Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/33a08d09db5d79dee9d956764c9e938ed8d930cb.roa
File:                     33a08d09db5d79dee9d956764c9e938ed8d930cb.roa (raw, json)
Hash identifier:          aytoqtXLBpcBFDLV8cDgjnD5iWB3q+KlOYvIvjIm1B4=
Subject key identifier:   CC:4F:E4:7C:DA:AC:C3:4C:9B:08:CE:48:F3:6D:A6:05:85:CB:AD:EB
Certificate issuer:       /CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
Certificate serial:       02DCE2
Authority key identifier: F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/33a08d09db5d79dee9d956764c9e938ed8d930cb.roa
Signing time:             Wed 24 Mar 2021 14:43:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:12 +0000
ROA not after:            Tue 24 Mar 2026 14:43:12 +0000
asID:                     265584
IP address blocks:        45.181.42.0/28 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187618 (0x2dce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
        Validity
            Not Before: Mar 24 14:43:12 2021 GMT
            Not After : Mar 24 14:43:12 2026 GMT
        Subject: CN=33a08d09db5d79dee9d956764c9e938ed8d930cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:60:ef:6d:f7:e5:e5:64:d9:e7:53:f3:31:9e:
                    d0:6b:b6:f7:c3:63:1b:3f:06:3b:8c:ee:26:35:a1:
                    5c:01:01:57:75:d0:34:3f:f6:7f:ac:e0:b3:f2:6c:
                    61:d9:75:4b:52:fa:c4:51:c3:da:c5:84:1c:1c:76:
                    8f:a9:d6:bc:16:76:cb:1e:c4:54:23:7f:51:99:10:
                    01:1e:f3:33:8e:39:34:d3:71:66:a2:f2:d3:91:6d:
                    38:c2:c0:c4:d2:45:42:15:85:b8:38:1a:7c:f4:ba:
                    8a:98:5e:8c:2d:8b:4d:52:47:9d:ee:3d:89:1f:58:
                    6a:1f:2a:92:f5:cb:e7:b3:a8:38:03:bf:fc:51:87:
                    1a:fc:c9:6b:7b:b6:95:f5:d9:74:41:5f:ea:55:d0:
                    51:35:5d:62:e9:4d:5c:f6:c5:bd:a7:d2:6c:d8:82:
                    35:07:29:72:31:74:1d:15:be:06:dc:16:41:81:6b:
                    77:40:24:52:3f:3e:2e:bc:4f:de:e7:93:2e:10:30:
                    a3:07:21:0f:0a:9d:20:67:dd:d2:86:a2:7a:f8:7c:
                    77:ed:a4:f9:71:64:50:22:9d:5d:0e:72:63:f8:80:
                    70:79:8b:9b:4f:5e:35:51:1f:1b:be:a8:dc:55:42:
                    49:e5:00:ad:43:eb:70:16:07:54:22:07:b9:4a:b8:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:E4:7C:DA:AC:C3:4C:9B:08:CE:48:F3:6D:A6:05:85:CB:AD:EB
            X509v3 Authority Key Identifier:
                keyid:F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/33a08d09db5d79dee9d956764c9e938ed8d930cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.42.0/28

    Signature Algorithm: sha256WithRSAEncryption
         ca:dd:89:2e:c9:f7:7c:23:27:0a:10:6d:14:6f:70:37:06:16:
         03:c2:f8:6c:52:9d:c9:31:7e:c4:79:96:fd:37:9e:a1:f4:1f:
         64:54:30:ea:db:63:65:ca:f1:e8:b0:a5:05:9b:50:30:ae:d6:
         02:b9:8b:36:39:c7:76:02:1a:d7:87:b6:12:8b:c4:7c:17:e1:
         78:6c:f6:05:d5:06:8f:ad:1f:28:70:a3:b7:5e:89:b3:48:75:
         82:b4:0e:af:f4:1a:11:a9:73:60:47:f3:03:04:a3:f7:2a:d8:
         3e:cf:ad:ad:0d:b8:b2:a4:a5:f8:a4:db:eb:a3:a7:c8:10:c6:
         35:19:39:55:2a:b7:79:2f:06:8f:3c:93:6b:26:60:d8:50:0b:
         dd:15:8e:8b:66:e4:8b:fa:a4:21:49:bd:c1:9f:62:cc:56:13:
         8e:9b:fc:9a:c3:8e:f3:4c:78:66:d2:21:be:16:d6:b5:5b:97:
         68:95:a4:48:ba:e5:98:58:09:91:be:2d:44:3c:84:85:13:a2:
         cf:16:df:6a:24:a1:20:c3:f6:27:ea:63:81:c7:c2:c2:41:b5:
         bc:72:3c:1e:66:55:25:12:fe:04:af:8b:e3:f2:6b:f6:9b:24:
         a9:e7:05:78:5c:1e:fe:ad:9c:8d:e9:c9:48:34:23:56:8f:b3:
         1f:d9:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----