Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddee936-ad9c-4dde-853e-31e856695dba/65ab4cf57b090f8184638cfd2748dcae7f939018.roa
File:                     65ab4cf57b090f8184638cfd2748dcae7f939018.roa (raw, json)
Hash identifier:          OaVhQKZ5mWMqn051F9qYdxVifAhFyti7gfuz4wRw17c=
Subject key identifier:   93:98:28:E0:87:E5:6F:28:9F:47:A4:03:17:3E:72:00:1D:E8:94:FA
Certificate issuer:       /CN=cc548fc934a2baf9a81fd04437680923814d54c5
Certificate serial:       13D529
Authority key identifier: 8B:AD:F6:B6:DA:92:6D:34:20:56:21:58:98:52:7C:CB:13:99:58:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc548fc934a2baf9a81fd04437680923814d54c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddee936-ad9c-4dde-853e-31e856695dba/65ab4cf57b090f8184638cfd2748dcae7f939018.roa
Signing time:             Tue 05 Apr 2022 20:42:21 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Tue 01 Dec 2026 03:00:00 +0000
asID:                     27690
IP address blocks:        45.178.184.0/22 maxlen: 24
                          2803:4660::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299753 (0x13d529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc548fc934a2baf9a81fd04437680923814d54c5
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Dec  1 03:00:00 2026 GMT
        Subject: CN=65ab4cf57b090f8184638cfd2748dcae7f939018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:36:24:76:a6:a3:72:1f:56:3e:80:71:d3:
                    d9:16:3f:2e:a2:02:b7:a8:74:f1:f4:82:d7:32:fd:
                    e1:e5:93:68:fa:de:8a:74:c8:b1:01:2d:77:03:00:
                    a8:d7:db:8f:86:08:1a:03:be:70:d3:87:ed:bb:d2:
                    1f:12:cb:0b:52:f0:1f:42:62:65:e1:77:96:b8:95:
                    0a:d9:2c:ed:8f:04:8f:61:ee:e7:a7:45:67:13:35:
                    6d:75:7a:cf:3c:c3:70:4f:6c:ef:3e:16:2d:7f:92:
                    53:bf:e3:7c:c6:59:74:9f:9c:d5:34:76:f4:e7:56:
                    f5:3a:b2:74:17:81:3e:20:b6:de:3a:11:28:b8:aa:
                    99:96:95:31:ce:45:d4:5f:37:32:da:a8:44:19:2a:
                    51:49:5d:92:fe:c0:0c:f3:f9:77:f2:ec:92:c0:43:
                    b9:9c:e6:bc:2a:1b:a6:f4:82:30:a6:fe:e0:74:8c:
                    a8:53:6d:14:92:93:86:d9:d7:c7:fc:10:ec:13:36:
                    b8:c7:de:fc:57:70:be:35:51:09:55:68:db:03:08:
                    be:ed:10:b6:68:7b:5c:4d:09:67:37:a7:fa:c9:2d:
                    fd:72:3e:34:67:6f:75:a0:e9:25:ce:e5:d4:78:26:
                    60:e3:5c:7b:44:e0:27:96:93:a9:d5:5f:49:21:32:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:28:E0:87:E5:6F:28:9F:47:A4:03:17:3E:72:00:1D:E8:94:FA
            X509v3 Authority Key Identifier:
                keyid:8B:AD:F6:B6:DA:92:6D:34:20:56:21:58:98:52:7C:CB:13:99:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc548fc934a2baf9a81fd04437680923814d54c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddee936-ad9c-4dde-853e-31e856695dba/65ab4cf57b090f8184638cfd2748dcae7f939018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddee936-ad9c-4dde-853e-31e856695dba/cc548fc934a2baf9a81fd04437680923814d54c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.184.0/22
                IPv6:
                  2803:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:76:7b:c2:d5:1c:42:36:f6:9a:62:80:99:c6:4d:08:71:
         22:cb:06:ec:d2:03:a3:c9:1f:de:24:5f:83:f4:3f:08:8f:42:
         c8:28:e5:7f:0f:a9:44:cf:96:38:39:0c:4b:10:49:ab:7b:5e:
         6e:34:71:f3:84:03:61:27:a6:6f:c2:98:af:5c:39:93:5c:94:
         34:3e:78:a2:42:fc:0f:95:6f:27:90:6d:58:5f:c4:5b:7b:00:
         65:a1:a6:92:04:6b:5c:56:04:6d:4d:bb:27:e9:dd:f9:6e:bd:
         5f:01:ee:4a:10:ee:91:2b:6a:97:b9:56:7d:5d:79:5a:f0:aa:
         43:33:05:df:ef:1c:a5:ae:e9:3d:ac:2c:e7:e2:e3:b5:0b:63:
         68:71:87:3f:a7:d2:06:08:a9:ff:91:84:bd:49:90:79:a3:ac:
         0a:ba:a1:aa:f7:ee:62:c6:f5:46:86:d9:20:f0:b3:42:72:a3:
         b3:12:22:83:e0:28:c6:1d:e1:a3:c8:4d:a7:9f:22:50:e8:ee:
         a4:e4:15:c9:6c:99:7e:e5:f6:76:7f:13:27:e2:86:4e:2a:9c:
         83:aa:86:cc:0a:f2:bb:06:5f:c1:83:14:a1:5f:ac:4a:75:5f:
         06:c5:f7:4d:42:9b:8f:88:7b:02:6c:7f:ce:dc:1e:9f:fc:6a:
         49:51:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----