Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/68e09dc7bebc4f25e1c737e4146347747a83364d.roa
File:                     68e09dc7bebc4f25e1c737e4146347747a83364d.roa (raw, json)
Hash identifier:          yQ9q87qeYW1npBA2VyeJdsUFO/sUJ0MsZgL8DFGT16k=
Subject key identifier:   47:B5:93:5B:DA:60:50:9B:F4:24:BD:5F:79:DE:74:C6:27:CF:D7:93
Certificate issuer:       /CN=21946617726999f473e397ce5a1cff1c13cd4402
Certificate serial:       0B722F
Authority key identifier: FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/68e09dc7bebc4f25e1c737e4146347747a83364d.roa
Signing time:             Thu 25 May 2023 17:49:43 +0000
ROA not before:           Wed 24 May 2023 17:49:43 +0000
ROA not after:            Sun 25 May 2025 17:49:43 +0000
asID:                     271929
IP address blocks:        45.236.140.0/22 maxlen: 22
                          2803:9a10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750127 (0xb722f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21946617726999f473e397ce5a1cff1c13cd4402
        Validity
            Not Before: May 24 17:49:43 2023 GMT
            Not After : May 25 17:49:43 2025 GMT
        Subject: CN=68e09dc7bebc4f25e1c737e4146347747a83364d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:00:e3:d9:5b:07:28:b1:75:bf:63:ad:c7:
                    b9:06:6a:58:6d:f9:2c:bd:3f:2f:cc:41:cb:64:32:
                    71:a3:06:57:14:31:44:54:32:0a:35:96:c0:f1:09:
                    78:e1:cf:df:94:ba:0d:fb:45:eb:36:c1:a8:84:30:
                    5a:67:92:8f:a9:d3:33:51:fb:4a:6a:52:01:0c:ef:
                    57:f6:4d:b6:9d:7e:a3:35:79:2e:fd:4c:ef:cb:3a:
                    5b:bb:5e:af:d8:2c:08:84:dc:5f:aa:13:fc:93:5e:
                    e8:18:b9:de:b2:61:d5:d7:0d:a6:c7:f5:58:83:21:
                    be:0c:26:f8:22:f2:24:6f:6a:2a:57:62:f5:42:1e:
                    8c:f5:61:1a:56:33:73:5b:ab:80:cb:36:83:71:b2:
                    6f:1c:61:90:c8:1f:4a:05:8a:60:c2:62:e2:80:44:
                    84:51:fa:b3:ac:a3:5a:6c:a9:5d:6b:40:bd:4f:8b:
                    20:27:0e:aa:1f:25:15:47:39:5e:75:f9:d2:41:13:
                    6b:7e:e8:47:50:0c:c2:f7:69:5e:eb:aa:c1:84:d8:
                    5b:a2:a6:4e:f2:3a:36:e2:1f:66:9e:a8:b8:2e:64:
                    48:a3:de:4e:db:9d:4b:17:b0:ed:81:d6:84:46:9f:
                    e0:ba:8e:59:d3:3e:1f:4d:87:8e:96:d0:cf:55:b5:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:93:5B:DA:60:50:9B:F4:24:BD:5F:79:DE:74:C6:27:CF:D7:93
            X509v3 Authority Key Identifier:
                keyid:FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/68e09dc7bebc4f25e1c737e4146347747a83364d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/21946617726999f473e397ce5a1cff1c13cd4402.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.140.0/22
                IPv6:
                  2803:9a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:32:8c:f7:4d:cb:e7:9e:69:c0:c8:e6:dd:6d:47:f9:57:5c:
         2d:0d:28:5b:e3:29:46:7b:31:b7:01:11:49:2b:cb:76:f9:66:
         ec:21:4a:da:da:a2:6d:ad:43:2c:d1:ad:8d:65:30:8f:80:39:
         ff:26:9f:ed:05:a4:62:cb:d2:f3:61:62:43:74:30:35:18:d0:
         53:b5:f4:7b:c3:7e:13:fa:1d:64:1d:ed:10:1c:dd:8b:fc:c1:
         f6:cd:bb:4a:a6:b8:99:f8:3a:31:15:ee:96:d9:54:73:5b:52:
         21:12:1c:ac:0d:d5:31:6b:4f:56:50:f4:cd:39:86:a1:34:ea:
         99:3e:be:91:fd:f0:eb:1a:cf:68:f8:0f:df:c9:e1:05:87:90:
         00:c9:ff:c0:cf:c2:3d:1b:a5:48:97:0b:a4:44:58:f1:44:41:
         ab:0e:f7:94:78:d3:d5:59:b0:ef:0d:35:f9:76:93:2b:b6:6a:
         05:37:f3:5d:ee:6b:17:f4:eb:2a:37:c2:e9:4f:89:95:76:26:
         9e:ec:fa:f4:ba:a9:a0:32:64:55:de:b1:e9:2f:5c:97:ee:77:
         0d:05:00:da:16:a6:80:2b:d3:bc:a8:e6:11:c8:04:d3:b8:98:
         20:86:1e:2b:ec:84:e5:15:95:88:7b:72:8c:e7:ec:f1:9d:b7:
         5c:32:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----