Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/4277c341765c55f96ec5d496b3e6b03e40031af1.roa
File:                     4277c341765c55f96ec5d496b3e6b03e40031af1.roa (raw, json)
Hash identifier:          xUmsao/9cngZPq0c/QYOIWUz70nzO7hWKlwzO5APiUQ=
Subject key identifier:   86:27:9D:35:F1:79:3C:28:F9:60:C5:0F:CF:11:44:D8:F3:6B:F6:44
Certificate issuer:       /CN=ebf04e08f0d4a39fc5898cea5aace966693cd306
Certificate serial:       1010
Authority key identifier: 65:E4:60:77:5F:FE:64:52:53:62:2E:3F:8E:DC:43:11:A4:A2:0C:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf04e08f0d4a39fc5898cea5aace966693cd306.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/4277c341765c55f96ec5d496b3e6b03e40031af1.roa
Signing time:             Fri 12 Aug 2022 14:07:31 +0000
ROA not before:           Fri 12 Aug 2022 14:04:28 +0000
ROA not after:            Mon 12 Aug 2024 14:04:28 +0000
asID:                     269818
IP address blocks:        45.184.152.0/22 maxlen: 24
                          2803:4760::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4112 (0x1010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf04e08f0d4a39fc5898cea5aace966693cd306
        Validity
            Not Before: Aug 12 14:04:28 2022 GMT
            Not After : Aug 12 14:04:28 2024 GMT
        Subject: CN=4277c341765c55f96ec5d496b3e6b03e40031af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:9f:28:ba:51:b4:10:40:ae:66:53:d7:3f:
                    67:71:b1:ce:fd:a0:3d:44:73:a7:6e:a2:8e:fd:4c:
                    2f:4c:88:aa:96:f0:ad:43:b9:cf:a4:d2:84:89:c6:
                    9d:49:bb:5d:a2:04:71:3e:fd:78:15:4b:0c:50:31:
                    fc:fb:97:52:1e:bf:87:4b:df:d6:5d:73:3d:00:a9:
                    29:57:b2:54:de:b3:1b:82:62:16:5d:d2:cf:ca:e2:
                    30:75:e8:e5:c8:a8:19:7f:d6:31:29:0d:29:1f:62:
                    59:e4:29:dc:aa:16:d3:bb:ab:5e:9e:74:a0:a0:6d:
                    39:a6:37:f8:68:1f:c8:9d:03:d8:ea:ed:90:22:6f:
                    26:d4:e6:ad:05:3d:0c:cc:4c:09:db:0a:27:c4:b8:
                    ed:e3:af:09:63:61:a1:61:f6:04:6a:2f:41:8c:cf:
                    66:d5:5f:bc:c6:cd:00:1b:26:b6:47:ce:c6:df:b2:
                    f5:4e:6c:66:87:96:71:dc:f7:b5:f1:55:14:db:ed:
                    2b:8d:8e:34:01:1a:7d:d2:28:eb:fa:41:85:ae:33:
                    d7:49:62:61:bf:6c:f9:f5:84:bd:51:8e:ea:fd:f8:
                    b1:59:d3:2f:08:d6:e7:68:0a:ef:ad:77:2d:9d:69:
                    ac:10:a1:95:1f:0c:52:dc:e7:78:c4:a6:18:f2:68:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:9D:35:F1:79:3C:28:F9:60:C5:0F:CF:11:44:D8:F3:6B:F6:44
            X509v3 Authority Key Identifier:
                keyid:65:E4:60:77:5F:FE:64:52:53:62:2E:3F:8E:DC:43:11:A4:A2:0C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf04e08f0d4a39fc5898cea5aace966693cd306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/4277c341765c55f96ec5d496b3e6b03e40031af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c23f4819-292f-4271-90cc-0bfd1a7975e2/ebf04e08f0d4a39fc5898cea5aace966693cd306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.152.0/22
                IPv6:
                  2803:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:d1:24:75:85:e9:32:a5:9d:6a:9d:24:e4:da:f0:69:c0:
         d1:a0:f1:42:ba:79:d2:eb:0b:68:b0:be:0c:2a:1b:b9:db:c5:
         3e:e9:ec:f1:ad:e9:79:e1:3b:ac:50:e9:be:d9:86:64:92:58:
         73:2a:4a:40:31:15:da:db:c1:28:42:5c:6d:d3:cc:2a:55:f8:
         3f:0e:4f:35:aa:f0:48:7f:6c:1b:e7:e5:48:8d:28:0d:b7:0e:
         d6:67:79:47:97:e6:b3:5d:3f:b9:47:8d:22:a5:bd:f0:15:41:
         63:00:fe:6d:32:e9:01:48:2d:be:8b:5f:4b:0f:66:23:18:0a:
         a6:e0:f7:50:f3:b7:80:fc:56:a9:51:d6:8f:fd:96:3e:d0:be:
         e2:7f:35:27:d0:6e:cb:e6:e3:ae:1a:b3:6c:5c:a8:9c:ed:b7:
         a6:1b:97:65:44:19:34:e2:8a:40:10:06:a4:87:a3:69:10:2a:
         dc:f6:77:af:d0:af:f4:30:c4:37:cb:d1:6b:d6:85:14:4e:c3:
         7a:83:77:ad:3f:4c:ac:56:2a:f4:9d:c7:67:1b:7c:b7:a3:93:
         98:36:fd:ae:4d:2c:00:88:1d:9a:0d:d9:42:a7:37:78:78:4c:
         f0:b1:bb:b0:a7:b8:78:57:f2:66:36:b5:0a:fd:1e:bb:1a:c2:
         71:39:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----