Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/473e126b-45d6-4785-9bc6-f7437f1f637c/9e7ed0a00fcd348991680b154218a66dd0b252f3.roa
File:                     9e7ed0a00fcd348991680b154218a66dd0b252f3.roa (raw, json)
Hash identifier:          20SE3DbHJ/zcmMxTLGpYgBS5U1aJl6BNRf+p8jlrHd8=
Subject key identifier:   9F:63:21:5C:42:6A:FD:A4:4D:2E:3E:4E:D5:F6:74:A5:AE:38:90:E0
Certificate issuer:       /CN=47b169168504066b45fb3d95e38873f8d24a35e5
Certificate serial:       0C8EC0
Authority key identifier: 00:F9:06:74:89:AB:BF:CC:A1:F0:44:E9:27:15:82:C2:24:0F:F0:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b169168504066b45fb3d95e38873f8d24a35e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/473e126b-45d6-4785-9bc6-f7437f1f637c/9e7ed0a00fcd348991680b154218a66dd0b252f3.roa
Signing time:             Wed 24 Mar 2021 14:30:03 +0000
ROA not before:           Wed 24 Mar 2021 14:30:03 +0000
ROA not after:            Tue 24 Mar 2026 14:30:03 +0000
asID:                     266897
IP address blocks:        45.161.172.0/22 maxlen: 24
                          2803:d6a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822976 (0xc8ec0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b169168504066b45fb3d95e38873f8d24a35e5
        Validity
            Not Before: Mar 24 14:30:03 2021 GMT
            Not After : Mar 24 14:30:03 2026 GMT
        Subject: CN=9e7ed0a00fcd348991680b154218a66dd0b252f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:59:8d:14:4a:68:64:d6:f8:60:de:cd:7e:
                    8d:c6:1d:27:b4:80:2b:51:d4:df:c9:1d:bc:22:66:
                    a9:b7:b4:52:92:72:4e:54:8b:ad:ba:85:af:68:49:
                    bf:f6:f0:ce:42:fd:21:21:d9:5c:7f:aa:86:ee:84:
                    28:81:3d:a1:c7:f1:70:72:4a:62:6d:c9:8d:bd:57:
                    eb:45:63:ec:2a:3b:9b:af:18:0a:2d:a6:70:35:bb:
                    ab:cf:48:26:eb:75:15:e9:1d:10:87:59:85:b4:68:
                    87:fd:b8:b5:08:ce:00:33:c6:4d:16:6a:01:3c:bb:
                    0f:21:0d:11:56:e2:f4:6a:d4:8b:2d:a0:a4:7e:1c:
                    6f:65:1f:cf:65:ac:21:c4:5f:40:3d:61:6e:d5:d8:
                    f3:48:75:98:94:6a:d9:36:12:f7:33:b6:14:78:2c:
                    fe:cc:95:00:7a:fd:49:53:27:44:4d:17:23:69:b5:
                    69:2c:b7:35:4e:14:9b:b3:87:47:db:ff:d1:bf:64:
                    13:d3:56:cd:39:a1:40:0f:2e:36:9b:ba:2b:8e:e4:
                    b0:2f:bc:5c:1a:a9:10:3e:5e:ee:c9:7b:a6:8c:9c:
                    3b:98:46:0e:55:7e:cd:ef:c7:2c:1e:22:a5:df:dc:
                    c9:38:82:60:86:e0:b2:b6:31:f0:13:2f:b2:aa:17:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:21:5C:42:6A:FD:A4:4D:2E:3E:4E:D5:F6:74:A5:AE:38:90:E0
            X509v3 Authority Key Identifier:
                keyid:00:F9:06:74:89:AB:BF:CC:A1:F0:44:E9:27:15:82:C2:24:0F:F0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b169168504066b45fb3d95e38873f8d24a35e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/473e126b-45d6-4785-9bc6-f7437f1f637c/9e7ed0a00fcd348991680b154218a66dd0b252f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/473e126b-45d6-4785-9bc6-f7437f1f637c/47b169168504066b45fb3d95e38873f8d24a35e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.172.0/22
                IPv6:
                  2803:d6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:f0:e2:6b:5a:ac:30:4a:5f:a2:dd:ac:43:e4:e0:cd:0d:
         08:41:e8:2f:91:ab:0c:f5:78:2a:65:bf:35:87:51:24:12:dd:
         38:d2:37:a5:41:5e:ae:34:e5:24:89:5c:06:94:93:f8:9a:8e:
         df:d1:74:df:34:5d:04:b9:bd:80:ae:08:ac:02:9c:9f:08:f4:
         0a:40:4a:3b:7d:5c:d8:5f:46:ec:22:6f:6a:97:86:ee:b1:03:
         16:f0:51:f7:1b:0f:14:c2:0d:6b:d8:94:30:9d:41:d3:58:02:
         55:be:c4:91:f5:39:50:ae:f6:40:15:c2:b0:1b:bb:d6:5c:33:
         4d:e4:66:0c:a7:4a:3e:35:f4:1f:15:f8:63:43:19:36:77:63:
         fe:d0:31:11:41:aa:6a:a4:9e:c2:2f:12:f1:7f:31:4d:f4:dc:
         2c:6a:cc:03:9f:5a:05:38:ed:4b:fa:ef:ec:64:2d:43:8c:36:
         d0:96:01:a7:19:0b:9f:00:33:e7:bb:8d:33:e8:1f:2f:ce:ff:
         a5:2e:ed:78:74:9d:c3:20:97:0e:7c:76:8f:b4:78:0c:37:73:
         9b:07:57:67:8d:f5:e4:48:c0:eb:66:35:f1:50:e8:9b:35:02:
         16:a4:f7:ce:7b:38:71:a5:03:9f:2a:8d:24:cd:f3:40:51:51:
         9f:a2:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----