Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6fea3ce3a14c89b840a0399999659b2412029ab5.roa
File:                     6fea3ce3a14c89b840a0399999659b2412029ab5.roa (raw, json)
Hash identifier:          Teje5qc9+UC7aHmaukJ4BBRqO8+0Ah5KrszQeE9jR4g=
Subject key identifier:   20:7A:B8:21:C6:19:BC:80:00:A7:8F:A3:C9:E6:65:0B:97:3B:C7:73
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       24DFF7
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6fea3ce3a14c89b840a0399999659b2412029ab5.roa
Signing time:             Tue 19 Dec 2023 12:50:08 +0000
ROA not before:           Tue 19 Dec 2023 12:50:07 +0000
ROA not after:            Fri 19 Dec 2025 12:50:07 +0000
asID:                     267829
IP address blocks:        45.174.148.0/22 maxlen: 24
                          2803:7860::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416631 (0x24dff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Dec 19 12:50:07 2023 GMT
            Not After : Dec 19 12:50:07 2025 GMT
        Subject: CN=6fea3ce3a14c89b840a0399999659b2412029ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:5d:31:5e:5e:fa:b0:59:28:55:ee:84:91:
                    70:89:0c:35:3e:c8:16:e9:ad:ef:46:f8:8e:9a:46:
                    3e:6e:79:c3:f6:81:ce:9e:31:00:15:ef:dc:12:91:
                    df:71:31:3e:8f:94:92:1f:99:ee:91:79:c9:54:d4:
                    f8:0c:8c:82:c7:89:66:59:e2:c5:8b:48:85:b4:cd:
                    31:2b:aa:e6:1a:f8:c8:23:aa:ab:e8:b4:2c:fb:52:
                    12:e3:3d:32:22:09:d5:e6:4a:11:80:4c:56:d1:6f:
                    8f:f2:e0:ad:b6:69:92:8a:18:12:db:da:52:d5:63:
                    6f:b4:31:57:54:5f:37:3a:1e:76:d6:71:ed:aa:01:
                    9e:e8:b6:96:0b:70:e7:50:1a:64:54:a0:8e:17:43:
                    73:4d:f8:5f:83:74:8d:9b:7f:37:ed:3c:9a:28:03:
                    74:a3:c6:80:fa:0e:7a:01:59:73:81:88:ae:2f:3f:
                    ee:d7:71:7d:f4:49:6c:a5:7a:6e:7f:6e:76:c3:f5:
                    96:99:c4:e5:52:06:75:d8:26:cb:ad:fc:88:5d:79:
                    98:1e:43:17:60:ac:41:78:75:3c:26:c2:62:11:12:
                    9b:0e:0f:e9:ee:b7:f2:56:08:cf:d8:c2:4c:ef:2c:
                    a6:9c:45:70:eb:a3:e2:cb:8c:56:f4:4c:9b:f8:02:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:B8:21:C6:19:BC:80:00:A7:8F:A3:C9:E6:65:0B:97:3B:C7:73
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6fea3ce3a14c89b840a0399999659b2412029ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.148.0/22
                IPv6:
                  2803:7860::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:cf:43:9e:d1:7b:20:e0:27:4a:bc:a9:32:fb:bf:ed:7e:a4:
         ab:7a:33:14:64:89:e4:61:21:e1:d1:c8:8c:61:c9:11:91:db:
         c0:97:0e:31:8a:34:e8:60:c2:be:a3:09:5a:79:3c:3a:35:ab:
         ef:c1:48:59:26:c9:cd:76:05:ee:e3:64:47:76:35:5a:44:05:
         14:73:76:1b:a2:6a:46:23:1d:78:db:0d:94:ba:d7:15:da:9c:
         e5:22:46:0a:92:60:71:c2:6d:c1:8e:e0:90:c4:c2:84:fa:d8:
         cd:75:be:ec:70:52:24:d3:ec:37:9f:98:fc:3a:68:da:e4:48:
         a1:81:e9:8f:ab:20:0a:6f:de:99:2f:3a:5b:9f:51:ad:30:f1:
         4d:f8:cf:84:c1:dc:37:d7:7e:77:7e:03:ea:4c:48:5f:93:43:
         3a:77:1f:0b:4c:d0:2c:8f:99:2e:8b:ff:13:a4:56:c6:c3:01:
         4c:60:5b:a0:cb:1e:2c:51:d7:1c:e2:f8:6e:ae:08:f8:58:4c:
         91:76:36:fe:7c:dd:93:15:06:de:5f:a8:53:92:a5:17:09:52:
         b8:7c:5b:45:31:e3:3f:ff:57:ad:db:79:82:16:22:02:cd:6b:
         2c:7f:7b:83:cd:4e:a4:bd:9e:df:3b:eb:8e:4c:ab:bf:92:73:
         22:8c:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----