Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3fbe6c-3670-4e1b-8c82-e8423e285280/748c0c0c89cfb7a6b286c2773995b095f1bb4191.roa
File:                     748c0c0c89cfb7a6b286c2773995b095f1bb4191.roa (raw, json)
Hash identifier:          zhlw5mHIXu3Ey3i6Rws4nQ/ymzE0S3mAt/1x/vMJ/lE=
Subject key identifier:   8F:3D:BA:0F:CD:00:AA:F1:65:AF:A4:BD:DC:15:CC:D3:AB:10:2B:01
Certificate issuer:       /CN=ef9afae53ce9e1345c6a817a23ba20edd2f3b45c
Certificate serial:       0E33
Authority key identifier: 8C:F2:06:9E:53:CB:56:22:73:43:14:BE:55:7A:6F:91:AC:8F:2F:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9afae53ce9e1345c6a817a23ba20edd2f3b45c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f3fbe6c-3670-4e1b-8c82-e8423e285280/748c0c0c89cfb7a6b286c2773995b095f1bb4191.roa
Signing time:             Thu 07 Oct 2021 23:01:41 +0000
ROA not before:           Thu 07 Oct 2021 03:00:00 +0000
ROA not after:            Mon 31 Mar 2025 03:00:00 +0000
asID:                     267758
IP address blocks:        45.170.100.0/22 maxlen: 24
                          2803:f3a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3635 (0xe33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9afae53ce9e1345c6a817a23ba20edd2f3b45c
        Validity
            Not Before: Oct  7 03:00:00 2021 GMT
            Not After : Mar 31 03:00:00 2025 GMT
        Subject: CN=748c0c0c89cfb7a6b286c2773995b095f1bb4191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:d5:bf:2e:04:ae:b5:8a:81:e0:65:d3:c5:
                    d9:1a:fe:07:c0:0c:a8:3d:f2:f1:57:fe:04:1a:4d:
                    1c:5c:a1:55:18:f8:7a:23:cb:21:13:08:8c:e6:c3:
                    6a:15:b9:33:72:74:07:39:c5:62:3b:a3:04:cd:04:
                    d2:33:0a:8e:18:63:12:ba:fa:9f:7e:19:b0:75:de:
                    51:94:b7:a0:01:4b:97:dc:84:9a:51:ac:aa:1a:b3:
                    a8:d6:d6:b0:6a:f5:c0:99:b3:34:9d:53:33:8f:51:
                    e1:81:8f:4d:2d:c3:ea:8d:2c:cf:b4:c8:45:26:da:
                    e7:c5:5b:bb:7c:49:fb:b9:0b:22:aa:21:b5:73:21:
                    dc:4d:9e:c9:d6:68:c6:b6:b4:14:6c:92:2a:bc:af:
                    17:60:fc:cc:ce:bb:5d:96:80:04:e2:f2:d9:ab:76:
                    19:56:e0:83:fb:92:68:80:66:e6:61:2e:5b:43:bc:
                    f5:64:f7:56:ad:07:bd:f0:bb:24:a8:13:fc:f0:8e:
                    22:f9:63:6d:7d:e8:57:8c:a7:2d:75:bc:4c:e6:cf:
                    95:fd:af:c1:7e:fd:7c:c3:19:04:a7:f0:36:21:c4:
                    fb:26:aa:68:b7:7b:cd:e8:f2:19:d2:e7:54:c6:d9:
                    c3:d8:7a:9f:8a:3e:b3:7d:b1:1e:87:5c:74:2e:81:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:BA:0F:CD:00:AA:F1:65:AF:A4:BD:DC:15:CC:D3:AB:10:2B:01
            X509v3 Authority Key Identifier:
                keyid:8C:F2:06:9E:53:CB:56:22:73:43:14:BE:55:7A:6F:91:AC:8F:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9afae53ce9e1345c6a817a23ba20edd2f3b45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3fbe6c-3670-4e1b-8c82-e8423e285280/748c0c0c89cfb7a6b286c2773995b095f1bb4191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f3fbe6c-3670-4e1b-8c82-e8423e285280/ef9afae53ce9e1345c6a817a23ba20edd2f3b45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.100.0/22
                IPv6:
                  2803:f3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:6c:fa:3a:b4:2d:13:a0:67:d5:e2:a7:23:7e:eb:31:60:
         38:b3:15:93:36:df:63:92:48:ac:e0:f7:ae:18:76:fa:16:cd:
         f6:93:82:e4:ea:ad:48:fe:2c:0e:30:55:78:f6:65:ba:09:82:
         99:91:3b:01:2b:8f:5c:d4:24:3d:94:bb:ff:5d:1a:d3:41:d6:
         7a:7f:f5:51:c0:c7:25:96:d0:2c:aa:b9:14:78:bb:81:12:b3:
         96:2d:34:5f:f5:fa:d5:ad:d4:54:ed:c1:60:05:05:71:ff:ef:
         05:0e:f8:07:7e:10:e9:3e:db:4e:b1:58:e0:88:9f:ab:be:dd:
         75:89:4f:8c:6a:8e:01:d2:51:4c:a4:fc:20:29:21:62:c7:f6:
         7a:21:56:dc:83:e3:d4:f7:5b:5b:f6:37:1f:a0:61:52:5a:7a:
         5a:f8:a1:9a:20:cd:54:80:e6:47:dc:a9:02:64:51:b8:84:d1:
         9c:01:0a:14:92:16:0b:19:67:1e:86:26:87:20:6d:35:c8:f2:
         cd:dd:52:3f:1b:e9:1f:a6:87:17:7d:9b:88:29:02:f6:4a:ad:
         da:ee:8f:0e:14:14:f4:82:dd:b7:f1:00:d0:ca:ab:2d:ed:58:
         ff:a0:37:86:67:4a:83:31:a9:ba:a7:da:17:15:6e:7a:c5:a6:
         39:49:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----