Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/7aa55e1091f025321da05ff12ff94acbb855b2d0.roa
File:                     7aa55e1091f025321da05ff12ff94acbb855b2d0.roa (raw, json)
Hash identifier:          E4WhHYvgEnDBHbP/ujP6Yd0SZ/Q+pc7PwSzNbHadIJY=
Subject key identifier:   E6:61:02:1E:2A:99:1D:E6:0E:32:B8:88:71:E5:B9:3E:D3:C4:3A:5F
Certificate issuer:       /CN=18578d1d6434fa77964783314509fc7818281b0a
Certificate serial:       16E022
Authority key identifier: 97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/7aa55e1091f025321da05ff12ff94acbb855b2d0.roa
Signing time:             Tue 13 Sep 2022 18:08:49 +0000
ROA not before:           Tue 13 Sep 2022 18:05:31 +0000
ROA not after:            Fri 13 Sep 2024 18:05:31 +0000
asID:                     270158
IP address blocks:        45.189.252.0/22 maxlen: 24
                          2806:36a::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499170 (0x16e022)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18578d1d6434fa77964783314509fc7818281b0a
        Validity
            Not Before: Sep 13 18:05:31 2022 GMT
            Not After : Sep 13 18:05:31 2024 GMT
        Subject: CN=7aa55e1091f025321da05ff12ff94acbb855b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:4f:89:ee:39:fa:27:3c:e4:d1:c6:e6:24:
                    26:a1:3e:58:e1:b0:0b:07:11:e5:49:f5:d6:63:58:
                    80:e2:bc:e4:1d:74:fd:6d:74:56:cf:1c:e6:5c:5b:
                    2c:61:b0:4c:ce:c5:85:66:12:ca:7d:58:4c:50:9b:
                    3a:b8:14:ba:89:b8:a4:61:62:fa:32:50:93:91:be:
                    1e:d0:81:c3:ea:46:f2:95:73:2d:08:47:e6:66:8d:
                    42:20:1b:d3:80:8f:1e:14:55:d1:14:73:4b:44:c6:
                    a8:bc:a0:2b:9f:a9:69:b2:9f:4f:61:9d:4b:11:6c:
                    7f:76:08:e1:6b:de:ed:0b:e1:50:1e:3b:74:3a:26:
                    04:62:d3:d8:f2:a5:d8:d3:80:e1:8c:ba:c2:fc:52:
                    5e:8f:2a:52:18:7f:f9:28:34:1d:45:84:dd:c9:83:
                    3c:58:88:23:ac:1e:99:8f:b0:ce:28:ac:55:d0:f2:
                    ad:44:e8:b5:13:8a:5b:e2:1d:b5:de:d8:1c:06:8b:
                    bd:2c:b3:f4:14:b9:57:b1:51:fd:8c:67:08:a0:88:
                    a5:65:af:80:b3:ad:a4:1d:18:96:33:72:03:96:70:
                    5d:1a:92:1e:62:f1:9c:7a:0e:50:55:bc:bc:a9:f6:
                    81:01:26:24:e8:2d:e7:4e:56:74:25:d4:ed:d3:a1:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:61:02:1E:2A:99:1D:E6:0E:32:B8:88:71:E5:B9:3E:D3:C4:3A:5F
            X509v3 Authority Key Identifier:
                keyid:97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/7aa55e1091f025321da05ff12ff94acbb855b2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/18578d1d6434fa77964783314509fc7818281b0a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.252.0/22
                IPv6:
                  2806:36a::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:4e:8a:eb:6b:80:f9:c5:cc:3a:d3:e3:75:1c:1a:77:45:
         a3:99:8b:10:a5:75:0c:a2:3b:77:4b:8a:8d:5d:97:cc:37:bd:
         59:40:95:d7:bd:49:60:d5:30:2e:ae:f5:ef:44:a5:e7:3c:cc:
         5a:8d:2e:36:4b:b9:2f:8a:3f:f4:de:cb:44:72:6c:6a:fa:08:
         ea:b0:92:ea:46:fa:34:4d:4e:64:02:6e:98:c6:e5:4d:36:ac:
         d5:2a:05:ae:b7:a2:7d:c4:3d:00:ee:dd:e5:34:5d:05:0b:48:
         29:01:e6:4a:be:09:54:a3:7f:6c:52:89:d0:c3:f3:b9:4b:7a:
         5f:c3:2e:bb:e1:d7:c4:02:9f:0c:51:8e:fd:2a:44:3f:bc:f5:
         71:df:a5:55:4e:56:98:8e:98:bf:b0:90:a7:04:c2:20:8f:76:
         00:10:d9:1f:0f:1a:8c:85:d8:eb:b9:21:d2:81:de:6e:76:fb:
         9d:98:b7:2f:2e:6d:23:b8:6d:b3:a1:59:e1:9a:cb:91:d1:1a:
         37:10:11:be:77:d8:20:cf:1f:67:dc:cc:cf:28:38:bd:44:29:
         2a:f4:c4:74:8d:27:27:7a:c2:49:cb:eb:a3:11:2d:86:0e:43:
         2f:ba:ba:49:d9:39:b4:26:2a:38:37:da:8d:35:57:2f:4b:4f:
         89:4c:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----