Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/3144ec39968e7ce7b58aafdb4c143d5908e5f467.roa
File:                     3144ec39968e7ce7b58aafdb4c143d5908e5f467.roa (raw, json)
Hash identifier:          YfsXBeNr4BZnAW+6KcFl4crdaD8zpG5FajM9cMD6sfY=
Subject key identifier:   12:42:CA:E8:72:BD:D4:18:14:A7:79:F3:3D:B0:93:C5:E1:E5:BE:28
Certificate issuer:       /CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
Certificate serial:       02DE39
Authority key identifier: F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/3144ec39968e7ce7b58aafdb4c143d5908e5f467.roa
Signing time:             Wed 24 Mar 2021 14:43:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:12 +0000
ROA not after:            Tue 24 Mar 2026 14:43:12 +0000
asID:                     10310
IP address blocks:        45.181.42.0/28 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187961 (0x2de39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
        Validity
            Not Before: Mar 24 14:43:12 2021 GMT
            Not After : Mar 24 14:43:12 2026 GMT
        Subject: CN=3144ec39968e7ce7b58aafdb4c143d5908e5f467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:f3:b6:7f:00:47:47:02:36:7c:d2:c1:10:
                    3a:3a:06:f2:c1:76:c4:05:21:f7:1d:80:2e:b1:80:
                    0f:bf:a6:c3:6a:83:6c:79:9d:5f:34:d0:73:50:ba:
                    e1:b4:72:d4:67:5a:ac:43:4d:66:48:0e:b4:19:9f:
                    c0:93:3f:76:d4:44:b4:ef:38:a3:ef:22:46:f8:d5:
                    5e:f3:69:c2:2f:75:0a:68:37:d2:53:86:42:64:f3:
                    79:4b:61:02:74:5a:ae:10:48:f6:84:65:f2:24:5e:
                    8e:56:74:dc:a9:19:4c:7f:30:0a:e3:19:8e:2d:8f:
                    f8:e4:39:1c:12:6a:b6:93:89:c2:ab:9c:e8:fc:d0:
                    b8:a2:10:f2:1d:58:c4:d0:e5:75:d1:ad:bd:56:12:
                    85:f3:0a:b5:53:43:c5:f0:bc:47:65:60:19:42:33:
                    91:95:d4:3c:36:70:24:b5:14:44:32:4d:b4:da:5c:
                    82:cb:f1:65:89:a4:ac:3e:1f:4b:2c:44:04:34:7c:
                    26:0b:50:a1:1c:61:50:e8:b7:e6:0b:80:fd:98:31:
                    b2:31:b3:8c:49:a2:bb:d1:2f:2a:c1:55:96:62:be:
                    ca:f9:2e:fd:49:85:43:95:52:8f:c8:23:a7:60:09:
                    92:1d:5b:07:4a:8f:40:ab:ab:2b:f0:20:4d:3d:3c:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:CA:E8:72:BD:D4:18:14:A7:79:F3:3D:B0:93:C5:E1:E5:BE:28
            X509v3 Authority Key Identifier:
                keyid:F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/3144ec39968e7ce7b58aafdb4c143d5908e5f467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.42.0/28

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:ed:31:32:cc:25:c8:54:69:23:71:30:78:76:8b:4a:ca:
         91:a1:77:df:c0:e2:d5:05:3b:1f:c9:7c:7e:00:f0:2f:5c:52:
         5b:b1:7f:50:26:bd:9b:a0:aa:02:9d:af:8c:21:34:3d:fd:18:
         6d:ea:f6:ff:83:e2:76:a4:d5:05:09:98:ab:43:15:0f:7d:a6:
         92:45:f5:be:ce:5d:3c:5f:8f:71:64:53:e4:d6:f4:f6:3c:6f:
         e0:41:ee:fa:2c:31:a3:c8:a7:ea:1a:99:5b:77:91:e6:b5:59:
         c8:0c:7a:9a:ba:c8:6f:9f:a5:b2:54:03:59:18:1f:1d:1c:00:
         9a:28:00:a1:a8:ce:9d:fa:e3:db:51:fe:4a:4a:2b:30:5a:6d:
         e9:6a:b2:cd:3b:a4:0b:2e:cc:1a:69:70:06:37:9f:08:74:3b:
         50:4b:6e:ba:e2:98:50:ce:68:00:00:43:71:b5:1c:a9:a1:12:
         f1:df:87:11:d2:1f:8b:8c:69:5b:00:0f:b6:a7:d5:45:6a:27:
         56:74:fc:8c:82:a5:fd:44:1c:fc:77:84:71:4c:24:1b:a7:2f:
         49:f2:5d:1c:74:c6:35:66:8b:3e:29:e7:33:eb:0d:69:03:45:
         0f:0d:b4:eb:ab:56:f6:a6:d5:d4:5a:01:d9:ec:94:15:bf:16:
         7d:68:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----