Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8f406004aacdecfadce5159606f66d97c2eb6221.roa
File:                     8f406004aacdecfadce5159606f66d97c2eb6221.roa (raw, json)
Hash identifier:          qpkkZPzlj7zQxvWupRc4kJ0Hj+EdWrbUqk/BA+Vlhcs=
Subject key identifier:   6A:37:4C:EB:65:65:02:F2:10:B9:7C:02:35:99:F2:7D:FD:59:DF:72
Certificate issuer:       /CN=47b26b4cc424b80b0e574677390a5e2698d3886d
Certificate serial:       DB
Authority key identifier: 2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8f406004aacdecfadce5159606f66d97c2eb6221.roa
Signing time:             Fri 11 Feb 2022 11:36:25 +0000
ROA not before:           Fri 11 Feb 2022 03:00:00 +0000
ROA not after:            Sun 11 Feb 2024 03:00:00 +0000
asID:                     265685
IP address blocks:        45.5.20.0/22 maxlen: 24
                          2803:11c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b26b4cc424b80b0e574677390a5e2698d3886d
        Validity
            Not Before: Feb 11 03:00:00 2022 GMT
            Not After : Feb 11 03:00:00 2024 GMT
        Subject: CN=8f406004aacdecfadce5159606f66d97c2eb6221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:32:dd:78:75:f3:83:24:a4:30:96:64:e4:
                    67:38:86:74:60:bf:0b:c3:cd:bd:e9:24:b7:16:9b:
                    2a:10:04:05:37:da:20:72:12:f7:81:cc:d7:05:40:
                    9b:b8:32:92:34:5b:ce:fb:d9:80:67:fa:ee:e4:74:
                    96:98:ff:da:7c:ef:7f:35:3f:74:c4:2f:5a:4f:9a:
                    6f:d5:f3:e9:0f:05:f9:ea:bb:b8:50:80:be:3e:4f:
                    61:47:6a:e3:aa:59:3b:8b:98:2b:12:32:64:8b:32:
                    da:80:63:4b:6c:d9:7b:9d:7b:4f:64:1b:2b:1a:05:
                    6b:53:c0:06:fe:91:b1:ca:ae:82:5f:d3:26:70:b8:
                    e0:10:74:55:0e:85:22:1a:62:94:61:00:22:21:d2:
                    c5:fc:ee:81:e0:e3:d8:74:2e:3b:56:b1:5d:e2:1f:
                    ea:88:b3:3e:16:40:61:5c:52:00:4e:26:da:b5:28:
                    59:ac:55:1e:44:56:f5:dc:81:8f:7d:98:25:e7:aa:
                    2c:e6:e7:d8:89:d4:14:56:54:51:a0:a5:e7:4c:94:
                    da:c7:f7:6e:90:73:01:eb:d2:be:f8:10:0f:5f:b9:
                    84:3d:cb:ce:0a:6d:ee:40:93:40:46:ca:b4:3d:fa:
                    25:20:b8:86:b9:f1:d9:99:ac:d0:9a:68:7b:ba:7d:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:4C:EB:65:65:02:F2:10:B9:7C:02:35:99:F2:7D:FD:59:DF:72
            X509v3 Authority Key Identifier:
                keyid:2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/8f406004aacdecfadce5159606f66d97c2eb6221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.20.0/22
                IPv6:
                  2803:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:16:12:e3:3b:0a:48:60:b6:c8:0a:3b:7b:eb:b8:61:d1:
         06:00:c0:fd:54:22:29:04:84:bb:9a:d5:ba:dc:54:53:f8:49:
         10:11:f4:20:23:6f:8c:b3:00:d2:5c:53:b8:d2:b3:67:87:2b:
         21:49:d0:86:2a:cf:96:f7:4c:64:10:d4:07:92:ac:99:b2:d8:
         74:89:3b:6a:95:b2:54:c4:da:be:90:3f:62:36:f3:ca:73:c1:
         19:73:3f:dd:b4:5f:8c:55:b5:ff:3b:41:c5:e5:86:ef:50:9e:
         bb:40:0f:3b:d8:be:83:6d:e2:36:a6:00:9d:17:67:c3:5d:8b:
         3c:62:a8:46:35:d6:33:4a:6f:1f:ba:91:f6:f3:dd:ad:a8:ff:
         ea:8e:06:65:ad:68:ef:f8:74:6e:79:ce:83:64:66:08:ff:5b:
         f9:3f:ca:e0:7c:ba:10:8e:64:01:c1:25:c4:46:ce:a7:9e:ca:
         48:7a:a0:9a:87:e6:0a:a6:e6:a4:0b:09:1d:35:b6:1c:79:d4:
         ee:da:29:43:4f:98:71:00:60:50:36:c5:db:76:3d:17:9d:6d:
         8f:f7:10:60:d8:8c:27:29:8a:85:60:fa:81:55:3e:90:6f:a5:
         3b:4d:26:03:64:3a:cb:fd:78:15:15:d2:06:ec:f3:3d:77:29:
         80:06:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----