Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/62884e1e20f8e72125e788a289f949a6684cda22.roa
File:                     62884e1e20f8e72125e788a289f949a6684cda22.roa (raw, json)
Hash identifier:          GI6RIJyacuhRqv+wTIYgF58I8dVHoOX+EdpMOUykLPQ=
Subject key identifier:   08:D6:16:1D:E0:FD:AC:F9:0F:32:CA:13:06:1A:E8:D4:55:03:01:C4
Certificate issuer:       /CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
Certificate serial:       11DA0C
Authority key identifier: B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/62884e1e20f8e72125e788a289f949a6684cda22.roa
Signing time:             Wed 15 Nov 2023 07:30:01 +0000
ROA not before:           Wed 15 Nov 2023 07:30:01 +0000
ROA not after:            Fri 14 Nov 2025 07:30:01 +0000
asID:                     13959
IP address blocks:        45.7.44.0/22 maxlen: 24
                          2806:2e6::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169932 (0x11da0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
        Validity
            Not Before: Nov 15 07:30:01 2023 GMT
            Not After : Nov 14 07:30:01 2025 GMT
        Subject: CN=62884e1e20f8e72125e788a289f949a6684cda22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:b2:49:69:af:d4:8c:36:b0:72:5c:c5:58:
                    2d:91:01:84:ae:e5:3c:ef:2d:74:82:dc:cd:f8:b4:
                    a7:48:92:74:96:76:5b:57:2e:1a:15:cb:04:77:16:
                    85:f0:72:4d:c5:eb:db:20:2e:ff:1d:98:94:af:e3:
                    d8:bd:92:36:07:fd:17:db:b7:78:46:e7:82:ac:c4:
                    9d:36:98:e9:0e:c3:bc:62:9f:f8:e3:f1:54:ff:a9:
                    ed:b1:24:5d:3a:22:2c:fa:84:63:c3:18:b8:d7:3b:
                    91:9b:60:e1:1b:ae:fe:02:7c:a2:40:d2:30:cd:20:
                    dd:b7:b5:46:c9:13:11:5b:5d:d3:1f:25:2e:d1:ce:
                    20:54:22:99:64:f6:a0:e7:28:65:6d:c8:6f:b6:15:
                    7e:b9:73:f4:25:32:49:ca:d0:45:d4:af:3d:eb:fa:
                    e4:b7:a2:0b:b4:14:ea:59:2d:f0:02:d6:b3:5b:8d:
                    22:66:e5:da:08:97:ba:e4:41:e0:c1:6b:4e:a1:ef:
                    07:9c:7d:d3:db:0c:50:f1:9a:b7:ba:b3:fe:fd:92:
                    eb:ca:c5:80:2a:66:06:47:96:20:3c:c4:f9:13:d1:
                    8c:18:d1:33:c2:77:06:c6:4f:0c:81:a7:2f:3a:0f:
                    b4:e6:3c:93:19:2a:6b:7b:27:21:bb:9c:4f:17:dc:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:16:1D:E0:FD:AC:F9:0F:32:CA:13:06:1A:E8:D4:55:03:01:C4
            X509v3 Authority Key Identifier:
                keyid:B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/62884e1e20f8e72125e788a289f949a6684cda22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:be:f2:f8:ce:04:3e:a0:23:23:71:67:dd:b5:b1:79:2a:
         8e:f5:dd:91:2a:9e:0d:80:e3:9a:de:34:2c:39:cb:7f:79:d0:
         df:75:2f:7f:24:f0:bd:33:ea:b5:ed:c6:00:fe:6a:84:68:25:
         5a:ee:20:99:80:79:77:42:de:f3:69:65:8c:58:1b:db:6d:61:
         0c:6a:6d:c2:9e:46:d9:e0:c6:84:53:70:e5:8e:36:8e:c5:04:
         9a:fa:13:e9:93:90:d5:c5:b1:4e:43:69:0f:81:ba:eb:01:8c:
         af:06:1e:72:b1:7c:2c:3b:44:7f:5c:09:9e:73:a5:3c:b4:c9:
         8f:ba:d4:a3:b9:6e:45:e4:4e:96:20:b5:9b:10:a9:49:de:24:
         35:d8:11:79:8b:52:6c:c2:f9:73:e4:44:99:89:fa:87:a9:06:
         e5:cf:3a:cd:bc:68:18:e5:95:9a:2d:7c:55:c7:d3:2c:45:ea:
         3e:85:a9:52:03:f1:7f:37:4b:20:9c:19:b5:6c:ec:31:fe:94:
         c4:9e:13:1c:75:f7:06:5e:7b:30:79:44:3d:91:c9:4a:17:92:
         0c:81:a0:bc:67:56:27:a6:6c:61:ae:ab:19:84:9c:0f:f2:c1:
         ad:fb:48:bd:0f:8b:01:b6:e7:ba:87:b9:9e:9d:82:c0:b7:25:
         2b:6d:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----