Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/242b0fdf6e324fc953dd2d63a65c753442ac8b85.roa
File:                     242b0fdf6e324fc953dd2d63a65c753442ac8b85.roa (raw, json)
Hash identifier:          YCpB4WGpqfJH01+bqBdTPwI3P1bINxkDpbBr+v2qkg0=
Subject key identifier:   B0:BF:D1:16:FF:C1:8B:36:FD:85:EC:FB:0D:AD:B8:D2:0F:DE:A2:D2
Certificate issuer:       /CN=fbfb66278713434fe3164de2e5226004347545cb
Certificate serial:       196078
Authority key identifier: 16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/242b0fdf6e324fc953dd2d63a65c753442ac8b85.roa
Signing time:             Fri 28 Oct 2022 03:17:04 +0000
ROA not before:           Thu 27 Oct 2022 03:15:54 +0000
ROA not after:            Mon 28 Oct 2024 03:15:54 +0000
asID:                     61468
IP address blocks:        45.182.117.0/24 maxlen: 24
                          2801:1f:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663096 (0x196078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfb66278713434fe3164de2e5226004347545cb
        Validity
            Not Before: Oct 27 03:15:54 2022 GMT
            Not After : Oct 28 03:15:54 2024 GMT
        Subject: CN=242b0fdf6e324fc953dd2d63a65c753442ac8b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:0d:29:39:b3:89:01:fa:2a:a4:f8:69:4c:
                    66:0a:eb:f4:f2:58:59:73:d8:76:f3:db:44:bb:e5:
                    65:7a:bf:5f:5d:70:38:09:39:86:bb:18:75:f9:63:
                    e3:a4:81:43:d4:b5:d0:de:af:f6:48:36:43:1f:1d:
                    df:36:bc:f6:02:61:3d:57:21:9b:ff:d2:30:fb:c3:
                    c5:d8:af:cb:ed:8c:61:b8:57:94:87:a3:9e:75:36:
                    79:1e:fb:88:5c:4a:ab:e3:a0:6f:bd:44:8a:7a:65:
                    ca:8a:8d:3e:15:74:1e:82:2d:b2:11:6e:8f:71:50:
                    02:ce:09:40:00:3c:fa:e7:b7:91:37:ce:d8:96:c8:
                    14:7c:d4:b3:0e:43:7c:2b:21:9c:98:f8:c6:f5:df:
                    51:31:04:5c:78:7f:96:29:49:bc:09:53:05:91:fb:
                    92:a5:a3:f8:18:1b:89:e3:e2:91:b8:2f:c3:79:24:
                    21:ab:ab:7f:5b:fe:94:0d:10:66:37:f7:ff:d9:16:
                    e3:8c:f6:7a:79:42:e8:02:a2:e9:e2:f5:ef:96:d2:
                    1c:ab:55:bb:16:87:ee:73:ed:b7:49:63:ca:79:ac:
                    70:a0:45:d9:c7:91:b7:45:64:14:f1:e0:68:69:39:
                    05:02:f2:4f:df:9d:5f:f8:aa:98:5c:72:73:89:43:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BF:D1:16:FF:C1:8B:36:FD:85:EC:FB:0D:AD:B8:D2:0F:DE:A2:D2
            X509v3 Authority Key Identifier:
                keyid:16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/242b0fdf6e324fc953dd2d63a65c753442ac8b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/fbfb66278713434fe3164de2e5226004347545cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:32:d0:8a:93:b6:60:3d:71:0f:53:5b:39:2c:24:bb:51:f5:
         f0:83:bf:2e:53:10:c8:39:5a:88:83:55:3a:c7:53:26:be:35:
         38:37:ee:4d:59:5a:10:49:28:4d:67:23:d4:d5:f3:5f:be:87:
         ef:ea:c8:94:e5:00:b1:d1:23:2a:bb:35:3c:2b:fb:39:98:ec:
         cb:3b:01:32:ca:34:7d:93:6c:e1:74:68:85:75:42:f8:02:61:
         66:6f:13:8c:50:b6:ff:0a:9f:c5:e8:d7:14:28:61:35:fb:8e:
         6f:e1:46:1f:2a:aa:27:3d:d8:82:a0:14:72:6c:68:48:c3:e7:
         83:f7:6f:50:bb:e6:fb:3f:92:d5:f7:a7:8e:a0:4b:b0:b1:b3:
         19:40:e3:29:25:7d:6e:8e:14:53:cb:71:6d:de:54:59:2f:a1:
         3e:7b:cc:19:92:67:03:db:90:8e:bb:8c:a4:aa:ef:80:7e:9f:
         f1:94:71:ae:e9:8c:81:15:60:c1:c6:04:b5:2f:e1:d1:43:86:
         7e:ac:3f:fd:34:c5:91:a6:3c:ff:8e:f2:4a:d2:02:e8:7b:4b:
         3a:b9:a5:04:cb:a6:7f:0a:ab:f2:c9:7b:58:53:c2:4e:03:4e:
         3d:7b:9a:8f:d3:1b:2f:c7:9a:c4:1a:20:ae:7e:43:84:96:47:
         78:ca:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----