Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/20cee5035a34fac16234ff2f20d8736c71ec34a3.roa
File:                     20cee5035a34fac16234ff2f20d8736c71ec34a3.roa (raw, json)
Hash identifier:          P1k4nLvARSFEqUMVBCMcDO4MpEGAta79RiJB4eRJrlg=
Subject key identifier:   05:5B:A0:EF:4F:1F:18:BF:25:4D:E9:A8:61:46:F5:D5:46:BD:FC:CF
Certificate issuer:       /CN=52123ef187606a1f9e354af3d71983ad0a3cd822
Certificate serial:       215E1C
Authority key identifier: F3:C0:32:AD:9D:33:B2:C0:86:87:52:69:91:75:D2:40:F9:68:E8:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52123ef187606a1f9e354af3d71983ad0a3cd822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/20cee5035a34fac16234ff2f20d8736c71ec34a3.roa
Signing time:             Thu 15 Jun 2023 14:34:27 +0000
ROA not before:           Wed 14 Jun 2023 14:34:27 +0000
ROA not after:            Sun 15 Jun 2025 14:34:27 +0000
asID:                     266795
IP address blocks:        45.236.88.0/22 maxlen: 24
                          2803:d0a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186780 (0x215e1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52123ef187606a1f9e354af3d71983ad0a3cd822
        Validity
            Not Before: Jun 14 14:34:27 2023 GMT
            Not After : Jun 15 14:34:27 2025 GMT
        Subject: CN=20cee5035a34fac16234ff2f20d8736c71ec34a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:b6:cf:01:17:07:49:f3:5c:24:91:94:0b:
                    3f:d9:32:26:53:69:3c:cc:81:67:99:d4:8d:87:47:
                    84:0b:44:9d:b8:69:fa:12:8a:d4:0b:89:cc:62:61:
                    2d:28:c9:9e:fe:ca:fa:22:c8:1e:1f:87:88:2e:50:
                    ab:a7:18:a4:fc:de:5a:bd:75:29:91:73:d2:59:40:
                    cd:1b:8d:0c:e9:f0:1f:ff:64:d3:13:6f:a0:00:40:
                    fa:51:7b:5c:b8:c3:92:39:e3:02:9d:ca:b8:9e:d0:
                    14:7d:e2:8b:71:09:af:06:7e:7f:4c:de:6c:8a:19:
                    0a:fa:32:04:c9:fc:b6:30:6c:7c:80:e7:94:9f:fc:
                    d6:29:e0:cd:9d:72:18:47:09:6c:5f:27:cf:bf:ee:
                    df:d5:f6:24:7c:d6:a5:98:e6:01:b9:a8:64:ce:4a:
                    7c:f4:5a:70:b7:29:d5:3a:fe:dd:e3:79:46:4f:a0:
                    a0:a7:b3:3b:51:48:ba:36:9d:7b:8b:04:c8:e5:56:
                    49:d5:09:cc:17:d8:11:5e:17:b7:6e:e2:d9:2d:e9:
                    66:e9:56:e1:98:1f:ec:3c:ea:37:a1:96:94:16:75:
                    b7:e3:8f:60:66:e0:fc:fa:44:6c:69:8b:c6:85:24:
                    89:da:08:f5:66:4e:d0:9d:a2:61:27:15:1a:41:d1:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5B:A0:EF:4F:1F:18:BF:25:4D:E9:A8:61:46:F5:D5:46:BD:FC:CF
            X509v3 Authority Key Identifier:
                keyid:F3:C0:32:AD:9D:33:B2:C0:86:87:52:69:91:75:D2:40:F9:68:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52123ef187606a1f9e354af3d71983ad0a3cd822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/20cee5035a34fac16234ff2f20d8736c71ec34a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/52123ef187606a1f9e354af3d71983ad0a3cd822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.88.0/22
                IPv6:
                  2803:d0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:12:65:c1:89:89:bb:0c:4f:61:7d:47:d9:cf:18:f2:f2:
         61:18:e6:98:43:29:82:03:51:9e:cd:04:0d:05:2e:7d:90:14:
         fe:a3:e4:a5:77:5f:3d:1e:08:cd:90:d3:31:c3:01:80:a6:c2:
         20:46:ee:29:8f:6b:a4:48:ff:09:56:03:f9:dc:46:e9:bf:7f:
         c4:8a:5a:39:0f:c7:e5:17:c2:e5:d7:ef:ee:6a:cf:f3:d4:b7:
         5a:83:bf:28:71:71:41:0c:33:b9:0f:13:a9:bc:9a:45:5b:19:
         0f:cb:7a:b3:4e:3e:1b:be:72:8a:2f:23:0a:fc:36:cf:60:45:
         58:97:86:65:19:62:09:87:d2:62:58:d4:83:e6:8b:37:41:ee:
         57:22:b2:f1:6d:35:d2:73:6c:cb:2f:c4:5c:c9:ff:43:b5:43:
         cc:dd:51:ab:97:27:05:22:d8:f5:0c:54:21:e9:b9:4f:25:72:
         93:42:02:fc:0d:9d:22:b5:ab:97:f0:f0:32:a8:7c:38:da:0e:
         7e:73:bb:31:5d:08:19:10:e9:48:7d:6e:69:b7:31:c9:83:06:
         4e:31:7b:21:c4:a9:12:e8:a3:57:f7:1a:37:d5:69:e1:ab:9e:
         4b:bb:81:19:60:15:65:08:db:8d:2b:ee:a5:d3:80:18:19:7c:
         6f:e2:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----