Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa
File:                     41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa (raw, json)
Hash identifier:          zDawiHTGM+D/kgV6xDx6y4eydWA5+f852PRb9VBJVRo=
Subject key identifier:   75:BC:CA:37:01:17:BE:C9:98:89:94:A5:F6:E4:C2:89:FC:F5:95:30
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       132965
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa
Signing time:             Tue 05 Apr 2022 14:52:30 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Thu 05 Apr 2029 03:00:00 +0000
asID:                     269910
IP address blocks:        45.191.84.0/22 maxlen: 24
                          2803:ece0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255781 (0x132965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2029 GMT
        Subject: CN=41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:a9:d0:1f:49:f3:0a:e2:ac:e0:ba:7d:9e:
                    9d:17:66:94:e5:4b:fa:b5:36:3b:5c:e2:cc:b1:d0:
                    0a:3b:52:bf:a9:fc:36:92:cf:e8:e9:c4:14:4e:43:
                    ed:fd:a3:54:fd:b2:36:fb:47:82:0b:2b:ac:b2:84:
                    76:4c:57:b9:97:28:6c:67:36:31:13:08:d9:0c:22:
                    03:7a:1d:28:37:1d:9b:98:d5:d8:11:53:70:48:89:
                    ac:80:cb:9c:4e:6d:5b:c0:28:97:cb:72:d3:a0:28:
                    d9:91:c0:69:0a:ca:ea:1d:4a:1a:0a:64:0c:0f:d3:
                    57:f2:f7:c1:41:ff:e6:aa:46:df:c3:b0:53:ee:d4:
                    cc:68:9e:36:d9:46:c6:02:ad:dd:53:f0:e3:a9:93:
                    8c:26:b8:e7:b9:cb:02:72:8c:2b:3c:31:01:fc:a5:
                    39:cd:d4:0e:40:a3:81:81:da:ea:de:69:9b:be:49:
                    30:73:15:8f:8e:79:37:10:94:90:ba:7f:af:c3:e9:
                    0e:96:84:61:f3:cc:fa:00:11:16:76:0f:8c:ae:b2:
                    4b:df:e0:56:d5:15:d4:2e:cc:5c:59:5d:64:cf:2b:
                    70:87:5d:33:89:47:8a:2c:14:95:64:fa:bb:8a:1d:
                    b7:d2:bd:49:0e:87:97:e7:3c:1f:00:52:79:fa:cc:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BC:CA:37:01:17:BE:C9:98:89:94:A5:F6:E4:C2:89:FC:F5:95:30
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/41e704d4ac48dbf8aa2e07803ddff30a8a4f0fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:45:14:88:90:ca:07:e9:c2:f6:ba:56:3a:53:8a:82:ba:64:
         5f:2e:16:69:fe:4d:4e:4f:76:e4:b4:cb:42:0b:56:ea:20:4e:
         a0:ab:55:42:5c:73:b2:82:76:fb:c6:38:c1:1c:51:95:74:ec:
         d8:d4:3e:8b:be:c0:c6:4c:83:9a:22:8e:e2:a4:ea:ad:7a:88:
         f4:b4:26:8a:85:68:ed:b5:f8:a5:47:7f:ac:37:05:92:b6:34:
         af:ec:e2:1b:1e:5c:a6:89:04:ba:7e:c3:ae:34:9b:55:68:e6:
         b5:5f:91:0d:fe:99:0d:33:ba:90:00:11:ad:25:3a:23:7c:b0:
         d7:74:be:58:cb:ea:65:9e:7a:a8:2d:9f:9a:ab:3a:5f:de:49:
         f2:65:4b:6f:f5:77:25:e5:2b:28:67:d0:3c:30:3a:46:71:88:
         94:74:50:ab:63:40:c7:90:b6:76:87:2c:10:82:f2:4b:d3:0a:
         e6:7d:d8:ab:37:35:28:e8:8a:d9:ae:03:33:d1:c1:90:60:1b:
         e7:47:c5:be:b2:8f:a9:8c:65:6b:17:3d:83:63:c2:e4:19:da:
         3c:cb:50:f1:e4:93:ba:d6:9c:b9:60:a5:f6:95:c7:b6:ad:91:
         ac:6d:73:98:0b:a4:55:0d:8c:c2:f4:7c:8d:bf:58:07:70:5a:
         a6:d1:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----