Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4bf3e8926e6f0487129274c119af4510d963e3c3.roa
File:                     4bf3e8926e6f0487129274c119af4510d963e3c3.roa (raw, json)
Hash identifier:          MULY2a5s8LLfro1LDodwS5xqNtpLVDMh6T+bTgkuRvU=
Subject key identifier:   7C:AC:95:11:D8:E5:FD:AF:4A:32:0F:A7:83:51:33:C4:48:D0:F8:59
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       1A3BB2
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4bf3e8926e6f0487129274c119af4510d963e3c3.roa
Signing time:             Wed 12 Oct 2022 13:23:26 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266671
IP address blocks:        45.225.75.0/24 maxlen: 24
                          2803:1920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719218 (0x1a3bb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=4bf3e8926e6f0487129274c119af4510d963e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5b:f1:11:8a:6c:b3:c5:09:93:3d:a9:a0:24:
                    d5:97:c8:12:48:68:62:d9:51:7e:d8:52:8c:5a:4d:
                    af:de:7a:d9:06:62:36:5f:44:9a:f7:04:1c:dc:48:
                    39:cf:ba:d9:60:8e:cb:fe:00:75:13:3a:71:46:ab:
                    61:0c:5a:dd:b4:c3:a9:4d:e1:27:6a:2a:fa:66:06:
                    d7:2a:70:25:f1:c6:ef:fb:9d:e9:32:0d:9e:19:a0:
                    86:86:3b:e0:1c:d0:7f:72:25:30:a8:3e:86:f7:84:
                    e5:dd:58:50:c9:c3:d9:39:ec:d4:2f:54:16:18:57:
                    13:f7:d3:c2:78:3f:c6:79:a5:c9:7e:1d:4c:2d:92:
                    ad:13:0e:0d:cc:e9:82:29:58:e5:e6:09:a9:33:3b:
                    9e:86:18:46:c6:02:af:f3:1f:00:61:df:63:a7:60:
                    08:d7:3e:32:c8:ae:ae:53:d4:3e:75:42:ba:be:12:
                    e3:da:1d:31:17:ff:ab:89:38:46:0a:aa:d0:9b:86:
                    52:f3:c3:8c:61:23:50:42:ad:91:c4:a6:a2:d7:ea:
                    45:91:7e:d7:50:29:a9:ad:15:72:38:16:4d:87:8d:
                    93:7e:6d:7a:c7:fe:09:b4:fb:4a:7e:5f:f0:e2:4d:
                    2e:d1:3a:c2:b9:26:46:08:80:30:ce:6f:bf:1f:8a:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:95:11:D8:E5:FD:AF:4A:32:0F:A7:83:51:33:C4:48:D0:F8:59
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/4bf3e8926e6f0487129274c119af4510d963e3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:2b:ec:b9:5c:87:cd:e7:8f:9b:8f:69:37:eb:f6:e8:48:68:
         7d:82:b0:63:69:f6:68:bb:3f:f0:a3:68:4b:15:7e:40:2a:8a:
         04:3c:18:fe:09:98:f5:8b:6c:6a:c9:29:c4:d0:0b:b1:35:41:
         66:6f:c3:eb:4e:f5:0e:46:ed:a0:7b:f4:45:e8:76:ae:98:0d:
         ea:95:6a:e1:51:62:a3:9d:93:36:e8:79:a9:3f:88:f5:a3:96:
         80:a9:32:12:19:c5:a0:f7:b6:7b:df:b3:cc:f2:7c:9d:39:1c:
         72:e7:1c:3c:c3:45:04:15:d3:d4:28:93:43:23:57:f5:49:ac:
         2e:77:a1:fe:69:3c:f3:4c:09:83:48:7a:dd:5e:0f:6f:3d:60:
         49:4d:34:80:e4:58:44:e0:00:db:76:ff:15:30:be:f0:2e:8a:
         a5:e7:74:54:0d:c2:2a:0a:23:07:f8:e6:dd:74:24:bc:f6:02:
         63:f5:8a:da:c5:2a:ad:42:7a:d2:be:a8:8c:53:b2:59:99:a5:
         17:cf:07:37:fd:dd:e0:01:b3:9e:43:01:0a:14:49:e2:64:84:
         96:31:a1:8f:96:69:21:0f:01:0c:f1:44:7f:13:af:09:79:a3:
         b0:d0:ca:cb:fe:2f:d5:97:16:52:8a:8a:d1:33:36:f7:af:86:
         73:48:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----