Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/d82051753ae4a721d30c3c54793cfe8f0f2ac8c7.roa
File:                     d82051753ae4a721d30c3c54793cfe8f0f2ac8c7.roa (raw, json)
Hash identifier:          noxpu91HNgK32xQEECrk0t0lOTj88zu6hXsaTBPC+Q0=
Subject key identifier:   15:EB:34:4B:43:7F:92:DF:37:B0:92:30:00:6B:A8:F7:87:F8:66:27
Certificate issuer:       /CN=b4261735d9345695ee247995a8e711a305b68272
Certificate serial:       0710
Authority key identifier: 2F:D0:76:87:0D:F5:37:82:FB:C3:01:F6:BC:8E:01:64:1B:ED:E9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4261735d9345695ee247995a8e711a305b68272.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/d82051753ae4a721d30c3c54793cfe8f0f2ac8c7.roa
Signing time:             Sat 25 Feb 2023 05:51:59 +0000
ROA not before:           Fri 24 Feb 2023 05:51:15 +0000
ROA not after:            Tue 25 Feb 2025 05:51:15 +0000
asID:                     265583
IP address blocks:        45.174.240.0/22 maxlen: 24
                          2806:338::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4261735d9345695ee247995a8e711a305b68272
        Validity
            Not Before: Feb 24 05:51:15 2023 GMT
            Not After : Feb 25 05:51:15 2025 GMT
        Subject: CN=d82051753ae4a721d30c3c54793cfe8f0f2ac8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:b4:9f:1b:b0:c9:65:db:38:ce:c0:14:13:
                    56:ee:dc:cb:c9:74:8a:75:31:5f:13:6f:70:98:35:
                    2d:f5:50:ca:db:e8:53:ab:95:c0:f0:e8:0d:b8:ad:
                    10:ac:d5:bb:b6:65:bd:c6:a2:cf:64:c3:0d:a0:4b:
                    48:51:95:76:e7:92:1b:db:08:ae:50:85:73:d4:51:
                    23:c9:f4:a3:a6:d4:13:75:b0:fd:69:0a:35:34:67:
                    d1:d3:25:ec:42:8f:9a:91:6b:b1:0c:75:4e:f5:91:
                    f7:4b:18:9c:38:e4:9d:39:fb:da:f5:c4:be:01:96:
                    52:b3:f4:62:99:4e:9a:f4:0b:c1:28:e0:ac:87:0c:
                    21:3d:3c:33:cc:7f:80:1e:dc:45:ae:e3:08:7f:d1:
                    5f:63:54:5a:35:31:28:a8:fe:16:f9:8e:24:c2:1d:
                    0e:df:b3:04:92:02:c5:2e:04:03:15:4c:32:38:f9:
                    fb:a6:52:2e:db:20:f0:1c:3a:da:fe:e8:ac:6f:86:
                    1b:77:72:10:dd:e5:45:9c:28:ae:44:b3:60:d0:e7:
                    a8:19:96:bc:db:d6:fa:2c:0e:50:ba:54:9f:04:2a:
                    da:8c:d9:0f:e7:9c:d5:f3:8f:4a:91:fb:a3:0c:19:
                    bd:49:00:f1:16:9d:d0:eb:67:6a:81:43:db:3f:0d:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:34:4B:43:7F:92:DF:37:B0:92:30:00:6B:A8:F7:87:F8:66:27
            X509v3 Authority Key Identifier:
                keyid:2F:D0:76:87:0D:F5:37:82:FB:C3:01:F6:BC:8E:01:64:1B:ED:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4261735d9345695ee247995a8e711a305b68272.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/d82051753ae4a721d30c3c54793cfe8f0f2ac8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/b4261735d9345695ee247995a8e711a305b68272.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.240.0/22
                IPv6:
                  2806:338::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:26:ef:4c:04:6d:75:e3:1a:9e:89:74:2c:e9:ff:b7:19:1c:
         53:f4:e4:72:34:ff:99:7c:b3:47:43:9b:47:d3:f9:b4:85:36:
         26:08:0c:77:84:2d:71:0d:d8:e6:05:71:ef:9f:03:68:82:ac:
         2e:4a:94:80:63:8b:3d:3e:30:c4:70:bd:6b:5c:26:b5:a5:4d:
         ec:d7:7f:fd:6d:fd:38:c2:52:d4:86:ac:06:03:8b:d4:87:f2:
         ca:d3:d0:b9:f3:80:e5:91:65:7a:13:2f:97:4e:24:bd:c8:8a:
         a1:8e:34:d2:14:21:ee:29:f1:df:09:ce:fa:3d:3f:e3:0c:a4:
         c0:9e:61:ab:fa:93:d8:0a:dd:5e:8e:13:02:d6:00:72:02:40:
         68:d7:7f:bf:4a:ba:6e:aa:63:5d:e9:fd:53:94:b2:91:d5:5a:
         da:6e:45:92:2c:45:81:20:56:4e:cb:9a:ee:94:7b:04:68:df:
         c1:4b:62:33:79:48:dd:66:ec:22:84:94:40:89:6f:52:8e:b2:
         ff:13:36:8c:bf:e7:f0:a6:b1:1e:b5:3f:e9:96:f5:67:1a:00:
         92:98:e3:5d:ff:1f:bf:df:1a:43:e6:9c:e4:85:0d:f6:50:0a:
         47:53:ad:42:cf:4b:e0:52:47:a0:5f:98:66:9d:ee:b4:da:0f:
         86:92:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----