Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/62ae392af4f007da9a6e93469d23690630ceb4a0.roa
File:                     62ae392af4f007da9a6e93469d23690630ceb4a0.roa (raw, json)
Hash identifier:          wpRP+JgulmrI5kyOA/UajxAr53aTchFyvBKCSpqfrO4=
Subject key identifier:   D4:A2:30:07:42:53:D1:6C:BF:79:A5:A3:1C:1B:73:74:B8:B9:2D:CE
Certificate issuer:       /CN=d3eef1937df6fdd69dc9fc7ce2c008cf13179427
Certificate serial:       120AF9
Authority key identifier: 4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/62ae392af4f007da9a6e93469d23690630ceb4a0.roa
Signing time:             Sat 06 May 2023 08:30:00 +0000
ROA not before:           Fri 05 May 2023 08:30:00 +0000
ROA not after:            Sun 04 May 2025 08:30:00 +0000
asID:                     266741
IP address blocks:        45.232.16.0/22 maxlen: 24
                          2803:2b20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182457 (0x120af9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3eef1937df6fdd69dc9fc7ce2c008cf13179427
        Validity
            Not Before: May  5 08:30:00 2023 GMT
            Not After : May  4 08:30:00 2025 GMT
        Subject: CN=62ae392af4f007da9a6e93469d23690630ceb4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:36:a9:e7:ae:fc:6a:da:90:b9:3a:68:14:
                    28:e6:a5:0f:70:8e:0d:53:f6:61:b6:a4:55:39:06:
                    96:34:5f:53:8f:78:6e:a6:4f:b0:c5:40:98:43:67:
                    6c:dc:9a:4b:22:04:19:39:b2:eb:1b:79:83:df:8b:
                    ad:63:97:47:c3:d9:1b:b8:bd:38:89:94:cf:41:00:
                    94:b8:b8:fe:c0:1c:44:6f:c3:bb:c1:aa:18:60:ef:
                    39:30:50:d3:8a:bb:06:7c:47:b0:27:10:ff:2f:46:
                    85:34:a0:47:f1:74:88:3c:f0:eb:e5:08:c1:4e:2c:
                    28:30:95:53:70:43:7c:2d:b9:e1:7b:97:62:ae:f2:
                    8e:4f:79:6f:4f:9a:07:fe:f1:d6:32:4f:69:68:82:
                    00:75:55:f6:2c:bf:f6:fe:c7:81:34:6d:76:58:dd:
                    7f:38:78:0c:0b:85:97:e4:62:da:22:fb:a5:ce:85:
                    04:46:7a:4e:39:2a:9d:80:f0:0d:6b:3b:5f:5a:45:
                    b5:db:fc:ee:53:72:2e:fb:1b:d9:90:58:e1:06:84:
                    d1:89:25:da:ac:7c:4d:ab:14:81:b4:bf:7b:9c:85:
                    a7:c2:5d:1a:ea:04:43:d2:ce:5a:f9:ef:0b:87:13:
                    02:2b:d0:76:90:f4:57:62:92:a0:bc:ff:07:47:c8:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A2:30:07:42:53:D1:6C:BF:79:A5:A3:1C:1B:73:74:B8:B9:2D:CE
            X509v3 Authority Key Identifier:
                keyid:4C:77:91:54:A6:24:8C:FD:F6:84:3F:69:7E:99:7F:F3:ED:4B:61:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/62ae392af4f007da9a6e93469d23690630ceb4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ac64501a-6b4e-43ed-9f6c-a3d7391824cf/d3eef1937df6fdd69dc9fc7ce2c008cf13179427.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.16.0/22
                IPv6:
                  2803:2b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:50:94:8f:d5:2c:c9:54:48:ea:bd:42:89:ad:b9:61:00:
         a3:2f:c4:cb:46:37:9d:ad:1e:d5:b7:95:7f:a2:70:1e:5c:32:
         72:aa:e0:dc:0b:d9:de:ed:7a:e3:ff:dd:c3:c1:61:7c:f1:dd:
         0d:dd:84:6b:e5:f1:a6:c5:2f:70:16:6a:92:ab:74:24:f2:73:
         ff:54:c5:8d:ff:6c:a4:bb:22:8a:eb:de:62:84:2c:8f:88:c0:
         63:bb:25:6d:02:af:e1:5a:7d:67:6e:48:58:5c:01:6e:2b:4c:
         95:a7:e1:c0:5a:d9:cb:8b:2e:b1:10:b7:34:cb:aa:07:90:0a:
         89:16:c5:12:e3:0e:37:18:3b:2e:32:1e:32:ca:1f:9c:7e:3c:
         95:f9:b4:a0:80:b1:ef:be:94:cb:1d:d1:ad:09:61:d0:d5:11:
         a6:e8:fc:ff:1b:72:5d:49:53:9e:cb:14:99:09:4d:08:51:f2:
         2d:2a:a2:81:64:35:8d:6c:fc:8a:df:b7:9c:fe:e8:26:c7:f6:
         fd:3c:28:a2:b1:aa:bd:96:5d:ea:8e:d8:63:4e:b8:ac:c0:3b:
         be:0d:7d:18:f6:82:07:85:8e:01:fc:8a:42:93:0a:fe:1f:70:
         24:2e:6d:a9:7f:2e:79:fb:1e:a7:53:8a:74:e6:be:50:19:be:
         61:94:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----