Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/6aa88650970b572d0b451e2afbfba9b688d01b0e.roa
File:                     6aa88650970b572d0b451e2afbfba9b688d01b0e.roa (raw, json)
Hash identifier:          ob0jt3DxCTVJIfV1eua2zzP5mJVIm0KjZXooxzM/Cvw=
Subject key identifier:   40:52:93:14:C2:BF:41:1D:65:E8:59:27:9F:96:79:70:42:2A:7C:76
Certificate issuer:       /CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c
Certificate serial:       120CCC
Authority key identifier: 10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/6aa88650970b572d0b451e2afbfba9b688d01b0e.roa
Signing time:             Fri 26 May 2023 08:30:01 +0000
ROA not before:           Thu 25 May 2023 08:30:01 +0000
ROA not after:            Sat 24 May 2025 08:30:01 +0000
asID:                     267900
IP address blocks:        45.178.192.0/22 maxlen: 24
                          2803:9660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182924 (0x120ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c
        Validity
            Not Before: May 25 08:30:01 2023 GMT
            Not After : May 24 08:30:01 2025 GMT
        Subject: CN=6aa88650970b572d0b451e2afbfba9b688d01b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:5c:8d:18:f2:a4:03:56:1b:fa:fe:74:dd:
                    19:b7:59:98:83:be:73:88:b6:b6:07:44:d8:8c:39:
                    bf:19:87:97:8a:8f:1f:dc:16:dd:81:a3:d7:07:e8:
                    db:37:09:c3:56:0f:e7:10:cf:80:bd:94:09:1e:73:
                    ee:e5:6b:ba:65:f1:af:87:48:03:1a:8e:76:38:6b:
                    c1:0a:29:65:55:ad:c1:fe:b0:84:f5:8d:1b:db:c8:
                    b3:41:62:15:1b:19:2a:d3:cd:2c:36:90:9b:4c:bd:
                    fe:3e:ef:9d:d2:69:fb:45:74:26:84:d3:80:3f:d8:
                    c4:b9:c3:2b:bf:ad:1a:0e:89:6e:df:9a:d9:2f:d8:
                    09:59:2e:34:c4:ea:07:01:0f:f6:d4:fb:7f:fb:bd:
                    3a:f1:8f:81:f2:de:bb:ae:bc:ea:53:9f:86:ae:77:
                    43:8a:82:23:95:71:9b:36:0c:d9:d0:e3:7b:bf:90:
                    e4:34:e8:ea:0b:ef:6b:a7:9a:6d:af:0c:0b:96:03:
                    03:fa:70:95:4c:d6:3f:af:40:64:40:91:5f:69:50:
                    ad:16:a3:ee:ff:6c:07:0f:13:70:d3:93:7c:8d:0a:
                    b1:a9:8e:52:84:6f:78:d0:87:a1:c2:f3:c4:0e:98:
                    4d:0b:0d:29:3b:08:81:af:9a:45:88:5f:e7:9d:8b:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:52:93:14:C2:BF:41:1D:65:E8:59:27:9F:96:79:70:42:2A:7C:76
            X509v3 Authority Key Identifier:
                keyid:10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/6aa88650970b572d0b451e2afbfba9b688d01b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.192.0/22
                IPv6:
                  2803:9660::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:73:d2:67:fd:9c:6f:15:9b:c0:bc:1d:45:27:c6:b7:fa:f5:
         43:fb:3d:b4:f4:b8:57:dd:51:c2:cd:32:e8:8b:5d:49:5f:d1:
         ce:b8:e6:01:0b:e0:9a:5a:c2:4b:dc:49:39:16:f2:83:21:b0:
         54:7a:b7:fb:ec:4a:40:ac:49:91:3d:85:4b:0d:19:34:c4:50:
         c2:61:72:e4:22:69:70:d0:2c:8a:5f:2c:9a:ff:b9:c5:3f:08:
         ce:1a:17:04:4c:05:28:ae:38:9a:19:fb:55:79:16:ca:2f:3d:
         8a:38:59:bf:1f:dc:f9:17:41:16:2d:6a:d2:84:be:07:c5:cb:
         39:1f:13:92:bc:69:c9:b3:ef:82:7f:2b:3b:0f:39:1a:65:63:
         d5:20:24:15:d5:ea:68:7f:f2:01:43:29:7e:4b:e2:ec:71:73:
         25:58:ab:11:c2:94:a9:89:6e:bc:6a:68:02:3f:de:b4:4a:a6:
         ae:ea:7c:bc:48:ab:30:7e:34:b0:a6:25:2d:2e:dc:bd:47:63:
         f5:41:91:41:ad:3e:5f:78:a3:2b:02:c0:f0:0e:d1:ec:bb:1c:
         6e:23:4f:5c:58:c5:fa:87:57:9e:63:a4:95:b4:b6:ca:36:7b:
         e1:3d:6f:30:57:8c:e9:db:c1:d4:84:8e:49:b1:a9:0a:fe:94:
         7e:dd:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----