Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/945a57841f6b413352af4f2d5c1b609979416c00.roa
File:                     945a57841f6b413352af4f2d5c1b609979416c00.roa (raw, json)
Hash identifier:          kDXi9xDwD9zKbBpODuyNoux+ALlfyLSUfRi1NlPAMxA=
Subject key identifier:   FB:C4:C5:11:82:5F:30:15:53:10:2A:C1:2D:2A:DA:67:B9:75:21:63
Certificate issuer:       /CN=2a3b95fe9d581b4e12edf0884b053a4b1728b654
Certificate serial:       0341
Authority key identifier: 60:88:E4:08:DE:AC:31:7B:2C:3D:1F:07:AD:A7:2D:F5:F1:80:9C:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a3b95fe9d581b4e12edf0884b053a4b1728b654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/945a57841f6b413352af4f2d5c1b609979416c00.roa
Signing time:             Tue 24 Jan 2023 18:24:11 +0000
ROA not before:           Mon 23 Jan 2023 18:04:20 +0000
ROA not after:            Fri 24 Jan 2025 18:04:20 +0000
asID:                     265561
IP address blocks:        45.167.92.0/22 maxlen: 24
                          2806:30f::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a3b95fe9d581b4e12edf0884b053a4b1728b654
        Validity
            Not Before: Jan 23 18:04:20 2023 GMT
            Not After : Jan 24 18:04:20 2025 GMT
        Subject: CN=945a57841f6b413352af4f2d5c1b609979416c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:6c:4f:31:73:c0:aa:96:55:8f:2b:9e:db:
                    ed:c7:0e:46:2d:93:3e:8d:d7:a0:1c:8c:2d:2a:eb:
                    2c:28:3f:b2:7c:78:c3:89:80:05:0a:4f:c4:64:1f:
                    3d:7d:9a:8d:42:7e:6c:cc:06:ff:a5:51:6d:34:e5:
                    e4:f0:9e:aa:ab:68:e5:3d:b7:0b:ee:4f:59:54:0a:
                    59:d2:42:42:6e:9d:74:64:70:18:b8:97:fd:f3:76:
                    90:b6:93:9e:94:89:25:45:0a:c2:98:06:6a:91:d9:
                    89:fd:b9:ec:35:70:84:22:6d:b4:16:8b:eb:d4:3d:
                    29:2b:62:c2:ec:10:7c:8d:bd:4d:dc:1a:9d:0c:3c:
                    68:fb:b2:07:69:af:a6:61:c5:f6:11:b3:6f:37:23:
                    8d:d2:12:aa:b4:d0:ff:10:ea:18:63:76:db:b7:f8:
                    58:43:22:24:6e:2d:59:c8:7b:d8:02:4c:e2:95:44:
                    d5:ac:be:b5:53:2f:09:c5:a8:ed:84:b7:4c:f8:81:
                    13:89:92:b6:3c:85:23:2f:d6:3b:d1:46:27:fe:e1:
                    d8:a7:be:53:60:96:71:33:6b:a4:c5:7c:06:c0:d8:
                    fc:7b:1f:67:f1:a5:d6:78:f6:50:53:fa:27:bb:95:
                    d9:da:fb:94:57:af:11:72:b4:41:b3:8a:4d:b8:f9:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C4:C5:11:82:5F:30:15:53:10:2A:C1:2D:2A:DA:67:B9:75:21:63
            X509v3 Authority Key Identifier:
                keyid:60:88:E4:08:DE:AC:31:7B:2C:3D:1F:07:AD:A7:2D:F5:F1:80:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a3b95fe9d581b4e12edf0884b053a4b1728b654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/945a57841f6b413352af4f2d5c1b609979416c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.92.0/22
                IPv6:
                  2806:30f::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:7f:16:c7:fd:26:d3:d7:5f:6c:c6:16:9a:bb:67:05:fc:
         ac:45:7a:b6:2a:40:ac:b2:91:28:53:2f:71:3b:29:9a:e7:4b:
         54:cd:e1:fb:88:4a:f6:ab:8d:3c:73:6b:90:ec:3a:95:9c:24:
         14:c8:f2:f7:b0:14:53:18:91:a2:6b:31:03:36:99:02:5b:08:
         a3:6b:02:85:be:3a:a7:22:00:27:98:4a:3d:2f:66:29:93:c6:
         cc:08:59:c9:41:4f:2b:bb:0f:16:08:9a:f4:93:bb:fe:f4:92:
         61:4a:ac:85:1b:65:ed:6e:bf:28:08:71:81:e3:e7:31:73:23:
         4b:e7:d8:d0:99:f4:54:5c:9e:02:10:6f:48:13:ce:5a:64:df:
         49:34:08:13:30:ff:22:91:f4:69:54:94:dc:be:31:94:b6:db:
         1d:7a:62:df:9d:aa:0e:f1:ab:ba:e0:58:39:a2:f7:aa:5c:66:
         8e:88:11:12:2d:0e:f0:8c:11:a3:70:43:d9:bf:b8:51:39:a2:
         51:7a:f6:a6:b3:a8:ee:80:8a:be:f0:d5:17:0a:b9:b7:d3:1d:
         78:aa:d0:fa:f3:17:d7:10:3f:3d:3b:7c:55:0c:ab:b1:8d:1d:
         cf:2c:44:b7:5a:99:e7:e3:ab:eb:32:f3:23:62:ee:16:93:3e:
         7f:50:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----