Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa
File:                     a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa (raw, json)
Hash identifier:          e8BsIjPeXhh3npBiZOuq7hxbCM2YbfcRqyk+6gKgUqM=
Subject key identifier:   73:5C:C9:22:9C:F6:EB:A7:A5:01:08:13:54:FC:7F:C1:FD:2B:59:BD
Certificate issuer:       /CN=3a95f00c30d4360b8734d44d748537fafcb56a34
Certificate serial:       FD
Authority key identifier: 67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa
Signing time:             Tue 15 Mar 2022 19:42:25 +0000
ROA not before:           Tue 15 Mar 2022 03:00:00 +0000
ROA not after:            Fri 15 Mar 2024 03:00:00 +0000
asID:                     64117
IP address blocks:        45.185.220.0/22 maxlen: 24
                          2803:d360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a95f00c30d4360b8734d44d748537fafcb56a34
        Validity
            Not Before: Mar 15 03:00:00 2022 GMT
            Not After : Mar 15 03:00:00 2024 GMT
        Subject: CN=a2f8c7a9399f1a983d12c3237c03fbbb07959282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:ef:88:3a:b3:dd:4b:58:c2:c2:ce:61:7c:
                    72:90:3f:3e:ae:af:37:37:9c:62:6d:53:db:9f:9a:
                    53:44:a9:b9:1b:a9:ea:1c:3b:54:de:75:c2:ed:56:
                    f0:d6:03:da:f6:fd:13:1e:45:a3:15:55:5a:dd:51:
                    ff:30:80:97:66:66:5f:05:3c:28:51:35:92:65:15:
                    d6:10:24:76:8e:05:37:8b:cf:b5:98:cc:d3:aa:82:
                    ac:86:17:18:fa:d6:4c:62:05:11:cf:9b:4d:c1:54:
                    a0:d3:89:1b:ed:4f:24:d5:d8:f7:9e:aa:b8:c0:01:
                    18:04:18:a0:10:4a:aa:0b:f5:60:ee:9a:fe:d8:31:
                    29:8d:64:0f:39:2b:b4:77:86:b2:be:12:55:4c:62:
                    f3:49:0f:10:17:11:78:40:66:1c:e6:9e:61:9d:4e:
                    48:15:5c:ca:c2:e1:9d:fa:82:b1:5f:21:b2:21:6f:
                    b1:0e:0d:53:19:44:52:a1:18:f5:4c:18:2a:91:e3:
                    cb:15:62:55:a9:7c:da:fc:c0:62:f9:8f:e0:cb:aa:
                    48:67:c5:a6:61:c9:3b:6b:f4:62:11:4d:38:ad:48:
                    cf:5e:29:c0:da:31:d2:3e:e3:a0:9a:b9:e7:41:4a:
                    fe:a1:3c:4e:7c:5e:eb:46:81:1f:d5:d8:23:c2:a8:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5C:C9:22:9C:F6:EB:A7:A5:01:08:13:54:FC:7F:C1:FD:2B:59:BD
            X509v3 Authority Key Identifier:
                keyid:67:B6:BA:F7:1F:7A:FF:79:CC:B0:28:98:5D:33:2B:24:BF:CD:C0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a95f00c30d4360b8734d44d748537fafcb56a34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/a2f8c7a9399f1a983d12c3237c03fbbb07959282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/3a95f00c30d4360b8734d44d748537fafcb56a34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22
                IPv6:
                  2803:d360::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:61:5c:fb:2a:0a:77:c6:d7:d9:4b:c9:54:b9:24:0f:e7:af:
         8e:7c:67:da:0c:c9:58:6a:ab:f8:d7:7c:64:98:d0:42:47:4e:
         4f:c5:e6:6e:91:06:c9:7c:9c:74:84:21:25:82:30:8a:9b:8f:
         21:fa:4c:89:ed:44:50:66:e8:9b:0b:08:82:87:de:93:da:01:
         fa:d9:cf:87:e6:45:e2:e5:ef:4e:7f:e4:0a:94:59:b4:40:43:
         24:46:e6:26:6a:5f:14:a1:2e:66:c9:98:2a:84:a0:db:4c:c8:
         1a:6a:3b:38:13:0f:be:5d:1f:0d:27:70:ff:62:89:f5:0e:59:
         23:ab:82:1a:9d:8c:8e:44:1c:d4:9b:2b:41:02:d2:13:7a:9b:
         6c:12:ec:52:8c:fc:0e:e4:d6:6c:3d:f2:01:7f:25:0d:4a:7a:
         03:e5:76:28:9e:3c:4c:19:0c:2c:ae:a1:28:54:fa:ec:63:53:
         54:3f:56:f3:6a:5d:70:39:b1:3c:ce:7b:da:ee:e4:0f:7c:a3:
         60:5e:40:ec:d0:db:96:cd:80:47:43:70:2f:b3:91:b3:50:51:
         14:0d:1d:8b:e5:2a:e3:d6:29:8d:1b:ce:79:7a:82:ed:47:85:
         20:86:50:85:a7:96:7e:00:ca:e4:00:af:33:9f:bf:ba:46:77:
         e3:c0:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----