Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/f2b49912b55efaa0837f47d2319ad83d9b97cbc7.roa
File:                     f2b49912b55efaa0837f47d2319ad83d9b97cbc7.roa (raw, json)
Hash identifier:          i+bZECqCnv55Vq+Bk3IeauMdoIX9nEA2ju7xYJ25MBY=
Subject key identifier:   60:36:9F:4E:A8:F2:04:AD:0D:58:71:7C:52:E4:53:D6:3D:C1:C6:F1
Certificate issuer:       /CN=735219299be31feced07dd9523bac5dd0d86f653
Certificate serial:       126FDE
Authority key identifier: A0:40:7E:C3:05:7E:2A:37:84:B5:6B:22:38:80:EB:21:22:78:0A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/735219299be31feced07dd9523bac5dd0d86f653.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/f2b49912b55efaa0837f47d2319ad83d9b97cbc7.roa
Signing time:             Thu 20 Apr 2023 08:30:02 +0000
ROA not before:           Wed 19 Apr 2023 08:30:02 +0000
ROA not after:            Fri 18 Apr 2025 08:30:02 +0000
asID:                     271962
IP address blocks:        45.231.32.0/22 maxlen: 24
                          2803:a320::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208286 (0x126fde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735219299be31feced07dd9523bac5dd0d86f653
        Validity
            Not Before: Apr 19 08:30:02 2023 GMT
            Not After : Apr 18 08:30:02 2025 GMT
        Subject: CN=f2b49912b55efaa0837f47d2319ad83d9b97cbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:e5:45:ab:19:31:69:fe:3f:87:24:6f:29:
                    09:de:8d:40:f6:09:c6:08:f0:2e:f9:7a:7d:22:a5:
                    aa:37:0f:a3:02:4c:b0:7f:53:ce:aa:f9:a4:29:e0:
                    2b:92:e2:c3:c9:32:7c:0b:35:3c:49:da:9d:03:0c:
                    59:92:0b:73:3f:90:21:84:62:60:6f:47:d9:3d:c2:
                    04:f1:08:07:f7:14:59:74:f5:25:5a:59:04:20:90:
                    34:96:5f:57:bc:35:80:7e:09:87:ee:36:ef:3d:c6:
                    e8:42:2d:1b:7b:50:7b:ae:d8:20:c9:21:3a:27:3f:
                    14:12:27:19:76:67:3f:a8:28:33:61:2d:82:ce:52:
                    e5:ce:e8:cb:a1:10:87:3f:0c:48:88:25:a9:78:18:
                    6f:cc:0e:8a:f6:0d:2b:79:e6:44:8d:9b:85:4e:b9:
                    e5:43:39:40:62:9a:ad:60:35:f0:6f:ad:f2:0e:23:
                    89:66:73:74:11:28:0f:eb:58:00:3d:df:1b:5b:b9:
                    08:1e:d5:56:2f:76:7f:52:1b:73:1f:f4:92:4f:fd:
                    eb:96:1b:14:1e:d1:ff:51:1a:d2:dd:cc:4c:29:2e:
                    ef:9b:51:70:e9:09:fd:ef:fb:0f:b0:a5:fe:46:fd:
                    ee:47:57:ad:e6:8c:8d:c5:34:d3:3a:9c:14:d2:65:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:9F:4E:A8:F2:04:AD:0D:58:71:7C:52:E4:53:D6:3D:C1:C6:F1
            X509v3 Authority Key Identifier:
                keyid:A0:40:7E:C3:05:7E:2A:37:84:B5:6B:22:38:80:EB:21:22:78:0A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/735219299be31feced07dd9523bac5dd0d86f653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/f2b49912b55efaa0837f47d2319ad83d9b97cbc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7f486a2-4119-4742-9940-816cd6f48b9f/735219299be31feced07dd9523bac5dd0d86f653.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.32.0/22
                IPv6:
                  2803:a320::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:0e:b5:5e:25:f6:2f:b1:b9:75:c8:a3:bc:e2:28:2e:ae:
         2b:c0:28:53:fb:82:a8:46:2d:d8:7f:90:de:e1:13:b7:f6:fe:
         b0:82:2e:72:80:94:43:0e:62:ca:9a:27:d5:05:19:28:59:29:
         54:6f:97:cb:84:77:b3:78:2c:92:7a:7a:56:89:7d:6d:4b:54:
         62:02:ae:48:d6:19:13:75:5b:31:05:6e:79:32:62:ec:b1:0d:
         27:d1:c4:d0:e2:93:bf:e8:08:24:ce:e5:6c:27:bd:db:5c:2d:
         68:82:15:ca:55:d1:c6:5f:55:1f:b3:0f:71:91:68:22:a4:1a:
         0e:f1:cf:bb:59:e5:ef:13:12:2c:e6:e5:e9:05:d0:22:f0:9e:
         9f:b6:18:55:03:42:95:be:7e:78:f9:23:4b:62:5d:7d:7e:5c:
         87:46:60:e0:bc:b4:14:92:fd:a9:48:12:67:7b:ce:a6:ad:d4:
         ac:7c:f0:4e:d8:14:62:83:74:63:73:04:17:96:6a:d3:5f:2c:
         80:68:e4:b7:d5:11:34:7d:d5:e7:94:24:d7:db:7e:2c:ca:ba:
         29:72:d6:fb:53:61:c8:5c:b0:5d:4e:c4:31:74:f1:17:b7:64:
         25:7e:4c:ed:4c:c4:ad:3b:46:c5:31:f6:0d:84:02:26:e4:22:
         5b:7c:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----