Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/3a1c0b9a7a3392f7ff9c332f9405ae87727b69e0.roa
File:                     3a1c0b9a7a3392f7ff9c332f9405ae87727b69e0.roa (raw, json)
Hash identifier:          /2SdZ+Q7tQIQDYNBOPcDoJqC6kFPX7+kJpn/HyBYUB8=
Subject key identifier:   F3:23:2F:A7:4D:0A:A1:D9:3D:C6:F4:0C:8E:04:D7:5C:C0:17:81:E6
Certificate issuer:       /CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
Certificate serial:       219395
Authority key identifier: F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/3a1c0b9a7a3392f7ff9c332f9405ae87727b69e0.roa
Signing time:             Fri 11 Aug 2023 18:13:38 +0000
ROA not before:           Thu 10 Aug 2023 18:13:37 +0000
ROA not after:            Mon 11 Aug 2025 18:13:37 +0000
asID:                     3549
IP address blocks:        45.185.16.0/22 maxlen: 22
                          2803:5360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200469 (0x219395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Validity
            Not Before: Aug 10 18:13:37 2023 GMT
            Not After : Aug 11 18:13:37 2025 GMT
        Subject: CN=3a1c0b9a7a3392f7ff9c332f9405ae87727b69e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:39:d9:2d:58:de:24:b8:04:60:59:37:68:
                    84:16:01:95:c7:1f:9b:b2:bd:8b:92:e9:9a:78:af:
                    bb:1e:08:1c:07:c0:92:5e:a8:6b:c3:0c:c6:9c:97:
                    94:4a:96:bd:16:e3:83:a7:e1:f2:5f:eb:5b:c8:3f:
                    0c:44:35:3a:af:20:86:16:9d:cb:f7:3e:d1:91:7f:
                    2c:bb:6f:32:fe:f6:ec:c2:5a:9e:51:1a:ad:13:c8:
                    0f:ce:cf:54:b7:ef:5e:13:2c:54:d9:15:e6:71:40:
                    d5:97:c2:69:8c:0b:6c:91:90:a4:fa:f5:62:99:cd:
                    36:e6:bd:ec:00:ad:89:e1:04:2a:07:ac:d9:cf:52:
                    58:c6:35:18:68:00:77:16:23:16:4b:03:93:02:de:
                    7b:04:ee:a3:59:09:30:98:b7:04:6d:27:69:33:90:
                    9b:06:09:48:e6:bc:63:61:74:73:d7:ac:83:ec:d9:
                    25:31:cc:8d:f0:fa:5e:77:66:ef:90:d4:1c:c9:08:
                    d4:26:86:b0:eb:17:bc:31:5a:80:40:6a:77:af:c6:
                    76:37:ec:31:71:56:5a:b7:b2:9c:13:d5:bd:cd:d7:
                    7a:81:4c:20:44:4b:d8:8d:7e:1e:af:6f:5f:bf:d5:
                    53:dc:a2:82:d7:86:c5:74:28:ef:a8:cf:b5:02:a9:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:2F:A7:4D:0A:A1:D9:3D:C6:F4:0C:8E:04:D7:5C:C0:17:81:E6
            X509v3 Authority Key Identifier:
                keyid:F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/3a1c0b9a7a3392f7ff9c332f9405ae87727b69e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22
                IPv6:
                  2803:5360::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:50:c6:d5:50:f8:7f:0d:e8:46:ac:12:7d:34:83:32:8b:
         09:f3:0a:52:60:a2:4b:70:d0:8d:58:c5:a5:a0:04:f5:e7:4f:
         b2:67:1b:07:ca:62:33:56:e9:e5:11:9c:18:97:6c:15:cc:28:
         6f:ef:e9:7c:dc:5a:0e:57:fe:9f:47:4f:05:5d:c5:e6:69:65:
         3c:72:b7:1b:d8:2f:26:56:8d:08:e0:80:37:cd:4b:0a:f1:12:
         3a:4f:a0:25:c2:bb:3d:32:bf:ce:1d:db:bc:0d:61:6d:a0:e5:
         62:15:4f:b0:24:05:9f:41:aa:40:ea:57:5f:14:0b:57:17:06:
         33:a6:9b:2c:1b:59:58:e6:64:e8:d6:36:5b:56:69:f2:d7:c5:
         9a:24:a4:54:79:53:eb:15:99:41:28:02:57:74:41:7a:60:a9:
         1f:76:8a:3c:3e:e6:4e:1a:c3:5a:26:e7:f9:f2:13:42:2e:ae:
         d8:56:ec:1d:2f:4f:2a:81:4d:79:47:37:e4:0c:74:9a:c5:da:
         41:f2:79:7a:75:6b:da:12:27:32:f3:2f:d0:3a:a6:13:88:88:
         4a:42:a2:e0:bd:a0:e8:12:e2:ae:9d:57:18:2a:d1:b9:bc:85:
         c6:38:94:23:cc:7f:48:cc:27:26:1e:e1:a9:5c:41:dd:61:92:
         8f:51:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----