Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/7fb336a37e7552e6fcad14ee50918d383348ed13.roa
File:                     7fb336a37e7552e6fcad14ee50918d383348ed13.roa (raw, json)
Hash identifier:          pBNNN6k5FvEgW5H7SzdL1eiRUZvmJutxbyNCqG7rOgQ=
Subject key identifier:   F6:2C:3B:C6:F7:6D:F3:03:F1:2D:51:D3:54:2A:3D:2B:81:93:13:72
Certificate issuer:       /CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
Certificate serial:       021A
Authority key identifier: 0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/7fb336a37e7552e6fcad14ee50918d383348ed13.roa
Signing time:             Tue 22 Nov 2022 21:31:55 +0000
ROA not before:           Mon 21 Nov 2022 21:29:09 +0000
ROA not after:            Fri 22 Nov 2024 21:29:09 +0000
asID:                     267912
IP address blocks:        45.179.72.0/22 maxlen: 24
                          2803:f660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
        Validity
            Not Before: Nov 21 21:29:09 2022 GMT
            Not After : Nov 22 21:29:09 2024 GMT
        Subject: CN=7fb336a37e7552e6fcad14ee50918d383348ed13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:0b:37:a6:f7:c0:80:e2:8f:15:4e:46:ea:
                    2d:c0:07:7a:fb:44:a7:f2:c1:f6:a5:da:91:97:cf:
                    2e:57:10:0c:09:c7:7c:44:d7:c9:6e:01:4a:c5:ff:
                    7c:11:3c:53:29:bb:dc:04:80:b7:bb:f0:94:cb:1d:
                    ea:d4:69:5c:fe:f1:78:6f:06:ea:94:0e:c6:ce:01:
                    ca:ac:38:fb:23:dd:58:7a:47:23:82:00:ee:84:a3:
                    f3:66:bf:c2:80:60:ab:37:66:dc:d9:0b:2a:70:20:
                    cc:17:c2:c9:13:ac:06:9b:0b:44:4b:c2:da:f8:24:
                    61:d4:b3:a3:57:68:7c:5b:81:74:94:fc:fe:7f:a1:
                    eb:8b:66:42:d7:35:97:88:a1:49:e6:3a:dc:f1:21:
                    4f:d7:ef:0a:53:83:a1:21:30:0e:c0:f3:ac:e7:a1:
                    9a:f8:28:f9:f2:b6:24:c9:ae:cd:2a:ab:57:2b:63:
                    40:01:1b:ea:8a:d0:06:37:a2:6a:25:49:66:a7:2f:
                    2b:9f:2b:73:61:69:02:c3:25:0b:4e:5e:a2:5a:3e:
                    39:d7:14:7f:0a:c6:a1:dc:85:19:67:3f:2e:0e:67:
                    39:af:fe:c8:17:ad:c2:3c:ef:41:0b:cb:b2:51:f7:
                    65:4d:63:70:0e:0f:bf:89:db:09:c2:bf:b1:03:49:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:3B:C6:F7:6D:F3:03:F1:2D:51:D3:54:2A:3D:2B:81:93:13:72
            X509v3 Authority Key Identifier:
                keyid:0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/7fb336a37e7552e6fcad14ee50918d383348ed13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.72.0/22
                IPv6:
                  2803:f660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:38:a9:bf:c8:1e:57:7e:75:5d:4b:4d:77:e8:3a:10:9a:
         27:48:c8:4c:4f:c8:6f:83:bc:96:51:a1:7d:2d:8a:e1:99:21:
         79:05:a0:4e:e2:9a:de:36:7a:d4:f7:9c:f5:7a:34:66:bb:7e:
         69:f3:09:3a:e0:4c:62:b1:70:ed:00:9c:62:80:18:80:b8:65:
         b2:87:66:34:52:c9:d2:8b:aa:26:c3:90:da:0e:75:24:54:43:
         d1:36:c9:ef:ee:1f:7b:10:40:33:da:e1:e8:87:45:6b:21:c6:
         96:45:f5:c0:d2:cd:b7:86:d6:aa:c0:43:d6:bc:4c:cf:2b:32:
         24:93:45:a4:c2:82:f2:dd:5b:ae:6d:4c:a9:ea:b9:f9:a8:b3:
         67:77:c6:f8:dc:5b:07:c5:0b:aa:8f:78:b9:4a:60:95:f4:ca:
         93:5e:1a:ca:b1:b8:2c:f7:0a:13:ac:6d:64:e3:d1:8f:2a:6d:
         7a:29:cb:75:9c:c4:49:29:9d:91:6b:75:58:71:ae:58:6d:05:
         4e:a7:e4:2a:5e:0c:20:e5:f3:79:f8:2e:b3:27:ec:ee:13:7f:
         78:7e:80:4b:e2:87:98:09:59:46:ad:8f:54:c8:81:85:ea:9b:
         2a:50:ff:63:f6:8e:9b:56:bb:f4:11:e3:fc:6a:92:32:71:ca:
         46:63:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----