Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa
File:                     2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa (raw, json)
Hash identifier:          b2h2bbl9Ubew0rduQ5D7EvyrcnbuU8FfM8ZnJdX+GKk=
Subject key identifier:   93:91:F8:29:37:2A:B4:94:3E:A4:80:FB:DE:16:D7:94:9C:52:58:1B
Certificate issuer:       /CN=09e0adac59b7e340818728c50db0e80398835f20
Certificate serial:       0965B0
Authority key identifier: AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa
Signing time:             Mon 11 Jul 2022 13:36:49 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Sun 11 Jul 2027 03:00:00 +0000
asID:                     269763
IP address blocks:        45.183.60.0/22 maxlen: 24
                          2803:3560::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615856 (0x965b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e0adac59b7e340818728c50db0e80398835f20
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2027 GMT
        Subject: CN=2fa82d66f108983d8cb09ebe13860e3f5c9da8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:ee:4e:70:b6:46:5a:dc:c1:43:7d:04:f8:
                    fe:62:b7:7c:e1:1d:0b:47:a2:ac:71:0a:08:d3:f4:
                    30:13:85:52:a7:bf:c5:c0:69:6d:f2:ff:9c:c4:8b:
                    ef:59:66:02:6b:19:01:72:63:72:aa:62:35:ce:a1:
                    6c:c1:20:82:42:ff:fb:c8:7c:de:42:47:4e:10:bc:
                    d3:fa:82:9a:29:6c:55:4b:14:5e:17:09:1f:93:40:
                    da:a6:00:8e:15:e8:4c:ed:61:c5:58:1b:ae:6d:76:
                    7a:eb:e8:5a:23:20:42:e2:69:7a:0b:3d:b9:43:d5:
                    13:b3:00:a9:21:0f:2e:c8:4d:5e:27:79:fd:29:0b:
                    6f:24:e8:34:e8:bd:28:77:e8:88:55:fb:f1:4d:75:
                    06:a3:c2:86:34:b1:bc:d8:19:6b:f6:64:fb:a1:1b:
                    53:d6:5b:dd:65:32:30:e6:7f:ee:8d:1e:b7:c1:35:
                    d3:09:87:d3:b7:9b:7d:8a:a5:db:fc:3c:8f:82:28:
                    8a:1f:c4:37:68:3b:58:93:70:02:35:c0:f8:e1:0c:
                    c1:73:5a:16:a2:23:e3:29:93:92:af:82:70:db:30:
                    46:f9:51:c6:73:4e:72:81:01:d0:0c:28:bf:b4:07:
                    87:74:a5:e5:e7:fd:9a:b5:58:b6:d1:d4:b5:84:d0:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:91:F8:29:37:2A:B4:94:3E:A4:80:FB:DE:16:D7:94:9C:52:58:1B
            X509v3 Authority Key Identifier:
                keyid:AE:52:34:26:B6:94:B7:D1:E4:39:52:70:28:CE:CC:48:3C:9A:F1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09e0adac59b7e340818728c50db0e80398835f20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/2fa82d66f108983d8cb09ebe13860e3f5c9da8bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9c95cbb-4786-4337-8c9a-0c2b3f119f5a/09e0adac59b7e340818728c50db0e80398835f20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.60.0/22
                IPv6:
                  2803:3560::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:ec:2d:9a:43:a9:d4:28:3e:f5:b2:7c:2f:bb:b8:e1:d0:
         63:ed:48:9f:d5:a0:18:b1:9c:bf:ad:4b:ec:9e:95:ae:3f:d3:
         bf:71:83:32:e1:c4:c5:4b:85:4e:67:de:77:0f:05:34:ef:44:
         4d:d7:e8:a2:c7:04:1f:50:db:8e:68:8e:41:3c:a4:38:35:ec:
         d0:58:dd:3c:50:7d:a6:ab:30:f8:9a:54:42:1a:27:a0:e5:f9:
         32:aa:56:00:f7:73:7c:0e:18:39:bb:18:b1:5d:1d:c1:4d:4d:
         47:db:1a:0a:3f:47:61:26:3c:b1:8a:55:1e:04:ca:57:85:b2:
         39:69:89:b6:b1:bd:9c:3d:52:c2:61:e8:d1:05:cf:7d:bc:5d:
         66:f6:59:2f:e4:b2:95:f8:55:b4:d0:da:f2:e0:a7:7a:33:23:
         75:41:29:de:b9:ca:08:9a:74:24:5f:29:79:da:6c:8d:5e:5e:
         e2:c7:f9:99:e3:02:75:fa:8a:c5:02:05:26:1d:3e:99:a0:03:
         40:9a:80:fe:8a:25:76:39:54:a8:79:1c:ab:6d:0d:b8:72:01:
         7e:01:1c:1c:69:e4:89:a6:1c:d1:26:c5:a6:7c:d2:ce:72:e1:
         7d:0c:70:33:0b:72:de:07:00:4c:08:ec:3b:8e:07:7f:e3:51:
         66:ad:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----