Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/2b3f6412b7c676392de471ccc72381f24e11dc37.roa
File:                     2b3f6412b7c676392de471ccc72381f24e11dc37.roa (raw, json)
Hash identifier:          NGY1Rr9Ua7Z0jHBvop6vpSJpmzcHlWfCZf3B1QiCrmA=
Subject key identifier:   4B:7A:97:03:B4:E8:8D:72:CA:C8:6F:82:D1:04:A1:B9:99:03:3C:CB
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       15E221
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/2b3f6412b7c676392de471ccc72381f24e11dc37.roa
Signing time:             Sat 19 Feb 2022 00:36:28 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Thu 18 Feb 2027 03:00:00 +0000
asID:                     265819
IP address blocks:        45.6.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434145 (0x15e221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2027 GMT
        Subject: CN=2b3f6412b7c676392de471ccc72381f24e11dc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:c4:14:f3:8a:e0:5e:a3:15:91:18:cb:87:
                    07:64:7e:79:86:98:2e:81:4f:1b:5f:e0:4c:f8:b8:
                    8e:5e:dc:5b:7b:5d:ea:7e:a2:1f:9c:00:ed:d6:53:
                    3c:12:5a:e7:4c:d0:a1:67:c4:e9:b4:93:5d:6f:26:
                    a8:93:6f:43:aa:a7:ed:15:2a:86:78:ce:c6:b9:0a:
                    21:09:7f:cc:2c:17:6e:6c:77:0b:ce:85:a8:07:96:
                    ec:df:36:16:da:cf:0e:3b:8c:b2:10:58:0c:c2:e3:
                    d7:88:b6:1e:f8:18:9b:45:c2:c3:c3:11:99:7d:fb:
                    ed:ed:59:98:36:26:8a:dd:46:1b:ad:3b:c1:f1:a4:
                    6f:92:4e:82:b3:49:a4:3d:68:92:a0:c7:31:7f:13:
                    6d:ca:fd:3b:ac:27:43:03:96:c4:33:4a:fe:96:24:
                    09:2c:50:26:88:02:26:81:ea:ee:87:a3:dd:3a:43:
                    39:9c:52:64:9d:ac:20:f9:79:4c:97:f3:2d:1d:ed:
                    6a:ca:1d:67:e6:40:2c:12:7c:7b:38:6e:e8:64:3a:
                    8f:e8:b2:10:39:b1:e5:02:72:50:46:07:a2:32:d5:
                    ab:e7:85:96:01:d1:74:db:bb:20:66:5d:bb:55:14:
                    db:42:fb:a6:05:29:08:b9:b1:0e:37:a1:9c:1c:4f:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:97:03:B4:E8:8D:72:CA:C8:6F:82:D1:04:A1:B9:99:03:3C:CB
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/2b3f6412b7c676392de471ccc72381f24e11dc37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:66:59:ae:f6:c0:7a:1a:93:4c:54:41:f8:04:a8:1c:ec:
         dd:ed:26:76:2c:8a:52:83:1d:0d:48:03:b9:2b:de:fd:42:c5:
         3f:ff:46:54:34:fb:74:c1:24:14:81:8c:98:72:88:bd:a5:b1:
         69:e0:6b:70:d4:44:a2:67:a8:93:8c:cf:2a:66:2f:95:8c:75:
         6e:60:47:04:c2:f2:af:96:d9:5e:1e:46:ef:78:49:a7:ae:ea:
         15:dc:b7:c5:c6:8c:b2:88:c6:f2:8b:0b:46:cd:19:00:9f:22:
         ed:ae:03:3f:a7:67:dc:a4:6e:b9:f4:ce:63:cb:3c:e3:85:df:
         a4:32:b8:f0:f0:ed:cc:64:a7:7e:6e:d4:83:20:c6:91:99:0c:
         f0:7d:c4:6a:c5:0d:9f:d8:fe:9e:b0:fb:ad:88:8f:3b:bb:f9:
         0d:d7:e1:d6:09:0a:70:93:77:e0:0b:43:b3:bd:f8:96:00:46:
         8f:7b:b3:22:92:c3:e6:0e:cc:be:84:b4:b2:60:3c:19:e3:f7:
         ee:20:86:80:dc:cf:ff:3c:2c:9a:93:31:9b:f2:b8:c1:bb:32:
         24:0c:22:ea:8d:aa:bb:34:ac:ed:c1:a5:cd:42:8a:b7:4e:87:
         7b:f4:58:da:06:2c:7a:35:f1:21:81:84:52:00:49:36:79:f7:
         ef:fa:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----