Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/54d8fdafd17a5197d8c17a64ae430d8a42a705e2.roa
File:                     54d8fdafd17a5197d8c17a64ae430d8a42a705e2.roa (raw, json)
Hash identifier:          esarjmKGgSs1bR4p8144uUpv3CnlzAuJW9h4xlh+lOY=
Subject key identifier:   6F:9E:E3:32:32:04:0F:DF:41:99:C0:43:C9:0E:63:75:A9:08:57:44
Certificate issuer:       /CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
Certificate serial:       10F7D7
Authority key identifier: 89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/54d8fdafd17a5197d8c17a64ae430d8a42a705e2.roa
Signing time:             Wed 29 Mar 2023 02:13:52 +0000
ROA not before:           Thu 10 Nov 2022 13:47:39 +0000
ROA not after:            Fri 15 Nov 2024 13:47:39 +0000
asID:                     267929
IP address blocks:        45.179.244.0/22 maxlen: 22
                          2803:7e60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112023 (0x10f7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
        Validity
            Not Before: Nov 10 13:47:39 2022 GMT
            Not After : Nov 15 13:47:39 2024 GMT
        Subject: CN=54d8fdafd17a5197d8c17a64ae430d8a42a705e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:55:20:58:90:d2:b4:b9:d1:1d:6b:c2:eb:22:
                    98:91:63:4d:9d:e2:a3:b6:90:36:e1:99:c8:5b:50:
                    dc:df:92:92:68:14:8b:18:1f:96:38:e0:30:de:8d:
                    a7:06:ea:24:79:a5:f8:80:87:aa:a2:fe:d2:d5:b1:
                    ea:ed:90:77:2e:34:ff:4d:1a:b6:4c:c9:18:c9:79:
                    b9:93:2e:87:d7:d9:4e:a6:8e:06:04:c8:45:7f:d4:
                    35:46:49:66:5b:c9:bd:55:c2:fb:63:09:cd:93:e6:
                    ee:ca:d8:89:5b:a7:91:99:2a:ab:97:fc:6b:75:8a:
                    e9:b1:81:5f:e8:19:09:34:fd:f9:4d:51:f5:49:c1:
                    df:4a:cb:59:52:92:2f:29:6b:7b:0b:47:06:4a:9a:
                    66:d5:e3:69:be:83:ef:e2:a0:71:6e:d2:f7:9f:bb:
                    b4:08:8f:9a:f8:98:2d:fb:1f:c5:ce:a9:34:43:fc:
                    31:ac:51:75:64:09:e3:15:0d:82:99:c2:50:b9:ab:
                    7f:19:40:e9:c8:cf:f4:b5:11:e2:80:5a:42:f3:9c:
                    01:b5:53:55:ce:5a:6f:f6:a7:bf:ef:90:39:ca:5b:
                    b9:04:b0:1d:80:cd:27:af:74:35:3e:7f:a0:ae:b2:
                    b9:c1:b7:de:eb:69:50:02:0c:68:c6:ff:dc:d2:74:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9E:E3:32:32:04:0F:DF:41:99:C0:43:C9:0E:63:75:A9:08:57:44
            X509v3 Authority Key Identifier:
                keyid:89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/54d8fdafd17a5197d8c17a64ae430d8a42a705e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/e2b62d0be638d98e406ee5e9dd9c9858052a3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.244.0/22
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:b0:7f:fe:1d:5c:e0:c6:7a:3d:bc:0f:e0:53:e2:e7:d8:
         22:74:79:5f:c9:74:3a:77:cc:9e:84:9f:9c:0d:b6:29:f6:ab:
         75:6e:47:fe:44:89:a6:ad:33:83:0f:e2:f8:b9:bb:09:bd:52:
         76:e6:d1:e0:ce:08:bd:f9:f1:6f:1b:30:69:85:ae:ae:39:e5:
         c8:46:e4:f3:26:e9:cb:9c:1e:61:83:b6:dc:fd:3a:6f:12:25:
         b1:35:82:eb:e7:ff:80:e5:99:6c:df:d3:db:f0:66:37:f3:ac:
         61:af:a8:56:14:e5:68:13:ba:f4:95:c5:97:f3:38:c4:59:d3:
         ef:c7:63:ec:0e:a7:2b:f4:64:0c:e4:6e:c0:3e:83:bb:15:bd:
         c3:25:c1:11:98:71:18:db:2d:70:34:bc:a6:74:38:0a:03:5c:
         cd:2c:92:f1:5f:b0:e1:2a:95:58:57:32:07:59:21:77:d2:67:
         0f:61:b2:f8:5f:ae:b0:4f:4c:ab:bd:5b:10:39:9f:87:d3:83:
         77:15:a1:0c:c0:a1:b1:d3:1d:b1:d3:2e:82:c6:cc:25:f8:d9:
         5f:32:12:84:15:e2:b4:1e:cd:b8:8a:61:51:b9:b4:e1:19:87:
         30:88:f9:fe:94:55:44:78:4d:f5:b7:8f:ff:b5:51:1c:ed:07:
         02:90:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----