Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/6a0b10453d741c260bd66c09013a9f9526f99279.roa
File:                     6a0b10453d741c260bd66c09013a9f9526f99279.roa (raw, json)
Hash identifier:          7Y+2+4Jxw7A671OeC7fgisOfnXYt/AVhBpWnlaFiN20=
Subject key identifier:   C2:2F:85:BB:17:74:0C:7A:6D:A5:7D:F3:9A:55:11:60:F9:F3:AB:BB
Certificate issuer:       /CN=10414523dc5e73739c593d7cdb4e9a5952afc416
Certificate serial:       11CEAD
Authority key identifier: F3:1D:ED:E1:71:40:E5:7A:E1:73:56:DF:BF:97:BD:23:74:36:A0:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10414523dc5e73739c593d7cdb4e9a5952afc416.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/6a0b10453d741c260bd66c09013a9f9526f99279.roa
Signing time:             Fri 21 Apr 2023 08:30:00 +0000
ROA not before:           Thu 20 Apr 2023 08:30:00 +0000
ROA not after:            Sat 19 Apr 2025 08:30:00 +0000
asID:                     269757
IP address blocks:        45.182.143.0/24 maxlen: 24
                          45.182.186.0/23 maxlen: 24
                          2803:4560::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167021 (0x11cead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10414523dc5e73739c593d7cdb4e9a5952afc416
        Validity
            Not Before: Apr 20 08:30:00 2023 GMT
            Not After : Apr 19 08:30:00 2025 GMT
        Subject: CN=6a0b10453d741c260bd66c09013a9f9526f99279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:f4:da:69:c5:81:71:bf:8c:92:8a:73:a8:
                    fc:4f:77:6a:bb:9d:03:06:1b:f0:ec:64:e8:f2:02:
                    6d:a4:9e:e7:cc:65:2d:67:ad:f7:5a:d9:83:af:76:
                    53:f8:67:23:95:a4:4b:6b:d1:73:9c:a1:de:97:92:
                    11:81:ac:06:8f:76:14:8f:fe:c9:21:8f:1e:58:88:
                    75:e5:b3:c7:6d:21:5e:55:7c:a6:f7:6f:af:68:94:
                    01:08:f2:43:bc:37:e0:48:e8:14:56:cd:aa:b4:9e:
                    13:e1:eb:0b:f4:f0:b0:68:2a:e0:d8:a1:09:62:1e:
                    b3:85:21:28:6c:07:29:3c:8b:09:f5:6f:cb:23:79:
                    4c:24:fd:09:38:40:6a:87:e7:e9:69:a6:68:0e:b4:
                    64:5c:d8:77:e0:c2:9f:49:8c:0a:f9:99:c8:7e:36:
                    f0:12:33:f7:34:8f:12:dc:4d:cd:50:02:a7:e2:d4:
                    dc:91:1e:47:25:2a:be:00:41:7f:ad:a4:1a:48:d0:
                    86:e7:26:35:a4:0f:a2:a2:d8:ce:15:df:59:b8:3c:
                    ea:12:e5:64:ff:4c:78:53:ed:98:2b:0d:15:2d:5f:
                    2b:6c:e6:39:50:a7:86:31:1f:5e:d2:33:3b:d7:fb:
                    eb:4e:34:40:5b:8e:b3:22:eb:b2:ea:86:48:93:0b:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2F:85:BB:17:74:0C:7A:6D:A5:7D:F3:9A:55:11:60:F9:F3:AB:BB
            X509v3 Authority Key Identifier:
                keyid:F3:1D:ED:E1:71:40:E5:7A:E1:73:56:DF:BF:97:BD:23:74:36:A0:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10414523dc5e73739c593d7cdb4e9a5952afc416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/6a0b10453d741c260bd66c09013a9f9526f99279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95f65ce4-9a25-414e-9c8f-929dcd4bb3e3/10414523dc5e73739c593d7cdb4e9a5952afc416.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.143.0/24
                  45.182.186.0/23
                IPv6:
                  2803:4560::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:a3:e1:2c:ae:e1:7d:bd:b5:3c:6c:60:bf:54:e7:db:36:
         7d:b8:c0:10:63:01:73:88:a0:ff:0c:5e:3a:56:0a:e3:5e:3c:
         a1:4c:4e:2f:9f:dc:a2:41:d5:66:ea:61:a0:71:a0:c9:58:a9:
         3c:7e:0c:07:9c:b5:47:49:55:29:dc:e2:66:02:42:62:65:9d:
         b3:53:73:6a:a6:18:47:11:42:84:a9:59:f1:b1:16:d7:ca:34:
         d5:13:09:24:77:b6:ae:fe:49:54:fb:7b:d0:b0:0a:97:25:14:
         a1:ad:93:86:48:06:c4:5f:6a:8d:8b:35:58:a9:a8:9b:2d:96:
         41:b5:72:87:44:13:97:b1:03:6a:eb:45:3f:72:ba:31:1d:c7:
         f4:b1:6d:9e:96:58:7b:83:57:af:bb:37:60:b8:9e:fb:37:f4:
         3c:f3:df:f1:d3:92:f8:ca:da:e1:4f:54:ce:a1:7c:e0:11:d4:
         45:07:3a:4d:da:b7:40:6d:ec:3e:17:0e:f7:7d:70:18:99:72:
         a0:6b:08:f7:80:1a:92:8f:b9:1a:d9:b3:eb:50:59:4f:b7:1a:
         ff:42:94:6d:3d:81:0c:81:5d:fb:91:b0:9e:f0:99:93:92:eb:
         91:34:c8:1b:b6:1f:a2:a0:fe:66:25:49:12:08:a2:96:1e:60:
         c4:0f:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----