Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/845a36923191f1c79594483815aac18239d3b6e1.roa
File:                     845a36923191f1c79594483815aac18239d3b6e1.roa (raw, json)
Hash identifier:          fiGwdPUKTQqh/y3Fc3l4ct2VmApRD0BQL1I1tY0av9A=
Subject key identifier:   93:5E:06:04:0B:32:04:DD:F7:86:7E:E4:1A:4D:A6:9D:54:7B:C7:CD
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1B6EA0
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/845a36923191f1c79594483815aac18239d3b6e1.roa
Signing time:             Wed 19 Oct 2022 02:53:59 +0000
ROA not before:           Wed 15 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     263195
IP address blocks:        179.42.172.0/22 maxlen: 22
                          2803:ac80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797792 (0x1b6ea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Sep 15 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=845a36923191f1c79594483815aac18239d3b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:17:a4:9e:32:19:c2:89:77:91:10:e7:c4:
                    f9:3c:fe:9a:57:94:c6:d5:7f:c0:6d:f7:cf:8c:f8:
                    1d:0a:a5:6e:b8:97:b9:f5:44:eb:7b:18:b4:53:4c:
                    d7:63:a2:74:c6:1c:76:9b:49:6d:58:34:d5:71:54:
                    26:88:52:a3:1b:d9:45:62:10:b8:11:15:6d:e4:f8:
                    fb:ba:31:8d:3e:12:2d:ba:67:dd:74:8c:6d:da:8d:
                    2e:ad:c8:59:7e:bf:9a:c9:d4:65:dc:ad:55:e9:39:
                    ab:18:00:83:36:33:b9:d4:a3:74:1e:ce:b0:5d:27:
                    fc:27:4f:ea:6a:10:2e:c1:f4:eb:04:4c:64:a6:b6:
                    17:2e:33:89:ed:ae:ad:41:14:42:43:27:bb:be:21:
                    3e:bf:d7:be:48:e8:a7:54:d7:34:af:81:19:5b:2d:
                    49:ab:eb:07:cc:3f:07:50:b0:4d:f1:c3:d6:3b:ec:
                    0e:f0:2e:81:d5:53:d0:cb:60:bd:23:e9:5b:c9:f6:
                    da:b4:75:f5:ec:94:ea:24:b5:11:a3:52:e7:62:cc:
                    06:70:4f:8a:21:7a:15:32:d2:14:d7:4d:bb:fe:bd:
                    62:8a:b6:8e:31:5c:db:8b:bd:4b:5c:12:f3:db:e6:
                    c6:25:91:94:0c:6e:bd:2a:fc:39:2c:0a:85:6e:89:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:06:04:0B:32:04:DD:F7:86:7E:E4:1A:4D:A6:9D:54:7B:C7:CD
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/845a36923191f1c79594483815aac18239d3b6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/22
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:52:6a:35:dd:64:45:8a:58:a5:c9:9d:09:ff:b0:00:b1:
         22:3f:63:11:b1:b9:3f:64:38:21:0e:1d:8d:e2:7f:94:d6:da:
         20:48:98:16:12:50:a1:5b:d4:98:d5:03:7e:a5:5c:b0:b7:fb:
         d4:9d:c6:8d:65:49:9d:06:12:1b:a4:9e:d7:8d:36:16:6c:5c:
         ff:b5:c3:d4:9e:5e:bd:2a:5d:9c:70:95:fe:61:6b:7a:f7:4b:
         1c:4d:a2:e4:f8:8d:a3:09:37:73:c1:d1:6e:7a:b1:ec:7e:8d:
         3f:74:af:3c:2c:30:d9:8e:b1:29:93:eb:ce:fe:3f:76:5f:5b:
         30:e0:eb:74:cc:b2:98:95:f3:fe:ea:86:b7:fc:83:c1:20:88:
         82:4e:f6:c0:7b:bd:f6:b4:49:f2:d3:61:40:5b:8b:55:3c:15:
         70:cc:93:8e:2a:86:f9:9b:dd:16:50:5e:f1:11:70:0e:66:d1:
         0a:81:09:22:8a:b9:1a:e5:b8:04:1a:39:a3:44:6e:8f:47:90:
         b8:a2:89:d4:d0:f1:48:19:d8:a0:30:d1:d4:b3:d8:61:5f:4f:
         80:bd:f5:2d:0a:1c:9a:04:62:64:38:03:cb:c1:c1:a7:ec:fa:
         a9:f2:fa:e6:d2:85:56:d2:ba:cb:1f:8b:ae:86:99:10:7d:ad:
         d4:cb:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----