Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/7f07b9376a64c4f3da14ecef745bfa82b93edc3e.roa
File:                     7f07b9376a64c4f3da14ecef745bfa82b93edc3e.roa (raw, json)
Hash identifier:          oPN+16oaXQKgziv4RZDn1HRlZTaKRscGrAn6V1Hhoec=
Subject key identifier:   68:67:F0:B6:91:46:86:89:88:58:79:BE:DF:BA:93:C8:72:6D:8D:CE
Certificate issuer:       /CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
Certificate serial:       10F121
Authority key identifier: 89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/7f07b9376a64c4f3da14ecef745bfa82b93edc3e.roa
Signing time:             Wed 29 Mar 2023 00:37:09 +0000
ROA not before:           Fri 11 Nov 2022 13:47:39 +0000
ROA not after:            Fri 15 Nov 2024 13:47:39 +0000
asID:                     267929
IP address blocks:        45.179.244.0/22 maxlen: 22
                          2803:7e60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110305 (0x10f121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
        Validity
            Not Before: Nov 11 13:47:39 2022 GMT
            Not After : Nov 15 13:47:39 2024 GMT
        Subject: CN=7f07b9376a64c4f3da14ecef745bfa82b93edc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:0a:59:da:af:01:53:92:1a:9f:99:52:79:
                    21:c0:96:44:ae:b4:c5:f0:5d:ee:6a:3a:a0:21:dd:
                    90:f7:c2:07:c5:85:84:34:a9:80:cf:79:a3:2c:2d:
                    2e:71:34:93:b2:84:f7:6f:e0:21:c7:be:4c:21:b7:
                    82:03:0c:c0:ba:31:f5:d7:fb:20:ba:56:01:cf:7c:
                    d5:88:ed:aa:65:04:8c:5f:ec:ba:31:76:13:9d:d8:
                    82:ca:a4:9b:cd:79:80:57:d4:64:1d:45:03:47:ca:
                    e7:e2:8e:13:4a:69:9a:40:61:82:44:c5:97:94:5e:
                    bf:27:1e:0b:59:9d:87:cc:0a:22:5a:fc:43:41:4f:
                    f0:70:d4:6f:eb:8d:fa:4c:b0:c6:59:2c:37:ec:e2:
                    3f:6d:e5:2d:87:bf:15:21:a0:12:e3:ae:8b:7c:98:
                    da:65:cb:02:4d:e8:fb:cf:5b:55:c1:b9:0b:13:90:
                    4a:82:08:0e:61:ef:9c:69:63:11:69:a6:c5:75:89:
                    89:04:f0:ee:e7:10:5f:11:46:4a:34:52:1c:47:83:
                    47:cc:41:9e:77:8b:da:ba:aa:22:06:ea:dd:1c:06:
                    08:24:a8:bc:d8:60:0a:21:41:d6:62:d9:4a:7f:71:
                    51:e3:55:db:98:37:74:9e:30:c2:88:7c:7e:d0:13:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:67:F0:B6:91:46:86:89:88:58:79:BE:DF:BA:93:C8:72:6D:8D:CE
            X509v3 Authority Key Identifier:
                keyid:89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/7f07b9376a64c4f3da14ecef745bfa82b93edc3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/e2b62d0be638d98e406ee5e9dd9c9858052a3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.244.0/22
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:1b:15:c7:dd:61:2e:72:87:6e:40:c2:db:f7:79:07:04:
         f3:a6:39:50:5e:b8:db:3a:68:95:0e:0c:6c:ae:a9:d8:45:5f:
         c4:64:d9:3a:82:80:cf:e8:6b:56:11:df:c5:ba:73:d4:73:e9:
         0e:69:4a:05:86:ab:99:62:b8:b5:9d:3e:3d:8d:06:b5:e7:ab:
         ba:ed:6f:f2:95:e6:67:ea:41:3c:2a:39:3a:7b:7c:bf:5d:60:
         94:7b:32:92:a4:ba:d2:80:7a:d1:2c:34:92:4a:c2:62:73:f9:
         dc:6a:ba:14:54:37:58:e2:7e:b5:0d:03:5e:23:01:10:f6:f4:
         5d:95:47:dd:f9:10:54:45:98:25:d9:2e:21:ba:d4:58:6f:11:
         b6:d4:d2:cf:7a:64:0a:e5:36:62:ce:6a:3f:e2:c3:1b:56:91:
         33:31:cd:36:45:bf:6c:98:c3:fa:ff:e7:9f:bf:13:f9:fd:20:
         01:59:52:af:72:d6:25:48:7b:07:a6:f1:0d:e4:bc:13:44:3c:
         b2:ce:65:bd:e4:62:65:b8:d4:b7:98:4a:4c:23:b9:a7:7f:f2:
         39:c7:71:cf:30:21:1c:73:d6:f2:a0:85:85:1c:d7:f8:59:94:
         bf:83:7c:49:c3:1b:a1:3d:d5:68:50:46:7a:88:9a:c0:1b:e1:
         33:2d:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----