Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/f885e118bf0f999cdb2331c13b434917dbf18308.roa
File:                     f885e118bf0f999cdb2331c13b434917dbf18308.roa (raw, json)
Hash identifier:          eMq4tp7cEsP1SfaqubAUx2bH8e65D6h2IjzRzjXAF5w=
Subject key identifier:   84:A7:8B:6D:57:77:FA:EE:E7:9D:6E:8C:40:06:C6:D3:A7:F5:20:CE
Certificate issuer:       /CN=b31a8cfda0d53042955a6fbcadb44a381686bc7c
Certificate serial:       0491
Authority key identifier: F0:E3:B7:B8:9D:B3:10:B5:FF:B4:47:1B:E5:47:9F:B9:DA:23:1D:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31a8cfda0d53042955a6fbcadb44a381686bc7c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/f885e118bf0f999cdb2331c13b434917dbf18308.roa
Signing time:             Thu 14 Jul 2022 21:59:12 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Fri 14 Jul 2034 03:00:00 +0000
asID:                     266863
IP address blocks:        45.239.128.0/22 maxlen: 24
                          2803:f2a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31a8cfda0d53042955a6fbcadb44a381686bc7c
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2034 GMT
        Subject: CN=f885e118bf0f999cdb2331c13b434917dbf18308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:f4:f7:5e:20:34:f4:73:e5:4d:7f:b9:a5:
                    c9:ca:1e:21:34:9f:e7:d2:df:62:40:d7:cb:a3:33:
                    17:d0:fb:03:8d:a8:f3:9d:a0:67:31:52:98:fb:f5:
                    1f:53:ed:6a:b3:76:e2:53:c8:f6:13:7a:05:9d:0c:
                    91:2a:12:5c:df:b0:25:79:1d:74:5c:cd:db:50:ef:
                    39:10:c9:a7:99:a8:8f:de:62:c2:61:a7:5f:d5:87:
                    ca:cf:c5:d0:fa:63:c1:fa:ef:21:00:e5:de:37:57:
                    24:fa:ef:c2:0f:9b:8d:d7:86:db:79:2a:48:ca:2a:
                    02:c9:63:65:84:47:9b:d6:31:a7:64:6d:d4:4e:33:
                    0b:86:b9:81:5f:64:5b:8d:98:f4:47:e6:56:0e:72:
                    96:ce:c7:0b:c7:e9:b7:f3:e4:ca:84:60:39:24:f2:
                    97:e9:3f:3b:85:2c:12:02:27:8a:e3:13:07:a5:e7:
                    7b:38:ba:79:70:c2:0b:38:f8:df:13:eb:6d:0f:e5:
                    a9:3b:41:a8:dc:85:06:ce:f8:4f:e3:31:d9:f0:0f:
                    aa:89:51:bb:3f:fd:1b:19:0e:42:8b:cf:c6:e2:37:
                    1f:89:13:ea:f1:04:40:be:93:80:8f:05:c3:e0:4c:
                    9e:98:7c:e2:ee:f4:69:4a:3e:ad:63:0c:83:36:66:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A7:8B:6D:57:77:FA:EE:E7:9D:6E:8C:40:06:C6:D3:A7:F5:20:CE
            X509v3 Authority Key Identifier:
                keyid:F0:E3:B7:B8:9D:B3:10:B5:FF:B4:47:1B:E5:47:9F:B9:DA:23:1D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31a8cfda0d53042955a6fbcadb44a381686bc7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/f885e118bf0f999cdb2331c13b434917dbf18308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/b31a8cfda0d53042955a6fbcadb44a381686bc7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.128.0/22
                IPv6:
                  2803:f2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:81:13:ff:f3:27:1a:63:87:06:85:b7:27:7a:6a:00:92:94:
         03:f7:76:94:65:37:f2:9e:5c:79:0d:47:88:eb:de:c2:f8:88:
         6b:e5:4a:85:e0:66:01:e9:24:95:d9:e3:b3:ae:48:81:4f:d4:
         bb:50:39:23:1d:c6:c4:0b:6d:6e:f6:75:22:4e:90:dc:36:f1:
         e1:e8:3d:c3:0c:a3:79:20:6f:75:e7:1b:d6:fa:3b:45:3f:93:
         48:a8:2d:c5:b4:58:de:90:7b:01:71:f2:b7:7a:6e:d4:7f:d6:
         c3:79:75:61:fe:6b:46:bd:d2:71:b5:5c:74:e2:f1:00:cb:26:
         44:6e:bb:06:a7:69:6b:4b:6c:d9:19:e3:ac:ea:63:9a:dc:73:
         82:71:a8:73:7d:ab:48:72:28:68:b6:aa:f7:1f:7f:eb:7f:4e:
         f9:a2:40:3b:29:1f:c1:bf:b3:8e:96:dc:1c:a7:a0:63:1a:e4:
         82:66:f7:6c:c9:0a:fc:2b:01:1b:92:18:91:d8:f1:12:83:63:
         a8:8f:bf:f5:bc:9b:70:b6:78:c0:f4:79:70:e6:72:c5:a5:4d:
         20:02:64:62:93:f9:f4:ff:7c:d2:98:61:7e:ff:a1:61:c8:5a:
         67:f3:da:4c:d8:a7:51:71:0e:2d:be:f0:a1:8a:c6:c4:3d:0d:
         a5:bb:3b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----