Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/f810bcb401866f85cb68a86ecaf52744304a5afd.roa
File:                     f810bcb401866f85cb68a86ecaf52744304a5afd.roa (raw, json)
Hash identifier:          6jJWpsmfp8ExsdEzpwgkSKr1sUzO9IPGRUH9IISDH9w=
Subject key identifier:   1D:F5:A6:95:2A:7D:BB:B1:52:BF:7B:23:C4:90:15:CC:CA:23:E3:89
Certificate issuer:       /CN=efec64f7ac53e798e9b5922f62077081e72cc466
Certificate serial:       02BE
Authority key identifier: CD:D2:B1:05:0B:37:BF:64:CE:59:8F:1F:50:1F:47:D0:7E:A1:3D:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efec64f7ac53e798e9b5922f62077081e72cc466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/f810bcb401866f85cb68a86ecaf52744304a5afd.roa
Signing time:             Wed 18 Jan 2023 19:31:22 +0000
ROA not before:           Tue 17 Jan 2023 19:25:00 +0000
ROA not after:            Sat 18 Jan 2025 19:25:00 +0000
asID:                     265578
IP address blocks:        45.174.172.0/24 maxlen: 24
                          2806:332::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efec64f7ac53e798e9b5922f62077081e72cc466
        Validity
            Not Before: Jan 17 19:25:00 2023 GMT
            Not After : Jan 18 19:25:00 2025 GMT
        Subject: CN=f810bcb401866f85cb68a86ecaf52744304a5afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:d0:ac:e3:07:f8:0b:bd:61:de:f3:fd:64:
                    43:81:2a:c3:49:c4:e3:5e:6a:c9:85:3c:40:56:a2:
                    6a:a5:3f:19:12:93:be:7a:18:40:03:ed:95:b0:b3:
                    f1:39:b9:8a:0e:07:4b:a6:fb:f8:3f:96:61:d6:0d:
                    09:d5:5d:bc:e6:3e:6b:59:f8:39:b2:4e:d9:97:7e:
                    2f:88:8f:66:96:84:01:23:3f:be:67:2d:07:c3:f1:
                    de:e0:0b:5c:ed:ac:8c:49:08:43:10:e0:17:c9:53:
                    3c:d8:7c:64:a0:45:dc:19:6d:15:7c:27:e3:37:2e:
                    dd:0e:b7:3a:3c:c0:5c:16:bc:64:a0:30:32:42:cd:
                    64:5a:9d:1e:35:d6:c6:6e:64:30:bf:39:06:35:83:
                    8e:32:b3:ab:74:28:fb:33:80:b4:93:b1:e1:ed:e3:
                    db:0d:66:97:11:28:67:af:b6:2b:98:d1:46:21:66:
                    4e:73:86:28:8b:a7:0c:c9:97:ac:1d:21:a3:db:3d:
                    6a:9a:c6:ee:a4:cd:da:be:e8:dc:b7:88:c0:5a:6f:
                    5b:03:e8:62:94:6f:50:9a:d4:40:a5:85:89:86:23:
                    20:0b:96:c4:26:a1:c2:60:d0:55:9e:8c:9f:e1:3b:
                    8d:dc:b1:15:27:3f:cc:fc:c9:c5:ad:37:16:4b:41:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:A6:95:2A:7D:BB:B1:52:BF:7B:23:C4:90:15:CC:CA:23:E3:89
            X509v3 Authority Key Identifier:
                keyid:CD:D2:B1:05:0B:37:BF:64:CE:59:8F:1F:50:1F:47:D0:7E:A1:3D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efec64f7ac53e798e9b5922f62077081e72cc466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/f810bcb401866f85cb68a86ecaf52744304a5afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df79444c-149d-46ef-8b2b-eee3acf77a1e/efec64f7ac53e798e9b5922f62077081e72cc466.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.172.0/24
                IPv6:
                  2806:332::/37

    Signature Algorithm: sha256WithRSAEncryption
         02:33:76:b6:0e:6b:7f:a6:cf:c6:df:07:df:05:a0:76:74:be:
         03:09:f2:62:d1:10:aa:23:77:21:2c:47:28:a8:20:f3:6e:89:
         21:e9:02:6b:26:d1:f8:f2:2c:79:a7:af:a3:c1:ee:03:42:5d:
         c4:25:7c:b1:d0:2b:3e:15:9b:03:67:3d:fa:77:3e:cd:45:f5:
         d3:fe:42:72:d4:0b:62:e8:d9:a3:0c:29:fa:e1:e5:63:0d:00:
         77:31:e5:ef:f3:cb:1b:40:f7:5f:f2:2d:87:18:1d:1b:9e:1e:
         82:67:cb:ab:db:63:9c:c0:c6:99:98:68:64:ae:a1:08:d9:78:
         ae:30:3b:b5:99:1b:58:f7:7a:4d:1c:27:06:0b:c0:a1:0d:84:
         1b:23:20:34:6c:3e:65:40:15:14:b9:f4:7e:c9:f0:1f:ad:ba:
         a0:59:bf:c3:a0:22:5d:b1:fd:b6:dd:70:0f:b5:d8:81:40:8b:
         7d:91:76:33:fd:4f:df:84:53:fd:41:29:54:59:d1:92:88:a9:
         f8:47:a0:b4:04:2c:53:db:80:ed:54:e7:da:25:2b:41:91:61:
         42:77:8a:b6:e1:27:0c:32:e9:34:de:c0:e7:2f:5f:88:61:d0:
         80:ef:84:c3:d0:0b:7b:03:12:d0:a4:ce:eb:cb:e8:3c:1a:7d:
         dc:91:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----