Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/ff8b2053a14b033d99d1a83a732cc827bbdd1d67.roa
File:                     ff8b2053a14b033d99d1a83a732cc827bbdd1d67.roa (raw, json)
Hash identifier:          uvRxdAPdoi/lWbbqZ8X6rd4NxI7CmnhPg+7fJeGs8wM=
Subject key identifier:   36:2A:DB:F1:FA:A3:19:47:3B:E0:1D:07:CB:DA:05:E6:0E:62:E7:20
Certificate issuer:       /CN=6ea89a9dcc4868890b0f382eb51070e3b10ddaaf
Certificate serial:       02AA
Authority key identifier: 29:25:C1:9E:CC:2E:79:42:B8:8F:09:64:E4:F0:D9:20:99:A4:93:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/ff8b2053a14b033d99d1a83a732cc827bbdd1d67.roa
Signing time:             Tue 18 Oct 2022 19:59:21 +0000
ROA not before:           Mon 17 Oct 2022 19:58:44 +0000
ROA not after:            Fri 18 Oct 2024 19:58:44 +0000
asID:                     270158
IP address blocks:        45.168.236.0/22 maxlen: 24
                          2806:319::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ea89a9dcc4868890b0f382eb51070e3b10ddaaf
        Validity
            Not Before: Oct 17 19:58:44 2022 GMT
            Not After : Oct 18 19:58:44 2024 GMT
        Subject: CN=ff8b2053a14b033d99d1a83a732cc827bbdd1d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:dd:56:b3:d2:5a:8e:09:34:94:fa:9d:c9:
                    6f:08:81:51:82:8d:92:e4:da:59:b7:64:de:1c:52:
                    7b:c0:63:0c:38:7e:66:cf:a4:4c:69:39:5d:35:15:
                    a0:05:ed:59:0e:1e:21:94:cb:1a:f2:43:95:72:64:
                    e4:90:9a:bd:5d:a1:df:e5:c8:a1:64:30:57:e8:35:
                    e4:27:5e:45:5f:ff:59:9c:c1:b8:81:44:7a:83:66:
                    d1:00:9e:66:af:a3:2e:a5:4f:6f:6b:e9:27:3d:38:
                    a1:77:d3:0d:b5:36:de:1d:70:2f:0f:17:44:c7:c8:
                    c0:7c:af:6c:4c:84:5b:93:1c:89:a6:6f:ce:e2:dc:
                    32:a0:74:06:76:f5:3a:d1:00:8d:c0:6c:5a:b4:30:
                    36:85:35:f2:bb:8d:35:0f:94:6e:0d:cf:80:26:3e:
                    21:9e:15:91:a5:2d:f1:22:f7:42:53:c9:ee:c9:90:
                    30:df:ba:13:68:50:81:2c:48:e0:4b:dc:63:56:8a:
                    0f:11:5f:eb:fb:84:b0:c8:f7:cd:6f:7e:fe:6c:3c:
                    fd:97:5b:bf:89:0e:36:5c:25:b9:6b:6c:17:aa:3d:
                    82:b6:58:8b:b1:7a:24:9f:71:40:f6:ac:97:99:ae:
                    9f:a1:9b:a6:60:65:51:6d:40:5c:be:86:69:96:46:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2A:DB:F1:FA:A3:19:47:3B:E0:1D:07:CB:DA:05:E6:0E:62:E7:20
            X509v3 Authority Key Identifier:
                keyid:29:25:C1:9E:CC:2E:79:42:B8:8F:09:64:E4:F0:D9:20:99:A4:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/ff8b2053a14b033d99d1a83a732cc827bbdd1d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2dc02d4-424c-47d0-a5f5-0e72d3f00f0c/6ea89a9dcc4868890b0f382eb51070e3b10ddaaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.236.0/22
                IPv6:
                  2806:319::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:f1:d9:10:ae:bf:58:99:4b:1d:d3:ea:be:35:35:00:6d:
         d7:e3:fc:32:c9:41:6e:3a:6d:a5:7f:48:d8:99:51:08:d4:c9:
         24:77:92:cd:81:fc:23:f8:8e:7f:6c:9d:1a:c6:2c:0f:78:aa:
         40:45:40:b2:50:53:e9:12:df:c5:26:e8:b6:b0:5a:e7:f9:87:
         1f:72:cd:38:20:7d:f7:80:a0:72:79:6c:55:b3:f1:61:61:0c:
         db:1c:70:ff:6f:76:3a:1f:f0:f3:95:a4:b2:4c:a2:94:93:18:
         37:eb:7c:ed:0b:08:39:38:cf:41:4d:8a:5c:e5:4a:39:94:8b:
         0a:4a:6a:5b:9a:af:ce:54:84:6f:f2:b5:3d:11:18:ed:45:e6:
         e7:b4:60:e0:05:41:e5:f9:68:2c:66:05:89:f8:c0:68:82:1a:
         bd:b3:ef:be:75:7d:df:dd:cd:ed:8c:7f:3e:bb:d8:ba:86:9b:
         58:9e:55:10:e7:e8:0c:3b:45:83:41:7f:1b:f7:69:86:2a:7f:
         21:88:4c:13:7f:b1:3f:4b:f8:ba:a3:30:d7:3a:ac:26:62:bf:
         70:55:ce:fc:1a:de:16:85:7f:19:55:2b:f0:ff:58:08:93:0c:
         8b:4e:76:dd:9f:c9:19:43:ba:5f:8b:a6:d7:57:59:e4:34:5a:
         b8:7f:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----