd:e3:ff:d3:32:ff:dd:5e:51:9a:84:29:bb:b6:69:58:95:
         6f:f5:0d:92:02:78:71:b7:7d:f9:55:d4:8d:99:8a:e1:81:50:
         e5:35:6d:97:75:8e:aa:7d:89:d4:4d:c9:92:cb:a5:ea:9e:74:
         8d:a4:f5:e6:11:15:a6:4f:31:6f:56:b4:40:31:c9:ec:e2:69:
         53:d2:e1:5f:3c:6c:35:5b:16:2f:38:27:54:05:76:cc:d8:5b:
         c9:2b:fa:e2:83:90:f5:55:2a:b6:5b:16:20:52:8d:a1:6b:80:
         2a:ee:08:d3:48:3d:a2:58:ce:c1:34:2c:79:94:78:db:73:35:
         98:9f:be:79:f7:c8:7e:6e:1d:13:ad:b9:c7:a0:c3:a8:46:63:
         cf:be:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----