Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/f45c0e3af95c581919fe1fe869f2d81d7358d840.roa
File:                     f45c0e3af95c581919fe1fe869f2d81d7358d840.roa (raw, json)
Hash identifier:          fWEWvNPLTTBbAQ/SsQprs9CLFIDTl/zP6nAnYye5ngU=
Subject key identifier:   7E:DA:80:1B:9B:83:E0:CA:AA:C3:52:4E:0D:48:CE:B4:E6:1F:40:EC
Certificate issuer:       /CN=b7e4d19c57f9e363d6970c924c1351eca876c872
Certificate serial:       1B27E2
Authority key identifier: C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/f45c0e3af95c581919fe1fe869f2d81d7358d840.roa
Signing time:             Fri 07 Oct 2022 17:01:21 +0000
ROA not before:           Wed 24 Mar 2021 14:37:15 +0000
ROA not after:            Tue 24 Mar 2026 14:37:15 +0000
asID:                     263762
IP address blocks:        200.5.48.0/20 maxlen: 24
                          2803:5180::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779682 (0x1b27e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4d19c57f9e363d6970c924c1351eca876c872
        Validity
            Not Before: Mar 24 14:37:15 2021 GMT
            Not After : Mar 24 14:37:15 2026 GMT
        Subject: CN=f45c0e3af95c581919fe1fe869f2d81d7358d840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:46:00:12:e3:5e:2b:a1:20:58:1b:3a:b6:4c:
                    87:b9:48:a5:04:65:63:8a:ca:be:d0:e9:af:e3:6f:
                    7d:c2:75:85:76:dd:ea:2f:fa:b4:a4:6d:2b:29:3e:
                    06:00:43:c8:84:3e:5d:e1:96:4a:10:42:cf:db:5e:
                    59:88:fe:88:73:d0:fd:aa:48:9b:10:20:e4:3e:b1:
                    e1:5c:fe:d7:93:0e:70:24:55:fe:91:fd:ad:73:cf:
                    d3:36:4a:83:5a:c9:6c:e6:82:6e:ab:2b:77:a1:a4:
                    b7:51:83:cb:fe:db:fc:3d:ec:af:ad:55:b0:2d:1b:
                    ab:a7:e4:69:31:5e:d2:4e:ae:68:2c:2c:a5:3b:24:
                    6e:cb:5f:99:c5:20:26:6c:32:b7:87:02:d0:44:30:
                    02:9c:35:4c:7d:b4:cc:68:4f:2b:ca:93:46:6e:3c:
                    61:7b:94:90:d0:b0:2c:e3:f6:f0:f5:4d:91:f6:fe:
                    a2:b6:f4:9a:21:e7:d1:49:0d:7d:5d:37:fd:db:30:
                    09:6e:dd:e4:45:11:bd:4b:85:1b:88:df:7f:72:71:
                    a6:c9:53:57:8a:2f:d9:d8:de:dc:ea:90:ef:11:7e:
                    87:94:56:bf:e2:43:4c:27:32:c3:88:dc:85:43:7f:
                    d6:ed:a4:18:23:ee:21:77:af:75:e4:70:27:9f:3f:
                    d6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DA:80:1B:9B:83:E0:CA:AA:C3:52:4E:0D:48:CE:B4:E6:1F:40:EC
            X509v3 Authority Key Identifier:
                keyid:C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/f45c0e3af95c581919fe1fe869f2d81d7358d840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/b7e4d19c57f9e363d6970c924c1351eca876c872.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.48.0/20
                IPv6:
                  2803:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:db:74:5c:09:2a:25:25:fb:15:dc:29:ed:79:66:99:30:
         83:c0:a0:c2:00:3d:14:9f:d3:46:d6:16:ba:32:e6:26:7e:88:
         6b:d3:7d:56:45:9b:fe:2e:9a:74:3d:40:f9:d9:20:f4:22:0e:
         0a:b7:88:ef:3c:8d:ea:4b:50:87:21:b6:8d:3f:ff:92:e8:6f:
         75:94:bc:8c:93:26:d4:24:db:9b:48:16:87:d9:ad:d5:58:b8:
         a0:a5:60:8f:90:26:e7:bf:62:d4:b5:4d:66:68:92:b8:cc:b5:
         1a:a1:e6:d9:a2:cc:73:39:30:94:bf:de:12:56:42:fd:9f:50:
         1c:f2:a7:0e:3c:a7:49:34:b3:b1:1a:9e:dd:54:79:34:7a:fc:
         1f:1b:2c:93:3e:4a:ce:e4:ec:9f:7f:fb:c8:c0:f3:01:64:e6:
         19:71:7a:2f:99:ee:0a:50:f0:b7:ab:83:e6:ba:f1:e2:6a:e3:
         af:d9:da:1d:10:1e:a2:11:77:38:71:c8:01:da:0a:c1:31:8c:
         96:16:a2:25:6f:0d:0c:fb:6b:da:8f:3b:52:58:3e:c3:c7:f8:
         bb:df:53:c0:e3:83:15:5c:39:f3:0f:2d:c0:0f:6f:ec:2f:da:
         42:e3:87:ff:de:53:b5:f4:37:9a:2d:e3:4a:4b:8e:da:df:2f:
         3d:d3:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----