Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/fbe6f45429df7d1857af23f461d0a01c58937ea1.roa
File:                     fbe6f45429df7d1857af23f461d0a01c58937ea1.roa (raw, json)
Hash identifier:          FW90+rwhvLpToVgjpXAuEIbTF59PsdUhYqoKenK1oqk=
Subject key identifier:   7C:F4:76:F0:3F:BB:1D:B1:CF:C8:A1:BD:9B:95:2C:51:C0:0B:2E:2E
Certificate issuer:       /CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
Certificate serial:       1F0BEF
Authority key identifier: A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/fbe6f45429df7d1857af23f461d0a01c58937ea1.roa
Signing time:             Thu 27 Apr 2023 18:04:05 +0000
ROA not before:           Wed 26 Apr 2023 18:04:05 +0000
ROA not after:            Sun 27 Apr 2025 18:04:05 +0000
asID:                     265663
IP address blocks:        45.175.140.0/22 maxlen: 24
                          2803:6c60::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034671 (0x1f0bef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
        Validity
            Not Before: Apr 26 18:04:05 2023 GMT
            Not After : Apr 27 18:04:05 2025 GMT
        Subject: CN=fbe6f45429df7d1857af23f461d0a01c58937ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:32:1c:06:16:0d:fc:b2:aa:9d:4c:7c:12:
                    be:cd:e8:0a:44:0f:c7:f7:c5:37:e5:9c:d1:69:d9:
                    0d:41:37:0d:a0:ad:bd:da:fd:5f:02:fc:4e:5f:05:
                    60:9d:d9:97:92:e1:61:66:99:0b:c0:a3:0a:e8:c1:
                    88:21:cf:6f:77:34:f4:2e:5b:cc:a1:2d:f2:2b:79:
                    74:1e:e0:b6:68:6f:49:a5:ac:e3:4b:36:43:16:e1:
                    f9:75:48:a6:d0:58:12:a5:b2:b2:98:94:25:fd:73:
                    6a:51:64:f7:22:7b:1f:ea:a1:0a:ed:a0:8a:26:cb:
                    9b:bd:b7:02:09:15:32:13:fd:db:b2:85:10:21:95:
                    23:98:e0:2c:8c:4d:04:0d:b2:02:4e:95:96:5d:2b:
                    2d:f7:22:b8:bc:9c:bf:bc:3b:3f:f5:cf:82:4d:ba:
                    9f:d8:cc:dc:7f:2f:a5:23:87:33:a0:a5:a0:47:c9:
                    0b:9e:b5:f6:d4:09:b2:d3:93:53:2f:3d:68:ea:bc:
                    e4:e7:54:81:5f:1e:f1:e2:48:67:82:9d:3b:dd:88:
                    75:31:6e:5b:fa:06:87:f2:44:eb:b0:ad:30:4e:05:
                    c5:8f:3b:03:3f:dc:d6:28:30:33:e2:38:04:b5:db:
                    95:0d:ec:73:cb:68:72:a6:10:35:c7:69:62:50:5b:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:76:F0:3F:BB:1D:B1:CF:C8:A1:BD:9B:95:2C:51:C0:0B:2E:2E
            X509v3 Authority Key Identifier:
                keyid:A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/fbe6f45429df7d1857af23f461d0a01c58937ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.140.0/22
                IPv6:
                  2803:6c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:e1:ad:2b:2d:a1:6c:c7:37:cb:61:02:f4:84:4e:c7:10:
         b5:57:19:e2:48:65:ec:da:d5:b4:b8:ff:b6:1f:65:2e:66:72:
         32:a4:6a:71:c2:d3:42:ea:06:13:d7:60:10:22:0f:42:f1:54:
         4a:fc:fc:dc:19:1d:2f:44:c5:49:72:14:90:74:bd:f2:0e:a9:
         34:c4:da:5b:29:dc:dd:f7:16:fb:f5:92:0c:9e:8b:72:53:84:
         3b:0d:21:68:0a:67:82:ac:5b:af:9b:8d:7b:d0:a2:59:0a:8c:
         46:1b:a1:9f:7c:31:38:36:87:51:01:65:2f:97:c7:09:85:c4:
         60:41:51:d6:6c:32:e0:aa:d4:22:57:bc:15:70:60:3c:d3:85:
         c5:12:87:c2:03:e1:c1:c3:91:4b:32:c5:d4:66:c6:d9:3e:f3:
         1a:f7:40:6f:22:27:fb:61:85:62:13:e6:67:6e:f4:09:e3:04:
         ee:72:6d:b3:ae:ba:11:a1:5f:a9:71:ee:f5:3a:44:37:3d:d5:
         c1:7c:4a:78:4b:4b:b2:50:da:e8:83:9d:1e:0c:30:54:83:c1:
         95:63:e4:de:f0:da:96:ca:f4:1a:62:30:23:3b:39:16:4c:3f:
         57:94:0c:ec:19:58:ac:73:45:28:c8:3a:a1:14:5d:38:80:77:
         80:bf:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----