Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/442e77cd-144c-4757-9cfa-c14636590e11/1cebbb9b8035bb06642180a85c6385cd37bfc255.roa
File:                     1cebbb9b8035bb06642180a85c6385cd37bfc255.roa (raw, json)
Hash identifier:          iT1FeSwiCCWtsHqLZ6Pd2j1vhevG/mdSAHvfNyBdgPw=
Subject key identifier:   DE:68:FB:90:E6:20:EC:5F:12:B7:6F:F4:A6:E3:EB:40:9A:74:34:13
Certificate issuer:       /CN=b97b9675c96fa9aaa0e87c1d995ebd15784bb95e
Certificate serial:       412C
Authority key identifier: 63:0C:E2:6E:A8:81:75:13:F3:CC:85:F6:A2:49:F6:B7:1B:DE:29:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b97b9675c96fa9aaa0e87c1d995ebd15784bb95e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/442e77cd-144c-4757-9cfa-c14636590e11/1cebbb9b8035bb06642180a85c6385cd37bfc255.roa
Signing time:             Tue 13 Sep 2022 23:12:28 +0000
ROA not before:           Tue 13 Sep 2022 23:12:26 +0000
ROA not after:            Fri 13 Sep 2024 23:12:26 +0000
asID:                     64109
IP address blocks:        45.230.34.0/23 maxlen: 24
                          2801:13:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16684 (0x412c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97b9675c96fa9aaa0e87c1d995ebd15784bb95e
        Validity
            Not Before: Sep 13 23:12:26 2022 GMT
            Not After : Sep 13 23:12:26 2024 GMT
        Subject: CN=1cebbb9b8035bb06642180a85c6385cd37bfc255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:58:63:cc:2e:91:68:1a:cd:0d:41:e3:b8:
                    47:66:42:07:a3:e5:40:b3:e0:52:31:11:17:fd:98:
                    42:d8:4a:c6:12:bf:e6:bf:91:ec:9a:59:d7:ce:5e:
                    71:38:df:87:e3:9a:bd:85:42:b8:b5:2a:94:73:b5:
                    04:1b:d4:d1:b4:d3:0c:79:28:f6:92:ed:94:b2:ba:
                    97:82:b6:89:93:8e:a8:4a:3d:9d:8f:ea:da:1b:2e:
                    86:70:ad:d7:2e:7b:8c:0b:43:4f:36:46:1d:c1:f3:
                    4a:e9:81:28:78:00:bd:64:fd:20:9a:8f:f3:21:89:
                    96:ca:e0:6e:26:7a:49:63:0a:02:c2:1c:c8:07:57:
                    47:9f:df:62:51:5a:51:99:d9:dc:57:57:ae:26:5b:
                    46:58:7d:8f:d9:e6:64:19:fe:2b:66:a3:4a:ec:a1:
                    5f:84:bd:1b:df:27:36:bf:10:e6:72:7e:8d:4f:ee:
                    8a:c7:20:5f:fc:59:28:36:99:95:b0:80:b1:bf:42:
                    26:7d:53:00:63:75:5f:cc:0e:00:4e:bf:e5:b4:25:
                    6f:51:1a:4b:dc:fb:84:44:91:eb:54:1c:c3:0a:7a:
                    70:03:d5:df:1e:f2:26:54:f1:d1:01:83:43:93:2c:
                    e4:61:44:6e:05:71:55:bf:25:e9:47:3b:07:e1:0b:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:FB:90:E6:20:EC:5F:12:B7:6F:F4:A6:E3:EB:40:9A:74:34:13
            X509v3 Authority Key Identifier:
                keyid:63:0C:E2:6E:A8:81:75:13:F3:CC:85:F6:A2:49:F6:B7:1B:DE:29:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b97b9675c96fa9aaa0e87c1d995ebd15784bb95e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/442e77cd-144c-4757-9cfa-c14636590e11/1cebbb9b8035bb06642180a85c6385cd37bfc255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/442e77cd-144c-4757-9cfa-c14636590e11/b97b9675c96fa9aaa0e87c1d995ebd15784bb95e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.34.0/23
                IPv6:
                  2801:13:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:93:57:86:56:61:92:70:d0:22:71:b0:32:b1:09:02:02:9b:
         16:d7:a2:e0:0e:a0:f4:c6:bd:25:aa:35:3d:6e:63:96:6f:3e:
         60:c1:da:8c:78:ad:41:26:2c:ef:79:66:ef:54:59:ef:ce:37:
         3d:26:ac:ac:a4:c4:45:09:90:42:e2:23:42:fd:75:87:a2:10:
         f5:b7:d9:ea:0a:8a:2e:60:3e:cd:d9:7b:37:1c:1c:a5:b3:4a:
         75:ce:96:c5:15:24:cd:38:37:cb:3b:cb:55:0b:b0:f0:88:24:
         55:5e:2c:a2:8e:df:f7:a5:fb:fb:7e:1d:98:7d:80:7f:89:20:
         8d:ec:dd:d6:52:f9:cd:d1:0c:83:f4:d8:78:e3:e0:b3:57:64:
         8a:ee:6e:1d:72:0b:f8:32:16:75:02:93:22:30:76:bc:73:d3:
         6b:60:fa:a7:70:ae:0d:bd:57:15:50:64:21:ba:a9:6b:42:50:
         d7:5e:5c:75:8f:a3:96:f3:e5:6d:82:98:78:14:ea:04:52:b2:
         d4:ac:5e:05:53:15:58:e6:15:4d:50:73:9a:65:74:e7:d5:c6:
         3d:59:20:58:a9:76:4f:fc:b6:fb:83:0d:20:13:07:62:e6:93:
         cb:4f:96:ae:52:87:bf:58:10:51:57:46:93:fb:73:be:5e:c6:
         c2:bc:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----