Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/45061c69a41f0ddfc5d82112cd96163978e7dbdf.roa
File:                     45061c69a41f0ddfc5d82112cd96163978e7dbdf.roa (raw, json)
Hash identifier:          p9HpfFlm8mMdvtc/xDY+BCaIjAJZgY85Bx4IWvaEPfc=
Subject key identifier:   CD:F1:CE:6F:E8:FC:06:C0:48:75:89:F3:D8:2E:32:90:1F:C8:F5:38
Certificate issuer:       /CN=00f895a901e0aed32bfbbc27ec311633b2051670
Certificate serial:       09CD
Authority key identifier: 37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00f895a901e0aed32bfbbc27ec311633b2051670.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/45061c69a41f0ddfc5d82112cd96163978e7dbdf.roa
Signing time:             Thu 30 Jun 2022 16:31:53 +0000
ROA not before:           Wed 29 Jun 2022 03:00:00 +0000
ROA not after:            Sat 29 Jun 2024 03:00:00 +0000
asID:                     262218
IP address blocks:        170.79.108.0/22 maxlen: 22
                          186.159.116.0/22 maxlen: 22
                          170.79.108.0/24 maxlen: 24
                          170.79.109.0/24 maxlen: 24
                          170.79.110.0/24 maxlen: 24
                          170.79.111.0/24 maxlen: 24
                          186.159.116.0/24 maxlen: 24
                          186.159.117.0/24 maxlen: 24
                          186.159.118.0/24 maxlen: 24
                          186.159.119.0/24 maxlen: 24
                          2803:3000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f895a901e0aed32bfbbc27ec311633b2051670
        Validity
            Not Before: Jun 29 03:00:00 2022 GMT
            Not After : Jun 29 03:00:00 2024 GMT
        Subject: CN=45061c69a41f0ddfc5d82112cd96163978e7dbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:c4:82:20:29:3d:9c:b0:d9:a2:e6:48:13:
                    59:a9:d4:ae:56:08:18:33:80:81:0c:56:83:57:51:
                    7c:30:a8:81:05:28:ad:43:8c:4a:55:1a:b9:ec:c9:
                    0d:d1:2c:d6:5f:37:16:25:f8:e8:25:05:3f:58:68:
                    36:57:08:67:f1:0f:20:a1:6d:e0:12:d1:08:01:67:
                    10:bf:b8:90:39:87:44:b1:12:ba:09:85:c7:af:8c:
                    a9:80:53:d6:04:d5:f4:0c:02:72:05:f3:26:8f:ae:
                    0e:e2:2d:90:1e:52:9f:dd:38:32:f8:c6:5f:7b:b5:
                    f2:71:f9:17:45:1d:2c:88:96:dd:08:86:04:5e:50:
                    8f:7c:18:03:a0:02:1d:60:a9:5f:b1:4e:bc:99:98:
                    1e:6d:f8:8b:54:1e:e2:61:4d:4e:30:9a:ae:53:b3:
                    24:46:e9:25:76:bc:72:86:1b:4a:4d:7a:c3:63:75:
                    95:69:7c:c5:bb:c8:32:9e:d4:a9:ab:01:30:c7:e7:
                    4d:14:0b:db:47:f0:d7:86:10:98:b5:2a:b5:03:dc:
                    f3:57:37:2a:5a:de:28:79:a3:a9:e8:3d:ab:c6:e8:
                    20:41:97:d9:44:16:75:af:19:b1:af:b3:62:bf:89:
                    82:b5:8b:88:2d:59:ac:af:a4:4c:7c:9b:54:64:6b:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F1:CE:6F:E8:FC:06:C0:48:75:89:F3:D8:2E:32:90:1F:C8:F5:38
            X509v3 Authority Key Identifier:
                keyid:37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00f895a901e0aed32bfbbc27ec311633b2051670.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/45061c69a41f0ddfc5d82112cd96163978e7dbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/00f895a901e0aed32bfbbc27ec311633b2051670.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.108.0/22
                  186.159.116.0/22
                IPv6:
                  2803:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:b6:e2:42:d9:d5:25:e1:e9:93:59:b4:23:e3:bd:5c:18:
         6e:9f:a9:47:87:ee:8c:dc:33:f3:38:c6:cf:d2:59:b3:73:15:
         c3:24:92:64:06:80:42:df:08:59:26:77:5d:c0:cd:48:f3:12:
         65:fc:93:d0:a5:d6:0d:6f:ff:0f:d1:7d:d3:eb:58:08:fb:20:
         51:65:e5:2a:9e:6e:ba:ec:1d:ba:ef:80:eb:4d:1a:25:cf:38:
         85:b5:dd:e8:73:3b:6b:88:24:ab:d7:ac:dc:84:26:b8:84:5a:
         f6:3a:1d:78:1d:ee:41:c4:7b:b6:c4:8e:7f:b0:3b:5d:e5:0d:
         af:a5:59:80:03:b2:6a:e1:27:f2:bb:61:16:dc:10:68:13:7d:
         df:a0:58:dc:5a:4c:3c:69:e8:97:f4:6a:44:c0:26:ca:e0:61:
         f3:07:a1:53:41:e2:dc:82:03:e5:d5:89:48:7c:52:bd:e2:75:
         d3:ac:99:eb:4d:48:ef:c2:22:b3:ee:22:66:53:d0:15:e7:90:
         b3:20:b8:6e:3e:e3:32:38:08:bd:e5:20:4d:83:76:40:bc:ae:
         1c:1f:d0:41:df:e6:8e:32:a5:77:e8:b0:4a:87:e9:17:03:6c:
         47:c6:b5:c3:7e:13:42:6e:dc:a1:2f:7a:d8:f7:fb:cd:dc:5e:
         76:31:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----