Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aa4615112d8399dc3bd46de888d635f5d5834806.roa
File:                     aa4615112d8399dc3bd46de888d635f5d5834806.roa (raw, json)
Hash identifier:          W/zvhG5JM3vIqYQ8UUjSn2Pcq2qIfyg/0dyBYXkaZAg=
Subject key identifier:   9E:FC:3F:29:E3:97:B6:28:31:54:97:FA:35:A5:75:3C:3D:91:9C:E2
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       11E2FA
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aa4615112d8399dc3bd46de888d635f5d5834806.roa
Signing time:             Sat 15 Apr 2023 08:30:05 +0000
ROA not before:           Fri 14 Apr 2023 08:30:05 +0000
ROA not after:            Sun 13 Apr 2025 08:30:05 +0000
asID:                     267878
IP address blocks:        45.175.148.0/22 maxlen: 22
                          2803:a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172218 (0x11e2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 14 08:30:05 2023 GMT
            Not After : Apr 13 08:30:05 2025 GMT
        Subject: CN=aa4615112d8399dc3bd46de888d635f5d5834806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:89:a8:c6:ed:03:d7:25:c6:e4:8d:99:30:
                    c9:00:84:98:ca:ec:53:74:75:c7:22:09:e2:69:fc:
                    f7:64:81:ab:6b:27:64:24:6a:3c:bd:d5:18:7c:f0:
                    3b:1e:24:3c:1a:4b:0b:50:ba:ae:31:21:2e:13:52:
                    8c:28:30:9f:46:3e:a0:96:37:97:85:6c:88:47:14:
                    d5:ca:93:43:b9:a2:b8:3c:35:a7:54:64:d4:8d:05:
                    8e:29:f9:92:f2:a4:61:bd:9a:b3:e9:eb:f2:9b:77:
                    d5:03:95:9e:cb:f2:e7:a6:d0:f2:48:84:61:31:ff:
                    72:35:58:1a:a8:ea:b2:95:db:aa:1b:77:89:d7:e4:
                    67:37:04:11:cb:a6:08:37:2b:f5:3a:a1:15:10:d5:
                    21:e7:99:80:fb:9e:76:23:13:03:b1:62:4d:35:4e:
                    1e:be:ec:5c:ed:0e:d3:a7:af:ea:77:4e:e3:e9:26:
                    b3:3a:e5:19:4c:fc:b5:0a:5a:01:b7:af:07:07:b3:
                    c1:c5:ed:f2:fd:19:ea:a5:00:8b:f5:15:b9:c0:b0:
                    e3:bc:67:08:10:9b:28:e3:1d:c3:93:cd:bb:23:88:
                    c7:da:22:d9:c0:d2:c4:99:3f:10:6c:3d:86:0c:23:
                    72:04:8c:73:fb:c2:cc:73:c8:c2:5e:21:7f:9f:70:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FC:3F:29:E3:97:B6:28:31:54:97:FA:35:A5:75:3C:3D:91:9C:E2
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/aa4615112d8399dc3bd46de888d635f5d5834806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.148.0/22
                IPv6:
                  2803:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:50:01:02:44:63:03:c4:03:02:68:40:73:fa:08:65:39:
         10:1c:61:91:e0:9d:99:0c:5e:f3:0f:67:3d:d2:1c:dd:45:94:
         4a:1f:af:08:04:5b:e6:62:15:f2:3b:6f:9d:fb:14:1d:1b:55:
         56:9f:c8:76:40:84:df:f5:59:9a:57:15:83:55:f3:95:ba:33:
         5b:a2:ad:e6:37:a6:a8:b3:22:a4:d7:e2:5a:26:1f:8d:89:c0:
         85:c0:64:fb:a9:15:aa:30:b4:19:5f:f6:30:68:3d:23:2a:df:
         8f:89:98:5c:19:ba:be:9a:34:df:42:23:02:21:1a:c9:74:44:
         e8:3b:7c:3f:1b:18:09:1b:0c:49:e1:b6:b5:6e:d4:b6:47:f6:
         e2:cd:a8:b5:bb:e1:cb:f9:19:b1:b2:be:56:7d:10:da:66:7a:
         7c:c8:7b:5a:5b:fe:dd:2b:79:e3:65:a5:5b:4b:f9:07:99:cf:
         9a:97:75:bc:ed:21:45:f3:a0:5d:4c:f6:f7:34:7a:e6:1f:8a:
         87:c6:f5:83:d1:a1:dd:44:a9:e7:14:d1:d2:c7:a2:ea:f0:81:
         90:07:88:3a:fb:8a:46:09:2e:0a:45:a7:15:d5:b2:27:41:d7:
         2e:ba:5d:c0:3f:e6:4a:4b:e3:96:45:c3:a7:34:44:51:17:d7:
         e2:b3:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----