Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8e1b6dcd92365b8ed1e9af0ad3c3728925715c19.roa
File:                     8e1b6dcd92365b8ed1e9af0ad3c3728925715c19.roa (raw, json)
Hash identifier:          i6/f4JVHSB2NUmlWu6ddmUfOa2oUdZj4C3U/Nl6pb+I=
Subject key identifier:   84:D1:31:9C:99:10:2E:6F:0F:07:EA:EA:95:F3:23:E2:55:7C:53:F3
Certificate issuer:       /CN=47b26b4cc424b80b0e574677390a5e2698d3886d
Certificate serial:       0E6ECD
Authority key identifier: 2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8e1b6dcd92365b8ed1e9af0ad3c3728925715c19.roa
Signing time:             Tue 26 Sep 2023 16:57:59 +0000
ROA not before:           Mon 25 Sep 2023 16:57:59 +0000
ROA not after:            Fri 26 Sep 2025 16:57:59 +0000
asID:                     265685
IP address blocks:        45.5.20.0/22 maxlen: 24
                          2803:11c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945869 (0xe6ecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b26b4cc424b80b0e574677390a5e2698d3886d
        Validity
            Not Before: Sep 25 16:57:59 2023 GMT
            Not After : Sep 26 16:57:59 2025 GMT
        Subject: CN=8e1b6dcd92365b8ed1e9af0ad3c3728925715c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:24:87:71:46:e6:4f:94:ed:04:e4:42:a9:
                    f0:c7:b3:99:f6:62:47:76:e9:99:34:5e:e4:cf:0b:
                    3d:0c:3e:1c:bb:f4:ac:dd:2f:3c:8e:c9:78:f8:3c:
                    5f:7e:cf:e9:ae:78:bb:d8:44:44:48:87:00:8f:ee:
                    db:be:4b:5d:a2:2e:3e:cb:92:84:cd:c3:73:3d:be:
                    39:41:16:e9:a7:a9:e6:5a:a7:7d:d6:f7:ca:16:4b:
                    f3:10:a0:64:b0:84:f0:51:2b:8f:68:7e:c8:61:ea:
                    ba:8c:fe:be:7c:a5:67:9e:31:65:a7:2c:a5:ee:12:
                    4d:f9:75:22:95:33:cf:89:fe:24:ee:21:41:d1:d5:
                    22:44:75:db:11:a4:db:75:c8:b7:fc:c5:17:16:c5:
                    1e:15:e8:79:aa:c0:9f:11:3d:70:91:6a:f5:5c:ed:
                    cd:64:8b:a8:92:24:26:37:97:ba:60:1c:72:e5:69:
                    c7:f7:3d:81:6a:13:3f:4a:17:01:9a:06:f0:3c:61:
                    b6:b8:9e:2e:a4:20:43:7a:96:ca:74:ed:82:01:b3:
                    c8:9c:fa:a6:0c:0a:50:ea:74:79:c5:8e:54:f6:d8:
                    17:8e:e3:94:dc:1c:f4:e9:ac:4f:2a:10:32:92:33:
                    90:b8:73:d4:a3:06:c7:43:76:6b:81:d8:d8:7f:0a:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D1:31:9C:99:10:2E:6F:0F:07:EA:EA:95:F3:23:E2:55:7C:53:F3
            X509v3 Authority Key Identifier:
                keyid:2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8e1b6dcd92365b8ed1e9af0ad3c3728925715c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.20.0/22
                IPv6:
                  2803:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:ca:0d:56:88:e2:87:38:46:b5:0b:31:d5:87:20:be:ba:
         25:41:60:33:d3:7f:a8:db:9f:b8:9b:90:b7:e4:c1:97:5a:7d:
         b9:b1:ba:17:c3:71:b8:58:35:45:ec:8d:05:a4:15:c5:c0:f7:
         f1:8e:15:81:66:5c:91:11:40:74:92:71:ff:21:db:91:78:f6:
         7c:8f:db:84:41:6c:10:d5:b6:71:b7:42:3d:15:0e:ca:a1:0b:
         b5:b9:f8:25:4e:75:bd:73:91:10:0a:c5:75:08:b3:79:d4:a5:
         8e:ad:f5:a2:05:c8:e3:2f:22:81:dc:32:69:42:70:df:87:8f:
         fc:d2:0a:34:d2:f8:b2:dc:b9:fc:16:a7:1f:df:e9:b0:22:0e:
         5e:1d:66:d1:47:7b:c9:69:f7:cb:7c:3a:43:2e:ac:f7:30:2a:
         a2:a2:f2:e3:0d:53:0d:e3:50:ca:46:15:4b:e6:f6:39:02:3b:
         45:34:51:66:8e:1d:39:27:20:09:35:4a:e0:7c:32:d0:7f:b6:
         6e:0b:2f:b0:99:a8:3c:58:b3:e6:9f:0a:74:73:35:2c:6a:eb:
         c3:70:5a:37:ed:8a:4c:aa:a8:3e:48:ad:35:21:a4:76:d4:7d:
         8f:ea:e9:0b:06:b0:6f:b9:8a:31:d0:0f:73:c7:42:bf:a8:25:
         98:e0:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----