Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/668b24f15347112a82572c45127e92086e93ff24.roa
File:                     668b24f15347112a82572c45127e92086e93ff24.roa (raw, json)
Hash identifier:          QGp+SbodQMU6IgzSq8M3BW5Lcgc0XD9hz9jl87+xbno=
Subject key identifier:   A7:C2:E3:46:88:42:9D:64:66:D7:E9:B8:49:20:DD:97:00:53:0C:5E
Certificate issuer:       /CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
Certificate serial:       15A244
Authority key identifier: 0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/668b24f15347112a82572c45127e92086e93ff24.roa
Signing time:             Wed 05 Oct 2022 20:51:20 +0000
ROA not before:           Wed 05 Oct 2022 20:50:30 +0000
ROA not after:            Sat 05 Oct 2024 21:50:30 +0000
asID:                     265695
IP address blocks:        45.5.8.0/22 maxlen: 24
                          2803:9c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417796 (0x15a244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
        Validity
            Not Before: Oct  5 20:50:30 2022 GMT
            Not After : Oct  5 21:50:30 2024 GMT
        Subject: CN=668b24f15347112a82572c45127e92086e93ff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:49:ec:f0:14:b3:28:bf:5a:d9:74:09:83:
                    5b:26:3c:39:55:e3:ce:cb:53:33:e3:2b:a2:fe:83:
                    18:5d:46:df:4b:18:30:ca:6d:7e:48:de:60:39:13:
                    eb:dd:29:38:2e:eb:8c:03:be:a2:82:e0:2e:e4:05:
                    61:cb:85:43:17:7c:0b:67:5f:96:3a:2a:15:44:9b:
                    94:15:05:71:9b:90:3d:9d:96:dc:cd:4e:b7:54:f0:
                    27:f8:72:69:df:52:89:95:61:c1:1a:17:9f:55:ae:
                    74:24:25:81:87:01:c2:0c:6a:52:a3:e7:0d:c7:29:
                    e6:2f:e2:12:92:bd:2b:f7:3b:9f:8d:c4:42:1c:4d:
                    fe:bb:62:ae:59:5e:e9:6d:33:25:cf:32:e8:8f:d5:
                    a9:ea:71:00:9f:38:59:f7:a3:cb:86:fa:dd:14:f5:
                    2e:89:f0:65:56:59:bc:55:59:ae:e7:59:ed:2c:c4:
                    ba:bf:74:ee:9e:b5:ad:f1:ad:ae:b2:26:fb:e6:e4:
                    a4:df:d7:d1:e8:85:35:82:29:7e:f7:3b:50:13:5b:
                    5d:20:d6:8f:e1:28:f3:36:49:8d:53:1f:dc:f1:8c:
                    50:f8:04:b2:4f:35:a6:ab:3b:d6:40:61:15:cf:d1:
                    6c:eb:7e:b0:cd:c7:04:fb:ac:e5:42:b0:30:03:40:
                    ea:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:E3:46:88:42:9D:64:66:D7:E9:B8:49:20:DD:97:00:53:0C:5E
            X509v3 Authority Key Identifier:
                keyid:0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/668b24f15347112a82572c45127e92086e93ff24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:e5:36:9b:bd:c7:21:58:1c:02:f2:dd:99:a6:7f:b2:1c:
         ea:97:5f:c2:22:75:fa:29:bd:e1:d8:5c:41:03:2e:8e:52:9d:
         7e:0c:ae:99:ac:99:3f:95:4e:f6:00:5f:59:2d:91:36:3d:2c:
         b6:3b:1a:61:2e:a6:d0:bc:53:fc:68:bd:59:2f:6c:74:e7:38:
         79:9f:8f:a1:18:65:d4:f0:02:23:f3:c0:70:85:db:c1:76:3a:
         f4:a3:87:bf:68:88:47:f3:6d:ff:fe:45:ef:e1:e9:4d:d3:7c:
         4b:31:de:b7:0f:8d:3b:38:db:50:83:77:a6:7b:61:4d:6f:68:
         b6:c0:9e:81:58:a4:7f:01:da:19:71:f8:8c:78:42:cd:a2:b9:
         d9:8f:61:15:08:0d:74:58:3b:ef:75:4f:ed:34:a1:90:25:06:
         9e:50:99:ce:7b:f2:51:ac:5c:dd:67:57:7c:7b:78:4a:5f:cd:
         94:28:1c:32:4d:e2:de:0a:77:6a:ee:1b:52:07:16:82:c1:fb:
         06:c8:f9:4e:3e:ea:fc:b8:51:f5:2e:bd:29:91:2f:04:da:6d:
         07:fb:d0:29:38:ee:da:3b:5a:68:a9:35:a3:fa:3e:45:b1:1e:
         57:77:d9:8b:4d:c7:e0:a8:44:14:22:01:bb:b1:cf:1d:6d:dc:
         fe:e8:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----