Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/60694c9fa8cd32496006158e16095ddc2078049b.roa
File:                     60694c9fa8cd32496006158e16095ddc2078049b.roa (raw, json)
Hash identifier:          uVhJT63Ffy/5ra13/qLjb1AZ7p+MVAcVEl+w8lQVolw=
Subject key identifier:   E4:B8:39:57:54:90:10:33:69:58:26:E2:F3:D5:5B:76:1B:04:7E:54
Certificate issuer:       /CN=4d446954aafa3d753308d3a0466a8574d0f27367
Certificate serial:       12BC60
Authority key identifier: 54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/60694c9fa8cd32496006158e16095ddc2078049b.roa
Signing time:             Thu 27 Oct 2022 22:10:03 +0000
ROA not before:           Wed 26 Oct 2022 22:07:21 +0000
ROA not after:            Sun 27 Oct 2024 22:07:21 +0000
asID:                     270173
IP address blocks:        45.164.108.0/22 maxlen: 24
                          2806:30c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227872 (0x12bc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d446954aafa3d753308d3a0466a8574d0f27367
        Validity
            Not Before: Oct 26 22:07:21 2022 GMT
            Not After : Oct 27 22:07:21 2024 GMT
        Subject: CN=60694c9fa8cd32496006158e16095ddc2078049b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:a0:20:68:4c:cc:a5:c4:32:80:a2:03:a3:
                    84:1c:f3:64:4e:7b:d5:58:49:e9:66:36:9e:97:62:
                    71:6f:ba:1b:06:05:6e:04:36:7a:e5:aa:a5:e6:ff:
                    40:63:c9:99:98:64:43:e4:7b:36:ae:25:54:e1:0c:
                    a6:2b:df:8e:c5:fd:36:f7:2b:a8:03:01:0b:c4:84:
                    bb:8e:0f:7c:77:a3:b7:1d:f1:f3:e6:91:5f:0c:c6:
                    4f:ff:b7:43:b3:ae:32:8a:d5:d0:a2:d5:c3:83:df:
                    9e:e7:db:cf:d4:3b:aa:25:26:5a:f3:03:d8:60:2f:
                    4e:92:5c:52:4c:c1:95:ed:13:5c:09:3d:b1:33:4d:
                    05:ac:3a:79:03:0c:2c:a5:5e:5d:8d:5e:01:98:ff:
                    08:bc:c6:08:5d:3e:5b:46:95:d3:5d:a0:7b:72:a0:
                    84:39:a2:53:f1:5c:3d:b9:fa:1a:79:45:21:b3:33:
                    db:55:b7:51:2a:76:f8:91:2c:89:98:63:e0:e6:67:
                    db:99:a9:98:ca:a1:8d:ca:13:98:45:33:e5:b8:fb:
                    b5:4b:c0:a3:c0:73:2a:09:a1:55:b7:e7:39:49:47:
                    d1:45:e0:cb:a3:27:eb:9c:ed:8f:31:a5:ea:63:9d:
                    47:61:ce:01:dd:3a:c0:af:88:0a:96:5c:80:43:39:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:39:57:54:90:10:33:69:58:26:E2:F3:D5:5B:76:1B:04:7E:54
            X509v3 Authority Key Identifier:
                keyid:54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/60694c9fa8cd32496006158e16095ddc2078049b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.108.0/22
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:05:1c:d6:dd:3f:01:0b:b6:4e:50:d7:a7:73:d8:62:20:
         4f:ef:e0:34:2a:84:73:4d:79:20:1a:63:a6:34:e5:a1:fe:fa:
         3e:cd:42:ab:f0:3e:48:87:33:0c:90:d1:5e:6c:a3:96:d7:73:
         1f:81:d0:cc:6e:50:e5:fb:4e:4d:19:fb:3c:02:10:46:5a:f9:
         d6:ca:fe:04:c9:6f:b6:8c:96:7e:bb:3e:74:0d:5c:fb:a4:33:
         6b:bc:8f:b0:0a:c1:0b:e6:f6:59:69:d6:30:bc:6d:e4:58:24:
         8b:22:6c:d8:48:37:c4:70:58:e1:d7:8e:6e:b9:15:fc:a9:38:
         46:da:52:fa:c4:da:b5:c8:ca:a1:ed:bf:27:3f:9d:fa:23:e5:
         bc:e2:de:54:a0:95:05:96:ee:8d:87:b5:24:98:8e:ff:de:cf:
         3c:b6:15:19:95:b6:43:53:5b:04:20:1a:aa:94:79:5c:9d:49:
         3e:43:9b:25:9e:84:1f:b6:30:f3:6c:3a:ca:19:a7:9a:d8:2c:
         e7:7e:39:b5:5b:48:d7:d3:77:3d:cf:55:6f:11:b2:69:fd:f2:
         ea:23:ae:1e:20:0a:a0:b1:90:4d:2a:4e:17:24:07:04:8a:ec:
         ce:60:48:fd:6b:da:66:23:a5:15:3e:9f:c1:9e:3b:5f:44:ad:
         47:89:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----