Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/1a3f6664b8baa17b67f0fa4d14b7ad7de68224e9.roa
File:                     1a3f6664b8baa17b67f0fa4d14b7ad7de68224e9.roa (raw, json)
Hash identifier:          OaVLuTtfPMaeq5BAh9eFV1fbdhOSqORhDWJUzNrtreA=
Subject key identifier:   3E:2D:39:3E:80:8B:7E:7C:CF:0B:B6:60:13:FC:E4:AC:B2:DF:66:41
Certificate issuer:       /CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
Certificate serial:       0B71E1
Authority key identifier: B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/1a3f6664b8baa17b67f0fa4d14b7ad7de68224e9.roa
Signing time:             Wed 24 Mar 2021 14:29:06 +0000
ROA not before:           Wed 24 Mar 2021 14:29:05 +0000
ROA not after:            Tue 24 Mar 2026 14:29:05 +0000
asID:                     267864
IP address blocks:        45.176.88.0/22 maxlen: 24
                          2803:a260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750049 (0xb71e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85681cb3788741f37ae8f16dc7e84b962b71feb
        Validity
            Not Before: Mar 24 14:29:05 2021 GMT
            Not After : Mar 24 14:29:05 2026 GMT
        Subject: CN=1a3f6664b8baa17b67f0fa4d14b7ad7de68224e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:b2:55:85:ab:fa:f5:a2:ee:0d:27:70:e9:
                    80:17:f7:7c:c2:08:57:14:5f:62:9d:5e:f9:fd:ae:
                    fb:fb:85:3b:5d:61:3d:ce:89:05:2e:af:bd:20:2d:
                    6f:b8:a5:b9:a7:8a:70:12:ec:a3:c0:7a:e2:f8:a9:
                    2f:b4:5c:28:f6:93:fb:83:da:d5:a8:e7:c0:b7:c6:
                    71:77:db:0c:3c:70:e7:4b:70:82:39:2a:33:c8:74:
                    00:c5:f0:49:ab:ee:47:22:c6:1a:65:e2:3f:83:d3:
                    31:c6:ea:96:f8:29:0e:63:d1:7e:8f:b8:3e:d8:84:
                    8f:72:e3:8f:d0:4f:77:f7:9c:bd:82:3b:3f:4b:67:
                    4a:33:d1:3f:88:f8:d6:d1:35:7a:35:9a:81:36:1e:
                    b5:76:6f:f2:98:d9:62:e2:9e:12:86:22:ea:19:50:
                    28:f2:24:9e:1f:ed:8d:1b:c9:12:0e:f7:43:16:71:
                    52:2e:8a:33:25:61:61:fc:4d:be:6d:6b:fc:af:a6:
                    27:80:00:65:1b:65:c7:0d:07:ae:b7:dd:c9:4f:73:
                    94:a3:c4:71:ff:cd:64:eb:02:49:dc:63:91:c3:b0:
                    21:05:88:8e:a1:38:25:99:8b:20:5f:80:f3:5d:9b:
                    7a:0a:e8:e6:48:b4:85:bf:48:6c:93:53:f2:c1:0c:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:39:3E:80:8B:7E:7C:CF:0B:B6:60:13:FC:E4:AC:B2:DF:66:41
            X509v3 Authority Key Identifier:
                keyid:B6:B4:78:A9:EE:DF:4C:5C:18:C6:F3:B4:F7:E4:EA:71:7A:CA:44:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b85681cb3788741f37ae8f16dc7e84b962b71feb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/1a3f6664b8baa17b67f0fa4d14b7ad7de68224e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/029d1d3a-e4b0-481e-8e37-a328df2e040b/b85681cb3788741f37ae8f16dc7e84b962b71feb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.88.0/22
                IPv6:
                  2803:a260::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:e8:56:6d:fb:fd:42:e6:19:8f:87:05:fc:6b:44:ef:bc:63:
         dc:c5:79:02:32:94:00:e8:63:af:5a:c8:37:a9:50:55:86:1e:
         06:6f:15:69:73:46:17:8e:3b:9c:98:e8:e1:a9:57:39:f6:7e:
         a5:07:c6:62:da:b5:a4:d7:d7:67:e9:6d:e4:f1:01:d5:fe:00:
         82:91:f0:3d:d0:5c:c4:be:6a:a1:bb:bd:40:2d:c6:fd:21:e6:
         4c:2d:52:d4:48:dd:b6:41:62:79:d0:dd:da:bb:ee:7d:52:fd:
         f6:1e:5e:b3:40:93:08:a0:0f:d7:52:81:99:d7:10:72:2a:f8:
         d9:ca:fe:91:ac:6a:07:e9:0d:f2:4c:31:60:c1:45:7e:e3:ff:
         e5:61:56:f8:4d:67:22:fa:60:fb:8f:6d:ee:48:2f:0c:ae:31:
         c0:22:56:9d:79:9a:11:30:78:e5:2d:d0:94:ca:63:d1:d8:f4:
         a6:9e:a9:74:b8:fc:8d:e1:03:1d:0d:1c:50:46:2c:93:76:e8:
         f6:6f:88:e9:41:27:7b:8c:77:d2:e9:e2:19:fb:2b:82:00:7c:
         80:f0:06:a5:a8:cf:72:c5:a7:4e:03:50:4b:cd:b4:ee:a7:7e:
         4c:82:27:04:bc:2e:27:83:86:a5:be:c5:c8:59:92:11:ec:b0:
         ad:d9:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----