Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2eb5fb0-75e8-43c6-8dee-22db18f3363a/b64e969cacb1fcd46613832afb0781add55da33b.roa
File:                     b64e969cacb1fcd46613832afb0781add55da33b.roa (raw, json)
Hash identifier:          2/0sYUUs8nBzKgaFIgh8M97YaC8N7wrvuk+28VNm19E=
Subject key identifier:   5F:AD:22:2E:D8:0B:C3:75:D3:95:37:92:7B:B7:87:C0:E1:E9:F6:C4
Certificate issuer:       /CN=e4af79e37c62c72dcc608abc9f41f9e659785104
Certificate serial:       1214B4
Authority key identifier: E3:EE:10:0D:09:4E:F7:8F:43:B6:BE:B8:91:F8:ED:F6:23:2B:EA:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4af79e37c62c72dcc608abc9f41f9e659785104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2eb5fb0-75e8-43c6-8dee-22db18f3363a/b64e969cacb1fcd46613832afb0781add55da33b.roa
Signing time:             Thu 20 Apr 2023 08:30:01 +0000
ROA not before:           Wed 19 Apr 2023 08:30:01 +0000
ROA not after:            Fri 18 Apr 2025 08:30:01 +0000
asID:                     269779
IP address blocks:        45.184.20.0/22 maxlen: 24
                          2803:8360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184948 (0x1214b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4af79e37c62c72dcc608abc9f41f9e659785104
        Validity
            Not Before: Apr 19 08:30:01 2023 GMT
            Not After : Apr 18 08:30:01 2025 GMT
        Subject: CN=b64e969cacb1fcd46613832afb0781add55da33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:4d:61:73:2d:8f:a0:02:47:ab:62:14:8c:
                    61:38:0a:e8:e7:ab:6d:9b:00:d4:78:e5:c3:29:ef:
                    78:e9:52:f2:3b:e7:e2:5a:69:82:39:d3:fd:9d:92:
                    98:79:cb:32:0d:1d:4e:5d:b5:45:31:dd:1a:2c:b4:
                    6c:63:fd:28:5d:3c:4d:11:fd:57:db:18:5c:8e:df:
                    ba:41:c4:a0:12:96:da:25:11:61:13:cc:a4:f4:b5:
                    34:76:a8:59:e6:f1:18:93:07:66:22:f2:5d:0c:99:
                    df:44:17:88:c9:30:c7:b4:61:d0:a6:7f:f4:81:aa:
                    2a:75:15:0a:c9:2c:41:ef:29:9a:29:d8:88:a0:fd:
                    37:3f:cd:f2:4d:98:fe:dc:2b:c9:e7:61:ba:62:3c:
                    d3:ed:a6:52:58:83:63:3f:d4:71:b5:f6:ce:2e:54:
                    ce:60:a0:66:2d:26:b6:16:a2:fd:03:32:89:ad:11:
                    75:f7:3b:90:3b:c4:82:c0:ff:d3:65:d3:da:fe:f1:
                    5d:63:6f:62:0b:4c:2c:b9:64:47:60:a3:ce:51:95:
                    9e:ef:b0:8e:36:16:48:4d:d2:f4:50:b6:02:60:95:
                    87:f1:61:3b:ae:ae:02:3c:3f:9b:6d:d3:36:92:76:
                    11:a0:0a:02:42:5f:3c:41:f7:bf:f6:28:f8:2a:2e:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AD:22:2E:D8:0B:C3:75:D3:95:37:92:7B:B7:87:C0:E1:E9:F6:C4
            X509v3 Authority Key Identifier:
                keyid:E3:EE:10:0D:09:4E:F7:8F:43:B6:BE:B8:91:F8:ED:F6:23:2B:EA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4af79e37c62c72dcc608abc9f41f9e659785104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2eb5fb0-75e8-43c6-8dee-22db18f3363a/b64e969cacb1fcd46613832afb0781add55da33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2eb5fb0-75e8-43c6-8dee-22db18f3363a/e4af79e37c62c72dcc608abc9f41f9e659785104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.20.0/22
                IPv6:
                  2803:8360::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:1c:2e:07:14:06:cc:a9:ee:76:e8:45:92:40:6c:b9:16:
         77:86:46:93:dc:51:32:2d:02:d1:ed:b3:28:bd:6d:85:bd:cf:
         b7:48:79:bd:75:88:c4:23:39:b8:50:ab:5a:f6:6f:9c:6c:a1:
         dc:97:3d:d1:29:ab:ff:ed:1a:69:9e:0c:bd:d3:9a:30:35:9d:
         3b:7c:03:be:53:56:fd:40:55:af:15:ba:79:b2:c5:b0:d4:d7:
         fc:ae:7d:a8:b3:b0:13:48:7b:16:51:be:5e:4f:e3:8d:08:3a:
         af:ae:f7:cb:0e:c8:a2:84:4a:1c:99:26:1b:11:07:18:23:8e:
         72:65:1e:8d:81:74:bf:91:96:0e:e0:3d:7c:04:80:5f:40:95:
         ca:f6:66:10:19:ad:c9:f1:04:01:8a:0e:57:0a:cb:00:e0:67:
         e4:65:dd:93:81:2f:d4:d8:29:a8:bc:40:f1:41:f3:ea:38:03:
         c4:ec:4f:de:31:ee:72:a6:dd:ae:e4:b1:73:1e:26:8c:8b:5f:
         5f:8b:12:5d:97:2f:3e:f4:f2:90:47:a3:be:2b:bb:f1:e4:7e:
         48:0e:6b:1e:2c:80:b9:07:53:79:c7:ad:23:ac:8b:a1:18:44:
         15:b6:c1:7e:29:86:09:c2:a9:cb:3f:1a:bd:57:65:ee:15:17:
         dd:82:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----