Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/3f85452d5c0e145fd521a2986e745b960aeb229e.roa
File:                     3f85452d5c0e145fd521a2986e745b960aeb229e.roa (raw, json)
Hash identifier:          vLcOY/WwlX6EKfJPFpdY0uKAETTaBJ7BazxKTMbKXiA=
Subject key identifier:   53:BD:85:01:9E:8B:3E:E7:0E:09:EE:CC:40:2A:B2:C0:97:97:0B:D6
Certificate issuer:       /CN=4d446954aafa3d753308d3a0466a8574d0f27367
Certificate serial:       1A6E50
Authority key identifier: 54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/3f85452d5c0e145fd521a2986e745b960aeb229e.roa
Signing time:             Thu 31 Aug 2023 20:26:39 +0000
ROA not before:           Wed 30 Aug 2023 20:26:38 +0000
ROA not after:            Sun 31 Aug 2025 20:26:38 +0000
asID:                     270173
IP address blocks:        45.164.108.0/22 maxlen: 24
                          2806:30c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732176 (0x1a6e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d446954aafa3d753308d3a0466a8574d0f27367
        Validity
            Not Before: Aug 30 20:26:38 2023 GMT
            Not After : Aug 31 20:26:38 2025 GMT
        Subject: CN=3f85452d5c0e145fd521a2986e745b960aeb229e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:21:9b:80:f5:79:e5:f7:0f:1b:9d:02:1c:
                    a2:50:63:58:6e:d0:15:10:d3:97:af:b3:0c:96:8c:
                    9d:c0:c6:72:71:f4:d8:80:52:6f:f7:21:c9:5b:7d:
                    70:4e:eb:e9:12:f1:24:f1:2a:54:bc:28:c1:c8:a1:
                    1b:6e:9a:da:7e:41:ae:7a:a1:af:16:21:90:c7:05:
                    42:43:ee:0d:4d:25:e1:bb:c4:79:7a:b9:1f:42:c3:
                    8b:32:98:22:2b:38:07:ba:d4:66:7e:27:63:87:57:
                    5d:d3:90:97:60:05:29:c2:7b:ba:3c:5e:37:27:c5:
                    35:4a:d8:99:92:3d:3f:4c:a3:29:2a:af:e9:0c:92:
                    1b:b6:dc:64:a3:a2:cf:e4:20:2d:db:26:18:41:6a:
                    5c:56:65:f0:b8:46:01:dc:41:e3:75:86:e0:0f:c3:
                    8b:fd:89:70:51:7f:de:08:d0:a8:f4:c1:76:7c:cf:
                    b8:78:93:bd:66:38:2e:d3:e6:d7:83:d1:a2:2d:f0:
                    39:e5:04:8e:8a:5f:95:8d:b3:35:bb:69:70:76:da:
                    67:f2:bc:6a:15:8f:21:c7:dc:24:6d:6d:42:a8:1c:
                    0f:12:73:c3:c5:60:68:92:b3:de:88:e6:e1:e4:cf:
                    59:b5:cf:f2:0d:a9:0c:09:43:96:81:86:81:f1:0d:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:85:01:9E:8B:3E:E7:0E:09:EE:CC:40:2A:B2:C0:97:97:0B:D6
            X509v3 Authority Key Identifier:
                keyid:54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/3f85452d5c0e145fd521a2986e745b960aeb229e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.108.0/22
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:02:82:6f:92:c2:b3:5e:5d:e1:8d:45:72:1d:6f:d6:66:c7:
         7f:46:f5:af:53:cb:df:db:8b:f3:4e:3a:db:b9:03:43:4a:d3:
         e7:71:9b:1c:b3:00:bd:6c:75:10:18:e9:60:78:7d:2c:35:3a:
         51:a8:cc:28:5e:3c:79:1d:6a:44:80:46:64:e1:d0:59:e6:0f:
         62:ab:b9:95:39:eb:3a:99:86:ed:4d:33:93:05:22:5b:4e:80:
         65:3a:ed:90:33:d7:3c:2c:f1:fa:93:33:a7:e5:e2:d5:c8:a2:
         d6:9f:fc:0f:15:cf:ca:a6:ca:bc:50:b3:c0:44:0e:c9:0d:f9:
         7d:ec:ff:f0:e2:6d:0c:94:11:40:a4:a5:84:91:b5:82:12:43:
         07:ba:4a:0c:8a:98:cd:a7:ef:66:2a:e5:fd:34:1a:07:c2:58:
         f9:3d:72:b7:86:01:71:6b:4d:f4:2e:fa:1b:63:d7:a6:83:c6:
         93:39:99:ef:e6:fd:f8:52:69:b8:f2:73:52:f2:8f:9c:3d:e8:
         71:aa:88:ad:6f:d9:2a:a1:fb:9f:9e:9f:24:d6:0f:04:5c:79:
         f5:45:e5:5d:03:8e:b2:69:af:8c:cc:2c:03:09:74:fe:c4:85:
         e9:d2:30:07:82:02:4d:5a:7b:28:4d:c0:96:8c:1c:e0:a2:d9:
         ea:95:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----