Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/25a70d484cef0df4bf3e0fc4bba96240f5f28d82.roa
File:                     25a70d484cef0df4bf3e0fc4bba96240f5f28d82.roa (raw, json)
Hash identifier:          HksAqx3ztUTk4l9biuffbxaiPuRnSzvCgLzYJrAhjkI=
Subject key identifier:   EA:54:61:24:7B:D2:C4:3E:E9:30:5D:68:90:3C:16:D4:5F:4D:0D:AD
Certificate issuer:       /CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
Certificate serial:       13DECB
Authority key identifier: 5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/25a70d484cef0df4bf3e0fc4bba96240f5f28d82.roa
Signing time:             Thu 10 Mar 2022 14:36:35 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264824
IP address blocks:        45.183.140.0/22 maxlen: 24
                          2803:e360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302219 (0x13decb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=25a70d484cef0df4bf3e0fc4bba96240f5f28d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:df:bd:9b:17:1e:dd:8d:42:e0:a8:cc:3e:
                    e0:05:8d:8e:6e:ad:73:24:44:58:1c:33:e7:1d:95:
                    62:54:50:d4:53:d8:f3:ea:90:8b:7e:cc:4d:99:72:
                    e3:b7:ad:1f:79:d3:15:7f:f9:1c:e3:57:b1:30:07:
                    5f:14:24:82:73:f9:75:55:46:2a:80:37:a1:cd:18:
                    ae:9c:b5:98:c8:ba:bf:85:ec:57:65:75:13:10:71:
                    cd:f3:15:a4:4c:0b:3f:8e:1a:bf:02:c1:c1:d6:50:
                    c9:40:a2:0a:d1:5f:52:3a:d0:27:e5:66:5b:79:16:
                    91:ea:23:f7:2e:01:f7:6e:dd:56:a1:da:af:af:ef:
                    90:9e:a1:89:63:7c:20:8d:a6:00:eb:dd:ce:38:52:
                    f7:0e:db:f3:ae:69:2a:af:03:dd:60:1f:9e:4e:61:
                    5a:ff:d9:0e:c7:ee:96:1e:5f:6a:14:53:52:a6:46:
                    c5:60:d4:e1:f0:e1:6c:e6:15:f4:37:50:6e:d7:3d:
                    44:c0:06:6c:60:9d:b7:89:f4:6a:f2:da:b2:f5:77:
                    0c:d7:e5:5a:92:d0:da:4e:f3:82:c1:2e:a2:5f:6d:
                    16:d6:ea:8d:e0:fe:a0:c5:fe:0f:b6:98:2d:0c:e6:
                    12:66:d2:0f:13:26:79:1f:24:3d:53:37:c3:68:f7:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:54:61:24:7B:D2:C4:3E:E9:30:5D:68:90:3C:16:D4:5F:4D:0D:AD
            X509v3 Authority Key Identifier:
                keyid:5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/25a70d484cef0df4bf3e0fc4bba96240f5f28d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a40e227e41eada75cd2ecb37649e56571e8b69d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.140.0/22
                IPv6:
                  2803:e360::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:11:9d:4e:d0:ac:b2:5e:f2:a0:8d:d5:6f:0f:24:75:7f:bd:
         7e:88:27:44:44:44:92:06:cb:24:15:e2:32:4a:ad:5d:f8:2d:
         da:87:cf:13:12:27:43:ca:55:d4:9d:b6:d4:15:c1:8a:98:3f:
         dd:28:79:e5:20:f1:25:e7:86:26:a9:fa:b8:f3:68:51:c0:b4:
         dc:54:ba:09:f4:8f:b1:83:e9:f6:04:4c:cb:59:ce:ac:f1:86:
         da:96:48:e4:da:9f:be:54:c6:31:c9:0b:92:92:34:39:32:f4:
         2f:db:e4:74:a3:fd:02:44:23:dd:a6:34:59:fc:4a:e1:3e:1e:
         4a:9f:70:61:dd:c8:fc:d2:e2:24:33:78:c6:75:79:7d:e8:70:
         f7:e0:cb:9c:13:af:45:12:10:23:b7:99:99:c5:f4:fd:22:72:
         00:41:86:a1:7b:78:7c:49:52:5b:2b:3b:7b:1f:e8:b4:10:d4:
         8d:09:32:3c:b7:89:4f:63:13:e2:4d:25:d1:04:67:52:38:87:
         54:d6:72:6b:1b:12:7a:9f:cc:90:ee:17:57:a9:1e:66:91:6e:
         45:d4:2b:78:48:8d:41:13:75:93:75:3c:48:24:2b:16:f7:71:
         a6:5a:fb:a0:dd:9d:50:4d:69:03:59:e3:89:08:61:d5:98:a4:
         47:a7:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----