Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4b01012edaae2097f30ea4102322344587a2818d.roa
File:                     4b01012edaae2097f30ea4102322344587a2818d.roa (raw, json)
Hash identifier:          PDahDeZULdNQ166bQ52DIlk3hbaxuiW7ie3mnp3I+qM=
Subject key identifier:   E9:EE:4E:60:D7:EC:49:0B:31:1A:E2:08:29:41:BD:A9:A7:4E:41:BB
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       1A6633
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4b01012edaae2097f30ea4102322344587a2818d.roa
Signing time:             Fri 14 Oct 2022 16:06:56 +0000
ROA not before:           Thu 13 Oct 2022 16:05:50 +0000
ROA not after:            Mon 14 Oct 2024 16:05:50 +0000
asID:                     266671
IP address blocks:        45.225.75.0/24 maxlen: 24
                          2803:1920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730099 (0x1a6633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Oct 13 16:05:50 2022 GMT
            Not After : Oct 14 16:05:50 2024 GMT
        Subject: CN=4b01012edaae2097f30ea4102322344587a2818d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:0a:5b:54:f0:49:c9:9c:f2:aa:30:1d:d0:
                    77:e3:d3:9d:d1:b1:f4:e5:8b:b1:8d:4b:f1:84:b2:
                    c1:b9:9d:81:4f:8b:69:63:d6:d4:98:87:e6:f3:e4:
                    78:c2:70:8d:a2:01:c9:05:b0:83:4c:f5:a3:39:5e:
                    9e:99:c6:9d:5e:d2:81:16:c3:0e:cc:7c:04:6e:d5:
                    9d:10:8f:8b:84:99:09:04:22:90:3f:28:63:9c:03:
                    1e:e3:9a:c7:35:49:99:e8:fe:66:c3:24:94:d9:ba:
                    86:26:81:fd:4a:2b:b9:00:a0:fd:c7:25:44:db:26:
                    50:b6:da:60:3a:a8:68:af:b0:60:42:15:9c:31:6b:
                    d0:eb:b9:9d:83:23:7c:b7:02:15:d6:46:d3:76:6c:
                    d7:20:f8:a5:98:7a:55:0b:01:a3:c0:14:8d:ac:18:
                    19:3a:1a:f3:4d:95:18:18:26:fd:97:77:5b:43:3e:
                    44:a6:83:d0:12:c7:7b:9b:53:af:a4:50:bd:c5:99:
                    bb:ef:ef:bc:3e:4c:0c:01:25:e0:03:ea:e9:f0:95:
                    6b:43:f1:57:d8:73:30:19:33:d7:36:99:ec:4d:18:
                    81:92:ac:42:18:68:20:f1:25:2c:d0:4b:0d:4e:22:
                    fd:10:3e:de:4f:cd:37:30:60:e5:ef:fe:69:9f:45:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:4E:60:D7:EC:49:0B:31:1A:E2:08:29:41:BD:A9:A7:4E:41:BB
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4b01012edaae2097f30ea4102322344587a2818d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:9a:95:40:2b:ab:36:91:9a:9c:b2:40:2f:b4:9d:7b:9b:e2:
         a4:f0:5d:93:c8:b0:da:aa:d3:94:88:a4:78:07:fe:9a:c0:d4:
         82:50:72:a5:d6:c3:64:6b:03:9b:30:27:3d:e4:37:1d:50:4c:
         b0:e6:53:8e:83:30:2b:1f:66:66:d2:5e:0b:fd:eb:55:5f:06:
         87:68:77:d8:c4:96:74:7d:15:fe:62:f6:b5:db:05:52:98:97:
         af:ae:6c:64:fc:a6:09:d7:fb:b5:b4:d2:27:f3:21:f7:9c:02:
         d3:90:7f:b2:09:0b:47:e3:8f:22:ce:37:e3:bf:2b:10:6f:5c:
         14:86:d0:75:24:49:48:59:00:43:38:85:a4:c3:12:a7:c3:37:
         a2:46:bf:1b:d1:70:a7:ce:d5:a5:b3:40:56:71:98:18:3d:db:
         db:a9:a8:50:42:b2:b5:ed:aa:e8:15:ab:80:15:d0:f2:8e:52:
         f6:c6:3b:4c:05:1c:3d:a9:2c:f2:37:2b:0c:92:e4:ab:ea:e2:
         ac:d3:a2:55:cd:2a:cf:8f:18:aa:f9:67:07:cc:1f:2b:d1:6d:
         d5:18:1f:36:85:8c:61:3c:22:48:a4:4f:4a:16:df:a0:58:cf:
         2b:6e:e8:6e:84:90:6b:60:2c:48:6d:76:ef:58:07:9e:ce:11:
         f0:5a:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----