Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/be3cae44a9cb5f3f5f7966def0500bd876212acc.roa
File:                     be3cae44a9cb5f3f5f7966def0500bd876212acc.roa (raw, json)
Hash identifier:          SeyMC3MYYthPj4/EnUMdnaA+v9wyTO14AJWFyDd2vxQ=
Subject key identifier:   4C:4C:CF:39:F6:90:96:16:7B:5C:FD:06:63:6D:4C:0E:90:2D:90:08
Certificate issuer:       /CN=fbfb66278713434fe3164de2e5226004347545cb
Certificate serial:       1964BD
Authority key identifier: 16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/be3cae44a9cb5f3f5f7966def0500bd876212acc.roa
Signing time:             Fri 28 Oct 2022 03:19:02 +0000
ROA not before:           Wed 26 Oct 2022 03:15:54 +0000
ROA not after:            Mon 28 Oct 2024 03:15:54 +0000
asID:                     22724
IP address blocks:        45.182.117.0/24 maxlen: 24
                          2801:1f:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664189 (0x1964bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfb66278713434fe3164de2e5226004347545cb
        Validity
            Not Before: Oct 26 03:15:54 2022 GMT
            Not After : Oct 28 03:15:54 2024 GMT
        Subject: CN=be3cae44a9cb5f3f5f7966def0500bd876212acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:5d:2e:03:58:ab:74:c8:bf:3f:8f:58:0f:
                    f8:47:53:dd:42:0a:bb:7b:6c:55:3c:e6:b1:32:b1:
                    6b:be:be:b4:e0:0f:18:86:35:1c:8d:ac:58:4d:f6:
                    16:10:67:1d:1d:ab:dd:c3:ee:51:e4:94:be:0b:f4:
                    18:63:02:f3:17:4b:3d:a9:12:74:af:cb:69:e0:69:
                    34:8b:ab:dd:e8:84:36:be:c8:75:37:b5:60:e3:42:
                    53:52:22:1f:34:6e:d5:34:32:4d:10:28:d7:bb:35:
                    0c:b7:e4:8a:f3:f7:5f:22:2a:47:f9:55:3e:41:21:
                    54:16:6f:c1:71:c3:3e:f1:a5:a6:36:c4:c9:bb:cb:
                    2b:ab:f8:5b:8a:63:25:0c:a5:4e:49:74:c0:d2:8c:
                    fe:a2:b8:e7:94:a4:94:5c:f7:29:40:77:38:bc:9c:
                    db:ba:08:7a:88:e9:e5:4f:ba:66:d9:77:52:81:1c:
                    78:63:e1:fe:46:3c:9e:58:67:15:9b:e3:cb:37:2f:
                    47:c0:3c:16:c2:a4:f7:54:69:50:bd:a9:8e:f7:54:
                    10:23:8b:2f:c5:a4:6f:a7:a1:16:7d:5c:1e:64:f0:
                    11:d3:e3:32:93:e5:39:7a:66:70:f9:03:a3:66:9b:
                    3f:5c:74:77:d6:b4:53:a6:db:4f:f0:dc:71:4d:80:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:CF:39:F6:90:96:16:7B:5C:FD:06:63:6D:4C:0E:90:2D:90:08
            X509v3 Authority Key Identifier:
                keyid:16:8B:5F:AF:17:07:14:89:49:85:89:36:15:75:65:C3:D7:05:03:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbfb66278713434fe3164de2e5226004347545cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/be3cae44a9cb5f3f5f7966def0500bd876212acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52adc435-7de0-48d7-8f9c-7a2b3c3c7092/fbfb66278713434fe3164de2e5226004347545cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:18:dd:ab:d0:b0:6d:6a:b0:2a:bd:83:0e:97:cd:0c:dd:
         93:6c:4d:b2:3e:00:92:b5:69:60:f3:33:f4:0c:15:c7:ac:56:
         0e:a8:16:33:b2:80:1e:e5:c2:b6:91:fd:d3:d9:f4:7e:ed:17:
         ae:c5:1d:30:73:9a:0e:ac:5f:e6:3a:cc:45:e3:1b:72:70:89:
         a1:6a:d3:ca:4f:aa:b4:e5:d1:e0:14:b6:50:6e:a5:f8:15:41:
         de:41:7a:55:90:cb:3d:5e:b9:2d:8f:86:24:6c:e9:d7:fa:f5:
         a2:cc:c7:7a:9b:f5:83:85:c5:1a:e1:0f:54:37:3d:4a:02:9e:
         47:d4:32:31:21:c2:b0:5c:7c:cb:94:49:de:60:24:0f:a0:bd:
         89:bd:66:07:d6:e2:9f:3b:fc:97:88:94:0a:3b:59:2c:65:8e:
         dc:e8:c3:7c:df:ce:dd:6f:7e:c1:0e:61:b7:0c:57:19:36:b9:
         9c:aa:be:fa:d8:5c:c2:b0:83:15:84:f7:d7:1c:59:d5:d0:ee:
         38:02:b9:3b:d7:73:f3:71:73:b2:8f:f4:08:74:a9:3c:2e:97:
         a9:2c:7c:23:a4:3c:f3:bf:9b:45:bf:74:3e:29:11:f4:cc:83:
         30:63:36:8e:4e:c1:8d:53:c1:44:2f:b1:48:d8:ca:44:d5:45:
         5e:72:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----