Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/ee9d8b22cd4c2c3f7c1c97f6c517bf33ee44f6bc.roa
File:                     ee9d8b22cd4c2c3f7c1c97f6c517bf33ee44f6bc.roa (raw, json)
Hash identifier:          LoPvPxlzFE1rhyuKXfjL3q9zVaTuiECLNXU2cbiU68Y=
Subject key identifier:   46:02:8B:99:78:07:20:37:01:A6:1B:4F:FC:9F:D5:BE:42:DE:B9:57
Certificate issuer:       /CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
Certificate serial:       0E71A9
Authority key identifier: 64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/ee9d8b22cd4c2c3f7c1c97f6c517bf33ee44f6bc.roa
Signing time:             Thu 05 May 2022 16:34:07 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Sun 05 May 2024 03:00:00 +0000
asID:                     265580
IP address blocks:        45.174.252.0/22 maxlen: 24
                          2806:335::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946601 (0xe71a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2024 GMT
        Subject: CN=ee9d8b22cd4c2c3f7c1c97f6c517bf33ee44f6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:c1:74:ed:c8:10:22:94:0e:4d:61:67:bd:
                    6f:ad:c6:06:a3:fa:68:97:16:1e:bf:68:4e:3d:eb:
                    bb:e4:21:b5:fc:bc:61:c0:97:91:5d:7e:74:db:57:
                    3d:57:84:5b:ae:14:a6:75:14:03:db:2e:42:b5:b4:
                    4e:f3:5f:15:cd:ff:80:51:93:a0:26:fe:40:10:fa:
                    87:21:75:9f:b7:c7:41:d7:96:9f:1f:c7:6f:7b:69:
                    1b:54:00:19:95:32:94:0d:71:4d:f6:21:e2:ca:79:
                    c5:fa:fe:e2:ce:da:4c:92:ae:03:5d:ff:ec:ac:60:
                    cd:74:12:47:7a:97:59:03:7e:48:8b:87:4c:e6:9a:
                    67:ab:db:4a:71:78:53:5b:4d:b6:97:40:bb:9a:d7:
                    d7:fc:00:c8:81:13:2e:10:f5:d2:c1:87:f0:a4:c1:
                    c0:4b:10:32:83:8f:60:71:0d:94:30:39:e4:c5:c4:
                    30:74:c4:63:14:55:c7:5f:22:8b:68:e9:ad:8d:eb:
                    04:9d:94:e7:26:91:d2:cd:20:49:f9:7a:2f:6a:1c:
                    8b:92:c9:aa:50:fe:64:68:90:6e:e1:c3:92:5c:6e:
                    0b:9c:f9:c0:7b:cb:02:9b:78:38:10:19:c6:eb:e1:
                    5a:fc:20:5d:3d:59:e8:ac:05:64:b3:e3:60:53:62:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:8B:99:78:07:20:37:01:A6:1B:4F:FC:9F:D5:BE:42:DE:B9:57
            X509v3 Authority Key Identifier:
                keyid:64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/ee9d8b22cd4c2c3f7c1c97f6c517bf33ee44f6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.252.0/22
                IPv6:
                  2806:335::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:c8:2f:c9:aa:36:ac:26:73:07:e3:6a:6a:84:50:55:6c:a0:
         3c:26:98:b2:43:29:f2:f8:b8:21:28:69:53:b1:05:e6:a1:bd:
         a1:c2:a8:9d:dc:db:d4:69:a4:cd:70:ad:c8:f9:0c:b1:e4:39:
         8c:bd:3a:08:69:42:39:8f:76:3c:9b:56:2d:3c:1e:49:30:ff:
         42:53:99:f1:50:0e:56:9b:6b:38:0a:c0:d1:be:fb:60:6a:2f:
         30:d3:1f:d2:c1:b7:53:67:12:be:ba:6c:96:44:62:c4:ab:6f:
         b1:f2:92:01:cd:73:21:c0:d6:87:91:f3:1c:7b:be:c4:62:31:
         81:69:a0:6c:d3:5d:21:f6:c1:3d:0f:75:c7:55:25:7d:5b:0c:
         3a:97:54:37:67:3a:a1:a6:72:b3:3f:c4:ca:a5:2a:03:93:3d:
         ea:c9:c7:fb:01:79:76:7d:88:78:06:49:5b:b2:23:4b:2e:7a:
         b3:99:67:d3:0f:83:fc:92:10:8d:81:6b:c7:fd:3a:47:3d:04:
         65:61:f8:5b:d9:d5:76:d3:31:d1:91:6c:3f:82:c6:0d:b3:ec:
         3f:0a:2e:ed:21:9e:6e:f0:34:e1:89:f7:cd:56:15:74:71:17:
         ed:6f:d9:a5:23:91:84:a7:3d:31:ac:8b:ef:e5:5b:77:03:a0:
         14:08:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----