Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235a5189-17b8-4ad7-bc2b-36627bd2550d/9e4d36a6b718032e2a089f2d24209e0e8e8a5fb0.roa
File:                     9e4d36a6b718032e2a089f2d24209e0e8e8a5fb0.roa (raw, json)
Hash identifier:          SzgOMBPi1eH59TWOJSKzG5cM99fJYvjG4ng4wl4pY5Y=
Subject key identifier:   E3:1A:32:00:3A:49:97:65:0A:B7:BD:FF:FA:1F:77:C7:87:EF:E6:F1
Certificate issuer:       /CN=c5b63e7fc1a74104b75e2dbf2eaf6b0240d5cfb5
Certificate serial:       05580E
Authority key identifier: 9E:21:55:F5:64:EF:2A:E3:9B:7E:20:02:CE:98:BD:D6:7C:99:D0:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5b63e7fc1a74104b75e2dbf2eaf6b0240d5cfb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/235a5189-17b8-4ad7-bc2b-36627bd2550d/9e4d36a6b718032e2a089f2d24209e0e8e8a5fb0.roa
Signing time:             Tue 14 Jun 2022 22:24:54 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Mon 14 Jun 2027 03:00:00 +0000
asID:                     267721
IP address blocks:        45.167.20.0/22 maxlen: 24
                          2803:79a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350222 (0x5580e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5b63e7fc1a74104b75e2dbf2eaf6b0240d5cfb5
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Jun 14 03:00:00 2027 GMT
        Subject: CN=9e4d36a6b718032e2a089f2d24209e0e8e8a5fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:c5:e9:0c:12:02:37:84:c0:ec:3e:67:15:
                    12:ef:b0:93:ff:6f:93:32:65:f9:f5:d4:33:0d:25:
                    df:33:d3:00:8a:1b:54:cb:e3:d2:67:c8:a1:bb:b1:
                    e6:ac:f8:9b:97:cb:84:4f:2d:d8:81:21:c5:8e:ee:
                    a1:0b:a9:bf:70:e8:03:21:a3:d8:ee:4f:dd:b2:ec:
                    97:27:b5:11:dc:a8:35:5f:f6:31:c9:24:8e:00:dd:
                    a1:f7:19:40:bf:bb:37:a4:37:0c:68:aa:44:bf:7e:
                    2f:e9:2f:39:3d:87:fd:b1:22:3d:76:7b:ee:03:d0:
                    bf:5b:ad:e5:d0:d0:d6:3e:e9:ee:d7:ac:1c:76:7e:
                    3b:7d:0b:02:dd:24:01:bd:30:4c:61:d9:e1:ec:8a:
                    e1:03:b8:40:73:b2:53:f2:dd:52:7f:a8:21:bd:bb:
                    a3:e3:80:ec:74:9d:35:b9:90:17:4a:2e:33:bb:e3:
                    84:f0:7d:c8:8e:79:fa:44:54:2e:c4:72:2c:90:69:
                    b7:6c:1e:7f:05:84:89:ae:69:68:89:2b:c2:9c:d2:
                    94:e7:4c:cf:e8:53:75:67:3a:75:6d:8e:03:21:d8:
                    25:69:bb:2c:83:a5:6f:16:3b:1b:3c:04:3c:43:b5:
                    84:85:4b:8c:5d:e4:1c:56:43:b6:86:0f:b5:c8:c0:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:32:00:3A:49:97:65:0A:B7:BD:FF:FA:1F:77:C7:87:EF:E6:F1
            X509v3 Authority Key Identifier:
                keyid:9E:21:55:F5:64:EF:2A:E3:9B:7E:20:02:CE:98:BD:D6:7C:99:D0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5b63e7fc1a74104b75e2dbf2eaf6b0240d5cfb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235a5189-17b8-4ad7-bc2b-36627bd2550d/9e4d36a6b718032e2a089f2d24209e0e8e8a5fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/235a5189-17b8-4ad7-bc2b-36627bd2550d/c5b63e7fc1a74104b75e2dbf2eaf6b0240d5cfb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.20.0/22
                IPv6:
                  2803:79a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:4e:14:56:26:95:e2:13:51:93:ea:ac:45:2f:a9:18:73:
         99:d4:61:b4:54:0b:aa:0f:33:e1:da:7b:30:6e:7d:92:c2:b7:
         55:46:db:7b:6d:b0:71:3d:82:43:fc:42:c9:62:10:47:03:98:
         58:91:88:91:c3:1d:39:23:06:6c:76:3c:a2:b3:66:3e:a4:ab:
         c6:80:16:be:ca:43:f4:66:93:da:29:54:c7:7f:05:c8:f6:79:
         28:23:f4:b8:7e:30:15:c2:0c:67:f7:e4:3e:c7:63:31:fb:0e:
         74:f2:7f:69:c5:05:a2:5a:4d:e4:54:48:88:75:db:58:09:74:
         08:3e:f3:ae:40:51:cb:fc:86:89:c2:4a:09:f4:31:f9:2b:af:
         73:d4:88:69:94:91:4f:db:df:98:8a:ff:c5:5d:2e:db:62:fe:
         32:12:76:47:98:f6:c0:a4:dd:0f:ad:02:ec:21:24:25:d4:fc:
         63:d6:48:e7:8c:49:dd:4a:9e:c4:e2:5d:3f:b2:e8:34:f4:67:
         18:05:5b:8a:e3:26:59:b4:6d:d5:01:f8:b2:15:5d:37:cd:a8:
         2b:40:f4:0c:20:f5:a9:b5:25:c3:1e:66:5d:37:c5:5b:f7:5a:
         ec:12:e2:e5:38:07:7c:49:f0:03:62:29:e0:00:b8:79:72:b6:
         d9:f9:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----