Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/b9eed19402b71ed105f6c09c9cd56baace77c23f.roa
File:                     b9eed19402b71ed105f6c09c9cd56baace77c23f.roa (raw, json)
Hash identifier:          Xtp3tDcdd4Q0QYcn+SrPkEcXAlWq1hgkuN2LY25Fi5I=
Subject key identifier:   12:BC:4E:68:9B:69:B5:6C:F8:0A:6B:E1:A4:9D:2E:5F:2A:01:A3:19
Certificate issuer:       /CN=bd14ab01086637c7b6f31d7a05d0d21a056c4687
Certificate serial:       168465
Authority key identifier: BF:7D:DC:D1:EC:24:93:BD:20:72:66:DA:27:94:71:D8:95:A9:E3:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd14ab01086637c7b6f31d7a05d0d21a056c4687.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/b9eed19402b71ed105f6c09c9cd56baace77c23f.roa
Signing time:             Wed 15 Jun 2022 02:33:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266854
IP address blocks:        45.239.60.0/22 maxlen: 24
                          2803:62a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475685 (0x168465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd14ab01086637c7b6f31d7a05d0d21a056c4687
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b9eed19402b71ed105f6c09c9cd56baace77c23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:7a:aa:fc:e6:7b:41:8c:e9:2d:75:b8:c7:
                    6b:b6:d1:f4:cd:d9:0e:24:22:21:86:3c:83:13:da:
                    03:4d:52:4b:bb:01:1f:51:6e:e1:20:a6:cb:2a:01:
                    0c:e7:1f:74:e5:d0:2f:3e:0d:b6:1a:3d:00:08:47:
                    a4:0f:37:2e:35:57:57:57:a0:a8:42:1e:78:71:38:
                    f7:84:97:04:d6:d5:0d:cf:17:4a:bb:fc:4b:5c:29:
                    10:5d:9b:31:eb:2a:63:51:6e:b8:66:bd:ad:70:e5:
                    8c:36:a8:75:44:dc:3d:27:24:31:32:33:b5:13:c5:
                    4b:70:07:7c:02:f5:d2:f9:3c:1c:53:35:5a:75:20:
                    19:b9:3e:bd:86:69:ce:37:b8:73:6c:5c:22:fe:2a:
                    8f:6f:43:42:1d:37:75:a0:a2:54:60:8e:9d:db:25:
                    98:59:9f:53:99:77:3f:20:49:ca:12:35:7b:60:31:
                    25:3d:f4:10:7c:67:17:dd:3a:cd:79:15:c3:e9:e5:
                    d5:b0:52:45:33:10:26:52:0b:78:7b:f2:d6:d8:5d:
                    b7:e9:4f:df:2d:e1:58:6f:33:ee:8a:1b:54:07:c0:
                    fe:a7:2b:ee:19:f6:ec:1f:63:16:07:68:ad:ea:82:
                    97:ef:76:c3:17:12:2d:f5:a6:a8:66:71:1c:2b:61:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:4E:68:9B:69:B5:6C:F8:0A:6B:E1:A4:9D:2E:5F:2A:01:A3:19
            X509v3 Authority Key Identifier:
                keyid:BF:7D:DC:D1:EC:24:93:BD:20:72:66:DA:27:94:71:D8:95:A9:E3:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd14ab01086637c7b6f31d7a05d0d21a056c4687.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/b9eed19402b71ed105f6c09c9cd56baace77c23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d4bec56-e9ea-47d5-b973-764a549b557c/bd14ab01086637c7b6f31d7a05d0d21a056c4687.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.60.0/22
                IPv6:
                  2803:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:35:d4:7a:fa:df:69:eb:c2:26:f0:50:60:fe:3f:f1:90:a4:
         4f:36:2c:28:35:f5:d0:ed:e5:38:6f:a8:66:f5:c5:50:71:30:
         5f:e4:bb:f4:52:2e:25:c8:f6:5d:ec:67:2c:3f:91:cc:c5:61:
         90:f9:ff:9f:d9:d3:38:bd:06:8d:c2:20:b5:33:ad:ae:a6:85:
         13:b8:bb:06:de:54:8f:c2:b5:f0:0c:b4:b6:78:aa:3b:4f:8c:
         7d:e3:6b:13:07:48:a8:39:8e:a7:6b:86:cf:f0:a5:16:c6:30:
         c0:4a:23:f4:f0:74:ed:2c:10:d1:3a:f5:d6:f3:a2:c0:80:a0:
         61:95:ed:05:b3:d3:39:70:f2:26:a8:7a:0d:ef:00:1c:db:87:
         80:2a:9f:a2:0c:66:fb:32:3b:bb:9c:81:ea:22:f7:5b:17:b2:
         6d:11:f0:95:8d:3d:4c:b1:de:81:bd:2e:d9:2b:b2:88:b7:fa:
         1b:03:5b:a1:e3:b5:e6:3d:88:21:7b:d4:ad:ee:b2:10:2f:32:
         b0:71:6a:43:84:29:34:10:51:8b:4c:3d:3b:62:84:67:2e:f1:
         6f:60:b2:6c:5d:1b:ce:a6:c3:b9:20:f0:ed:86:c1:34:e2:40:
         42:08:70:92:58:67:cd:77:5b:e1:a3:bc:af:f8:56:4c:a1:41:
         a4:ba:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----