Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/b46d4d6d2efbf208d9a0df338e1c1dd80ab64dfd.roa
File:                     b46d4d6d2efbf208d9a0df338e1c1dd80ab64dfd.roa (raw, json)
Hash identifier:          o1QLQw+2w23phwZKK10he5Xbh1fGLj3Wf1NIivdJbew=
Subject key identifier:   E5:FF:40:39:2C:EF:21:AB:EA:70:9E:D1:C0:27:ED:D3:BB:FD:A3:DB
Certificate issuer:       /CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
Certificate serial:       1EFF00
Authority key identifier: CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/b46d4d6d2efbf208d9a0df338e1c1dd80ab64dfd.roa
Signing time:             Thu 27 Apr 2023 21:07:44 +0000
ROA not before:           Wed 26 Apr 2023 21:07:44 +0000
ROA not after:            Sun 27 Apr 2025 21:07:44 +0000
asID:                     267828
IP address blocks:        45.173.216.0/22 maxlen: 24
                          2803:b860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031360 (0x1eff00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
        Validity
            Not Before: Apr 26 21:07:44 2023 GMT
            Not After : Apr 27 21:07:44 2025 GMT
        Subject: CN=b46d4d6d2efbf208d9a0df338e1c1dd80ab64dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:f1:58:b4:cd:f8:83:dd:6b:40:b8:d5:bb:
                    09:49:8b:81:82:67:35:3a:56:13:93:95:d1:53:e5:
                    97:27:69:22:0f:ed:a6:34:02:7d:e5:34:f1:ef:a7:
                    cb:2e:4a:78:12:1c:5e:7c:86:c9:7e:d2:a7:63:ed:
                    74:b7:ea:31:b2:e2:a9:28:da:6c:42:c0:40:1c:e7:
                    4a:78:a8:07:e0:64:93:b8:86:4c:0a:8f:78:3b:d0:
                    5a:41:79:51:f8:bf:99:ee:49:1d:f7:d7:f2:ee:bc:
                    e9:86:8b:4a:4e:e3:e6:95:70:4e:05:68:15:c7:4e:
                    d2:86:d6:ce:19:7d:49:e3:ef:bd:69:81:90:af:4d:
                    d9:46:c7:74:e2:0f:94:17:f8:28:4f:a7:b3:4f:10:
                    0c:b0:38:36:8c:9f:46:b8:08:5b:b4:b5:fc:36:b8:
                    cd:06:42:a4:b6:5d:93:ae:5f:6c:8c:5f:35:86:d0:
                    16:1d:2a:cd:e0:9b:b3:88:fa:17:ce:2f:04:f7:99:
                    85:64:ec:dc:33:42:8f:15:e3:2a:8e:35:36:c2:29:
                    cd:b8:e7:32:49:f4:e4:a6:89:5f:6f:ea:02:ba:95:
                    25:b1:ca:2d:bf:42:fb:d4:af:97:bd:75:86:a5:58:
                    bc:45:f8:3e:f9:11:f9:4e:b2:dd:29:25:e7:1f:6f:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:40:39:2C:EF:21:AB:EA:70:9E:D1:C0:27:ED:D3:BB:FD:A3:DB
            X509v3 Authority Key Identifier:
                keyid:CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/b46d4d6d2efbf208d9a0df338e1c1dd80ab64dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.216.0/22
                IPv6:
                  2803:b860::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:80:8c:66:cb:aa:a6:08:4c:4f:62:6c:6c:41:f9:77:60:59:
         1c:e9:c7:5a:ab:d7:1c:1a:b2:69:90:bb:0b:af:84:2b:37:9a:
         88:eb:8f:bc:ba:cd:0c:3c:be:b8:64:aa:7e:a3:1b:b6:29:bb:
         c8:4f:36:e6:38:e7:23:37:e4:12:c4:1b:44:52:d7:0a:65:6f:
         c0:b8:6b:7d:fe:f0:2b:46:ff:84:9b:93:ce:52:ee:d6:e1:a7:
         66:9d:41:36:67:88:a8:9c:a5:c3:57:5e:ed:83:fb:1a:22:84:
         c8:66:02:bf:10:f7:65:f2:65:3b:e9:a7:a9:fd:bd:00:57:f6:
         ef:fb:f6:d0:24:32:2a:42:91:40:3c:59:58:50:2d:2b:66:69:
         4a:28:07:15:f2:02:a3:2a:9f:03:f9:c1:68:b2:ba:ae:39:b1:
         73:cb:4a:75:04:55:bd:75:28:02:ab:be:48:57:8b:d8:a7:4b:
         07:e1:93:19:8a:99:d7:bb:bd:cc:1d:e4:7b:3b:fe:44:41:68:
         02:8d:16:89:44:4b:54:cf:e8:e3:6b:38:27:74:04:d1:94:ce:
         a7:c7:27:00:21:df:fa:8d:78:c6:1f:3e:21:c5:27:70:05:69:
         ad:eb:c8:62:56:3f:7f:b8:6b:a6:9c:45:aa:17:8f:2c:16:19:
         0a:ff:41:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----