Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/2733636eb6258cd7a49f2faeb3dc0830b0aafbd8.roa
File:                     2733636eb6258cd7a49f2faeb3dc0830b0aafbd8.roa (raw, json)
Hash identifier:          yDLmpLwrrXZcIugjSuUWyNuoqc7c3RE6sP7m7NGDA8E=
Subject key identifier:   6C:35:F4:A9:9B:5E:88:19:75:40:73:F8:BE:89:77:A4:97:4B:F4:6B
Certificate issuer:       /CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
Certificate serial:       1D717A
Authority key identifier: A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/2733636eb6258cd7a49f2faeb3dc0830b0aafbd8.roa
Signing time:             Fri 24 Feb 2023 11:23:09 +0000
ROA not before:           Mon 22 Mar 2021 14:29:10 +0000
ROA not after:            Tue 24 Mar 2026 14:29:10 +0000
asID:                     265663
IP address blocks:        45.175.140.0/22 maxlen: 24
                          45.175.140.0/24 maxlen: 24
                          45.175.141.0/24 maxlen: 24
                          45.175.142.0/24 maxlen: 24
                          45.175.143.0/24 maxlen: 24
                          2803:6c60::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929594 (0x1d717a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
        Validity
            Not Before: Mar 22 14:29:10 2021 GMT
            Not After : Mar 24 14:29:10 2026 GMT
        Subject: CN=2733636eb6258cd7a49f2faeb3dc0830b0aafbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:ca:dd:67:17:5d:46:b5:df:78:65:67:c8:
                    9c:3c:6a:a1:84:b4:a5:2a:27:60:3a:3f:fe:9d:fe:
                    1b:42:2d:b9:01:b1:c9:b0:aa:ba:96:ce:36:2b:68:
                    e9:1c:08:df:b3:be:84:a5:9f:c8:ed:e5:d4:97:73:
                    01:c0:92:d6:c8:32:85:a3:4a:e8:b2:1f:97:a0:46:
                    71:0e:3c:0f:59:b7:f2:7a:e9:74:86:e6:55:eb:34:
                    92:90:e1:7a:ff:15:59:19:61:78:56:6a:7a:de:ae:
                    91:68:57:c9:64:c9:ac:04:40:0b:4a:27:fe:8d:99:
                    49:e4:e8:96:bf:9a:73:f8:20:12:e3:fd:82:5b:50:
                    d1:83:9a:ea:9c:4a:2d:22:8b:ac:ca:cf:47:25:17:
                    63:10:0c:9b:b5:84:24:6d:92:a2:b3:5d:6f:f1:72:
                    1a:eb:0c:be:3f:16:08:63:ed:97:83:e8:8d:f9:50:
                    42:7f:89:3d:0e:00:c4:82:16:fc:71:a0:f1:1f:ec:
                    7a:67:61:55:af:1f:aa:ba:8c:7e:4c:39:f4:c2:08:
                    87:19:03:e5:8c:39:02:b6:e5:f7:46:61:8f:c4:9f:
                    3c:cd:db:cb:39:2b:2e:56:4f:3d:8d:e5:21:bc:ce:
                    3f:77:ba:20:4f:4a:46:c6:6c:66:38:37:ed:5a:8e:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:35:F4:A9:9B:5E:88:19:75:40:73:F8:BE:89:77:A4:97:4B:F4:6B
            X509v3 Authority Key Identifier:
                keyid:A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/2733636eb6258cd7a49f2faeb3dc0830b0aafbd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.140.0/22
                IPv6:
                  2803:6c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:a6:56:df:1b:26:f8:77:b9:c4:0e:52:22:3c:84:29:6a:
         24:94:17:5a:c4:d5:3e:68:3f:f8:72:6f:a7:1f:8b:ea:67:4c:
         55:9d:97:fc:31:17:8f:e0:b1:c8:ea:0a:ba:ca:3e:eb:ca:9d:
         6e:da:2f:ee:14:d7:ed:4e:4d:bf:2f:86:f1:a8:30:f8:68:79:
         b4:bf:c8:73:c0:3a:a8:be:cc:45:63:18:d7:6e:7b:05:8a:15:
         70:d9:48:13:10:df:a4:77:13:53:56:40:44:24:6a:19:0a:1a:
         13:ee:4f:99:f5:d9:95:79:7d:aa:f3:4c:da:fc:87:35:5a:35:
         65:db:b9:83:d4:e8:36:72:16:60:df:d5:8c:93:73:c9:ad:d4:
         3e:77:cc:0f:79:78:33:29:79:c5:03:b2:62:3a:a1:fd:39:01:
         6c:80:95:91:19:4c:65:5e:e2:a9:ca:94:40:aa:e0:38:d5:cc:
         d1:b0:8f:58:fd:69:e8:24:39:63:9f:b0:3d:06:89:24:d2:9b:
         15:95:09:a2:7a:f8:91:69:d3:2e:1b:f4:28:5a:ff:f1:a9:14:
         fe:94:62:b9:62:cd:7b:2b:4d:8d:c1:b9:9f:da:eb:31:21:10:
         71:cf:f5:96:47:0b:bb:a0:ec:70:19:35:e9:2d:6b:cb:ba:da:
         23:bf:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----