Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/178da3e17eefee883865105f1b6f8b57750f74e3.roa
File:                     178da3e17eefee883865105f1b6f8b57750f74e3.roa (raw, json)
Hash identifier:          X9dsYEnOqcY5cyhHo/tdHtXngRZoc8f2LnkEHyy9rI4=
Subject key identifier:   20:A7:55:D5:A6:8E:14:85:D4:F9:2F:70:93:4F:6B:E7:5D:B9:3C:9B
Certificate issuer:       /CN=02637184c65b6a55bd4665deedb92b07fdd73f0b
Certificate serial:       0F27
Authority key identifier: 0E:3B:71:CE:87:2D:5C:01:D5:74:E2:7B:6D:FF:35:48:02:70:71:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02637184c65b6a55bd4665deedb92b07fdd73f0b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/178da3e17eefee883865105f1b6f8b57750f74e3.roa
Signing time:             Thu 21 Jul 2022 20:35:50 +0000
ROA not before:           Thu 21 Jul 2022 03:00:00 +0000
ROA not after:            Sun 21 Jul 2024 03:00:00 +0000
asID:                     267730
IP address blocks:        45.166.176.0/22 maxlen: 24
                          45.166.176.0/24 maxlen: 24
                          45.166.177.0/24 maxlen: 24
                          45.166.178.0/24 maxlen: 24
                          45.166.179.0/24 maxlen: 24
                          2803:65a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3879 (0xf27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02637184c65b6a55bd4665deedb92b07fdd73f0b
        Validity
            Not Before: Jul 21 03:00:00 2022 GMT
            Not After : Jul 21 03:00:00 2024 GMT
        Subject: CN=178da3e17eefee883865105f1b6f8b57750f74e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:33:02:a3:e8:e6:b6:ef:63:65:69:bb:ec:f1:
                    f8:51:6e:c5:6e:e5:53:fb:e0:6d:45:49:00:86:3b:
                    df:29:f6:42:f0:6d:cf:0b:f4:e3:cf:8b:31:08:6a:
                    f8:32:e0:fe:7a:de:6b:f6:f1:84:30:d8:a0:1d:3d:
                    bc:b7:dc:40:72:b0:70:0a:69:ce:45:d9:88:45:66:
                    a1:78:fa:99:8a:da:06:bb:dd:77:c8:5d:e3:07:07:
                    80:fd:e3:6e:75:d4:2f:b9:62:87:33:34:39:2f:26:
                    8d:be:b1:af:fb:a6:ab:70:cf:3a:01:b2:a8:4d:8f:
                    23:44:bc:bd:ca:58:16:f2:bb:40:86:87:65:9d:f2:
                    c8:ed:21:30:15:cb:06:63:fd:63:7c:0e:b0:c5:1d:
                    30:c3:e5:67:8f:8d:99:7d:af:8a:ec:b9:3e:45:d0:
                    5e:31:f6:64:4b:f7:51:c5:e0:5b:94:4b:1f:ab:2b:
                    76:41:9d:4f:34:37:25:38:a7:ff:26:09:b1:3b:6f:
                    a2:2b:67:13:7a:07:50:c2:10:91:c2:ea:f6:8d:da:
                    13:19:8e:14:57:b7:ce:b7:e1:20:6c:11:b5:d9:8a:
                    45:ee:fb:fa:03:a8:fe:aa:64:b3:31:c0:40:a2:e6:
                    f5:c0:6b:ee:99:0c:65:6e:35:4a:94:7b:2e:8e:03:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A7:55:D5:A6:8E:14:85:D4:F9:2F:70:93:4F:6B:E7:5D:B9:3C:9B
            X509v3 Authority Key Identifier:
                keyid:0E:3B:71:CE:87:2D:5C:01:D5:74:E2:7B:6D:FF:35:48:02:70:71:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02637184c65b6a55bd4665deedb92b07fdd73f0b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/178da3e17eefee883865105f1b6f8b57750f74e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f86d1d4c-ff52-40b5-8e79-06dd3c7ca26b/02637184c65b6a55bd4665deedb92b07fdd73f0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.176.0/22
                IPv6:
                  2803:65a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:87:1f:3c:bd:88:44:9e:32:de:98:c6:23:7a:bc:44:a0:
         2c:00:21:47:13:f1:b9:22:d7:57:c9:18:45:33:cb:57:bb:a0:
         55:bc:ee:33:39:71:69:ae:a7:f7:6e:8d:3b:d1:bd:3d:33:b3:
         75:49:bc:b4:39:15:52:57:9c:ca:8d:85:9c:35:e8:3f:2a:1d:
         e2:b4:64:48:21:10:ad:e9:ca:6f:73:9a:9e:38:4d:55:a7:2f:
         ce:92:e1:50:82:e7:10:82:72:69:55:2f:76:aa:94:07:d7:eb:
         f5:b9:c3:46:04:f5:05:11:3d:91:dc:b9:ea:c7:cf:85:16:0d:
         59:81:1b:e9:9c:43:89:f9:aa:d6:9f:ba:d6:cb:24:82:52:b0:
         5f:c0:96:81:0f:7d:4a:ed:bd:0e:c8:f0:10:a6:82:be:41:90:
         d7:85:a0:eb:56:a5:c9:be:d4:cd:ee:3d:64:84:ad:40:af:cc:
         eb:0b:18:6c:26:19:bb:c9:6a:bf:4a:b5:bc:79:0a:73:61:1c:
         fa:9e:6c:19:53:27:d9:17:e6:9a:2c:6c:0b:e8:b4:b7:ca:e9:
         ff:e4:fe:58:7f:93:fb:a6:60:78:04:b3:e3:ab:b5:a4:19:7d:
         02:e4:a3:e9:6b:39:19:c0:b5:93:b7:c7:c5:c3:4c:11:06:3a:
         93:cb:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----