Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa
File:                     8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa (raw, json)
Hash identifier:          zkH282gYELC91aCqqS/02zvGnRgWnQgdCX2/dZIcwmM=
Subject key identifier:   19:B0:60:D9:20:DD:FF:59:EA:55:82:AB:AA:4E:44:B0:2C:54:34:C2
Certificate issuer:       /CN=3d834735280c5b9052510730fac20a4e6213a18d
Certificate serial:       0EB22D
Authority key identifier: 5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa
Signing time:             Wed 11 May 2022 22:28:12 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265696
IP address blocks:        45.5.164.0/22 maxlen: 24
                          2801:17:d000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963117 (0xeb22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d834735280c5b9052510730fac20a4e6213a18d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:47:c5:6b:6d:8c:90:60:67:37:53:55:d2:
                    0c:c3:7a:8f:68:45:34:14:d0:51:ac:ce:a4:e8:1c:
                    ce:88:d0:0d:37:a4:86:a7:ae:3a:9b:05:6d:69:e8:
                    4a:d5:6c:f7:7c:72:59:11:57:2d:65:46:25:dd:4e:
                    73:be:88:6a:2e:04:47:88:ac:3d:8c:16:e7:5c:ef:
                    90:0c:54:1c:e3:77:99:af:90:ae:e3:28:34:fd:8f:
                    b5:3c:e7:98:d1:d6:0a:fd:b6:d8:0f:50:3d:75:1a:
                    d9:9f:06:81:37:3f:46:a2:66:eb:25:8f:11:a3:a0:
                    16:40:a1:ef:e4:e3:a7:08:af:62:88:57:a1:d7:5a:
                    70:90:9e:f5:93:bb:41:0a:b4:52:69:fa:a1:55:31:
                    bc:7a:82:c7:07:68:28:c5:29:df:d0:4d:1f:b8:83:
                    21:14:7b:2f:a5:14:42:00:19:b2:af:14:c5:94:56:
                    70:9a:7b:cd:84:5f:55:4a:fc:11:87:c1:70:31:6d:
                    b3:71:58:56:0e:9a:fa:02:3e:06:fc:ff:ff:00:61:
                    97:59:8c:31:a6:b1:67:0e:e4:7f:01:65:fa:6d:a8:
                    e3:a6:c4:8a:d7:62:dc:5a:d5:3a:5a:f1:da:30:f2:
                    25:4a:1a:a3:94:b1:9e:0a:b6:ef:75:9d:60:c1:8e:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B0:60:D9:20:DD:FF:59:EA:55:82:AB:AA:4E:44:B0:2C:54:34:C2
            X509v3 Authority Key Identifier:
                keyid:5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.164.0/22
                IPv6:
                  2801:17:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:72:9c:65:b7:6e:70:10:fa:81:6b:c3:08:b9:76:3b:8b:
         c9:fa:8b:74:4e:50:95:f7:77:e8:1b:31:ae:4a:22:0c:01:e1:
         c8:e0:ac:27:90:08:a1:f9:fb:e0:96:a5:ee:25:54:7e:4b:d4:
         67:0f:a3:cd:19:7f:67:98:f2:3f:47:71:05:95:79:a6:da:d2:
         97:b3:f9:cb:d1:a3:e7:d8:75:05:10:5f:2f:68:74:f3:66:32:
         90:e1:ba:0b:92:74:ee:c9:c8:46:cc:0a:91:ef:c3:bf:46:8c:
         25:d6:c0:1c:7e:3d:71:53:e6:60:c6:72:53:47:72:49:0e:b5:
         39:8f:23:af:c0:f3:05:b3:ee:df:4a:dd:a2:d3:6a:eb:c6:de:
         b8:c5:52:61:d9:23:72:9f:52:e9:1e:52:9a:41:f4:a5:b9:25:
         58:e1:d7:be:b6:4a:2c:96:0d:66:81:13:39:61:27:a0:c5:7f:
         b9:d5:b6:1e:c3:da:3a:85:2b:1a:cd:0c:ac:c8:79:36:25:30:
         06:9a:6c:78:26:dc:54:b9:89:e8:99:75:8e:4b:05:be:4d:62:
         10:34:b2:15:e3:5e:57:86:58:20:5d:5f:71:de:e5:6b:32:f8:
         23:9c:67:ce:f7:92:27:48:52:67:5e:c1:b2:b0:b4:5e:ff:c6:
         c0:1c:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----