Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/988cdba95f6ea52be93d8411faefae7f82b6e71c.roa
File:                     988cdba95f6ea52be93d8411faefae7f82b6e71c.roa (raw, json)
Hash identifier:          nOtIUAtYBatiAhCBUBWZkuGw5/XTy698dAL6KRo1juU=
Subject key identifier:   FC:29:88:82:77:D6:C7:8F:C6:7E:B6:F6:9F:FE:94:34:35:76:7D:0A
Certificate issuer:       /CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
Certificate serial:       11D62D
Authority key identifier: B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/988cdba95f6ea52be93d8411faefae7f82b6e71c.roa
Signing time:             Wed 15 Nov 2023 07:30:00 +0000
ROA not before:           Wed 15 Nov 2023 07:30:00 +0000
ROA not after:            Fri 14 Nov 2025 07:30:00 +0000
asID:                     265534
IP address blocks:        45.7.44.0/22 maxlen: 24
                          2806:2e6::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168941 (0x11d62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
        Validity
            Not Before: Nov 15 07:30:00 2023 GMT
            Not After : Nov 14 07:30:00 2025 GMT
        Subject: CN=988cdba95f6ea52be93d8411faefae7f82b6e71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:47:13:cb:cb:10:79:16:29:80:84:81:54:
                    a5:d7:b5:99:df:38:8c:1c:28:13:6c:99:c4:05:19:
                    96:15:92:d9:5a:eb:44:6a:ae:1a:58:bc:ae:75:bd:
                    e8:93:21:b0:1b:7e:9f:e6:2e:a0:3d:28:cd:84:cc:
                    cc:10:14:35:9e:1f:9a:00:60:2d:29:10:7c:21:ba:
                    77:01:28:d0:77:f6:f9:3c:02:30:90:af:2c:f7:7d:
                    87:42:9d:20:5a:71:1c:e7:76:56:18:75:b7:c1:bd:
                    a0:b9:e0:2c:47:2d:4e:a7:13:22:63:51:2b:52:89:
                    0a:f5:37:14:4c:87:e9:85:6e:29:96:84:21:63:58:
                    48:f8:38:c9:ac:c4:e8:d4:1d:81:32:72:83:9d:2e:
                    44:21:2d:10:ca:01:e6:07:51:e5:24:57:a0:75:94:
                    e6:09:fe:92:28:67:81:5d:74:97:2f:9a:b3:95:3b:
                    e7:55:5c:32:65:58:5b:b7:98:7b:1d:ba:a7:89:65:
                    de:fa:ed:a9:27:86:e7:c8:3f:53:d9:9e:d6:54:5a:
                    01:28:84:f5:38:99:7f:65:d2:94:ad:91:36:1e:fb:
                    a9:75:49:5b:cc:8d:b9:68:d8:48:6c:45:ca:8c:7f:
                    74:7f:e8:d0:5c:5f:05:48:b0:0e:ef:a4:49:c7:d9:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:88:82:77:D6:C7:8F:C6:7E:B6:F6:9F:FE:94:34:35:76:7D:0A
            X509v3 Authority Key Identifier:
                keyid:B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/988cdba95f6ea52be93d8411faefae7f82b6e71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:e6:17:8a:72:79:2a:46:1b:8a:f6:fc:59:2c:32:14:3d:
         65:50:a9:6a:6e:3e:1d:9d:f8:49:65:8d:9c:73:51:2e:5e:56:
         ba:21:b5:d9:25:a4:29:34:79:1b:c8:11:93:9b:65:41:15:0b:
         e6:89:3e:d0:57:57:d6:98:d3:93:46:59:d5:df:14:5b:01:d8:
         fe:d5:22:91:85:2c:c1:7e:f9:57:29:ca:ae:41:fe:34:c5:7b:
         0c:d0:e9:fb:7e:9a:e7:91:ae:90:39:d9:97:79:bb:7b:81:2b:
         01:9f:19:a0:ed:5f:32:80:5e:1e:b1:4f:81:e9:6f:20:dd:0b:
         37:87:2e:48:98:a6:3b:f2:8b:1a:84:96:ae:0f:e7:7b:6b:58:
         66:58:08:90:17:10:62:70:7a:18:21:26:39:86:53:cd:33:bf:
         f2:a4:44:84:0f:af:39:d4:89:d6:cc:31:4a:71:b5:4d:a5:f1:
         94:ec:4c:d2:95:c5:35:c8:46:da:98:f2:74:a0:a2:a3:50:b2:
         57:77:c3:12:1d:a0:52:29:7f:d4:a0:bb:8d:d7:93:29:9d:90:
         b3:86:e7:46:c8:91:42:cd:de:6e:0c:e9:1c:c6:9d:f5:f7:a2:
         6b:5f:ec:83:40:ea:1c:66:2c:61:90:b1:fe:1b:6a:19:9d:78:
         9f:d6:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----