Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/c6f69714a8ff9d93d04b1f19417ba97863912536.roa
File:                     c6f69714a8ff9d93d04b1f19417ba97863912536.roa (raw, json)
Hash identifier:          OHu3Rrpm2p0LvHsdT6dbmXBqutXzMkuD9cu11WGgQwc=
Subject key identifier:   6D:C0:46:FA:D4:B5:B4:66:78:99:D3:27:AA:57:AC:B9:5B:EA:8B:1A
Certificate issuer:       /CN=f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b
Certificate serial:       14CAD7
Authority key identifier: 40:C7:A9:96:4D:2F:E5:49:C1:2C:BC:81:8A:2B:14:61:82:E0:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/c6f69714a8ff9d93d04b1f19417ba97863912536.roa
Signing time:             Wed 31 Aug 2022 23:09:29 +0000
ROA not before:           Wed 31 Aug 2022 23:05:17 +0000
ROA not after:            Sat 31 Aug 2024 23:05:17 +0000
asID:                     271780
IP address blocks:        45.233.4.0/22 maxlen: 24
                          2801:174::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362647 (0x14cad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b
        Validity
            Not Before: Aug 31 23:05:17 2022 GMT
            Not After : Aug 31 23:05:17 2024 GMT
        Subject: CN=c6f69714a8ff9d93d04b1f19417ba97863912536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:1b:f8:9b:3e:bd:bd:4b:7b:2b:97:9f:34:
                    cd:d0:90:cf:64:9d:a6:58:c9:94:f5:b1:b7:d8:6c:
                    a3:fb:df:6d:60:6b:ce:69:22:e0:1f:ee:de:cf:00:
                    1c:f9:8e:de:d1:c8:9f:56:b1:23:9b:71:4b:2b:de:
                    98:b3:64:3b:70:12:33:cc:7e:6f:91:ea:56:0c:88:
                    c3:7b:f4:a4:3b:53:09:dc:5b:2c:b8:d1:a9:e9:dc:
                    3e:f7:2f:02:cc:c3:96:b7:9b:aa:18:05:b5:5c:53:
                    f5:a3:f2:62:6a:b5:2f:c5:74:91:9a:d7:3c:82:76:
                    e9:ce:ca:e7:28:5b:46:c8:d3:5d:90:40:73:2a:15:
                    ee:f7:a2:11:45:dc:d2:65:22:3a:cc:e4:b8:b8:3f:
                    1c:34:96:6e:8e:16:f7:95:08:9a:50:2d:99:4a:e4:
                    16:30:ca:0f:10:fe:2d:3a:26:0a:f9:c3:35:5e:23:
                    3b:6f:03:5c:d7:2e:94:d1:f3:35:73:85:9e:b9:93:
                    8d:72:4d:05:b8:38:97:8e:0c:75:21:b8:6e:7b:ea:
                    4a:a0:41:b6:43:a3:23:22:62:dc:47:ad:36:b8:9e:
                    67:8d:a8:24:96:71:1c:64:a1:c7:d0:78:c7:39:4c:
                    57:ee:d5:9a:59:30:7a:cb:16:fb:35:d1:e8:09:97:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:46:FA:D4:B5:B4:66:78:99:D3:27:AA:57:AC:B9:5B:EA:8B:1A
            X509v3 Authority Key Identifier:
                keyid:40:C7:A9:96:4D:2F:E5:49:C1:2C:BC:81:8A:2B:14:61:82:E0:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/c6f69714a8ff9d93d04b1f19417ba97863912536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ee5d5dd-3e57-4985-879b-01a86351b6be/f6247a1e89e7e22d9aa1371e2f9a43b00fa8cd6b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.4.0/22
                IPv6:
                  2801:174::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:f8:54:f1:fe:67:4f:a6:66:8c:d6:b6:54:16:0b:24:27:
         0d:ce:20:b0:ea:9c:3d:87:d0:7d:36:a4:5e:b4:17:2a:40:5a:
         da:4b:54:c0:6d:10:0e:59:71:9d:a9:17:31:23:5c:b9:f3:59:
         01:3e:e9:96:3f:a3:05:a7:38:ac:04:77:62:a6:d0:87:1c:ab:
         84:4e:06:19:92:96:5e:ce:d0:7c:d5:86:fc:ca:8d:2c:a6:7c:
         1a:98:fc:d2:df:08:84:4a:f2:04:29:be:66:b3:8c:c0:30:3c:
         28:ec:82:d5:0d:17:92:ea:85:3e:1a:c9:44:55:d0:c3:15:b3:
         f3:c6:0b:b4:44:8f:9a:cb:2f:a6:0f:85:77:1f:0d:cd:e3:a4:
         79:78:53:21:a4:94:a0:20:92:9f:fa:7c:c6:36:af:e0:af:70:
         52:68:44:ed:c5:0f:7c:20:55:d2:4a:8e:7b:66:d4:c0:80:31:
         50:7c:5f:0c:31:e1:e7:ba:be:43:8c:16:bb:40:c3:ff:76:58:
         0f:df:7c:90:fb:51:7b:19:da:3c:0f:58:3e:67:e6:2d:4c:df:
         72:a1:21:a4:bf:1d:66:4d:84:b5:cf:2d:dd:df:6c:30:19:12:
         46:8a:34:fe:2c:83:21:ba:b3:fa:db:f6:56:80:72:11:ba:4e:
         e1:65:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----