Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/47bc37e363e0038c376ae35af367c7715955805d.roa
File:                     47bc37e363e0038c376ae35af367c7715955805d.roa (raw, json)
Hash identifier:          qfeBvHvFmXefVz5xW/GU7Ca6XM0Fbj4a07SEJIZBAi4=
Subject key identifier:   D2:23:6F:F4:64:0E:95:B6:85:98:3A:21:23:74:AD:95:3D:58:D8:79
Certificate issuer:       /CN=5446317502c39eb8d93831726804f482b1b25a6a
Certificate serial:       04CB
Authority key identifier: 6F:4A:CC:0D:E1:41:51:0A:CE:D4:5B:44:C8:36:DE:1F:2D:6C:EB:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5446317502c39eb8d93831726804f482b1b25a6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/47bc37e363e0038c376ae35af367c7715955805d.roa
Signing time:             Mon 20 Jun 2022 14:56:59 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     263238
IP address blocks:        45.239.48.0/22 maxlen: 24
                          2803:6c10::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5446317502c39eb8d93831726804f482b1b25a6a
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=47bc37e363e0038c376ae35af367c7715955805d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:5d:db:70:64:32:5a:d7:b7:bb:1e:60:94:
                    a2:f1:7f:ff:7e:68:86:d6:a7:00:d4:3f:6a:1c:ef:
                    48:50:78:dc:1f:7a:32:87:a6:02:8c:0d:d9:22:e3:
                    c2:12:e1:fa:30:bb:45:e2:0c:08:27:6c:e2:7d:dc:
                    a5:68:2a:d2:db:51:06:95:d7:c2:89:c3:d9:4b:98:
                    3f:b9:dc:92:79:75:b3:11:30:21:8d:41:92:c8:47:
                    bd:21:9b:75:6d:9a:5f:61:16:10:2e:90:09:e7:b7:
                    60:4d:a8:15:a2:7b:88:65:96:62:d2:3f:6f:00:f4:
                    a6:b3:b8:58:3a:42:76:7d:a8:22:b1:a3:f3:56:a4:
                    94:2f:a1:e7:91:59:d9:d7:17:34:86:a9:38:46:70:
                    12:62:f9:20:92:4f:8a:d3:21:2e:e8:16:66:57:16:
                    81:7c:ad:6e:42:99:05:5e:b5:e5:12:34:53:dd:92:
                    c4:8a:aa:84:2a:08:2f:39:bb:7b:bb:e3:cb:88:7c:
                    ea:30:fb:04:ad:6d:9c:8e:71:89:9a:20:67:57:9b:
                    24:37:87:3f:eb:d2:80:5f:bb:f4:8d:95:1f:ac:df:
                    74:ab:c6:a2:b3:19:c7:11:f7:5c:2a:db:5d:69:31:
                    7b:64:d2:10:2f:5f:c3:8a:67:98:09:cb:69:da:0f:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:23:6F:F4:64:0E:95:B6:85:98:3A:21:23:74:AD:95:3D:58:D8:79
            X509v3 Authority Key Identifier:
                keyid:6F:4A:CC:0D:E1:41:51:0A:CE:D4:5B:44:C8:36:DE:1F:2D:6C:EB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5446317502c39eb8d93831726804f482b1b25a6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/47bc37e363e0038c376ae35af367c7715955805d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76a49911-57d9-4fb0-96f3-3bed9e5fbcc0/5446317502c39eb8d93831726804f482b1b25a6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.48.0/22
                IPv6:
                  2803:6c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:20:79:00:74:fe:15:25:33:25:23:fa:22:84:20:7c:50:
         82:e2:92:0f:b8:8e:e7:70:b6:a9:e7:87:2c:1f:e2:e7:51:ad:
         51:b3:79:bd:2b:45:7d:78:a4:33:77:76:82:e4:48:f0:85:a1:
         11:2c:d8:e6:44:ad:5f:60:5b:af:37:75:7c:a2:95:39:41:c5:
         3c:5e:07:30:e4:7c:40:cc:46:e7:92:5d:7c:89:5c:b0:25:87:
         be:e6:b8:1d:55:29:ac:96:0f:0c:f3:07:3d:0a:84:30:c8:4f:
         e5:a2:d3:43:20:f9:6f:36:69:6a:1a:c8:d9:fc:37:be:56:52:
         b4:f9:7f:cf:98:da:ac:c2:25:f3:27:70:97:11:7a:7a:1a:aa:
         ae:d8:76:b6:23:56:1b:fc:1b:2f:80:52:8c:c3:8b:cd:c7:5e:
         10:91:32:54:6a:99:85:7e:43:fb:0e:b6:42:e2:46:0c:09:08:
         85:98:be:5d:40:22:0b:30:2c:8e:10:85:d1:3a:7d:a0:d6:a2:
         f6:a2:de:09:cf:f0:ce:36:0f:8b:4e:13:7a:bc:fa:12:4e:34:
         31:b7:7d:a2:75:e1:da:38:59:50:d8:a5:c6:86:55:63:e9:0f:
         5a:9f:07:f1:56:b4:99:9b:a2:4c:22:58:18:5a:22:06:6e:89:
         ea:90:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----