Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10575424-e496-42ce-8bb0-6b347575b5dc/33f2ed0cff8c8afac6c8fff683274ea4d1a4e476.roa
File:                     33f2ed0cff8c8afac6c8fff683274ea4d1a4e476.roa (raw, json)
Hash identifier:          BVLZN1f/HwfGAhOrLi4hP6AqILxh+y86b73cVtZMrRc=
Subject key identifier:   FF:03:6F:E2:CA:5A:88:FD:95:C0:7F:90:8B:60:70:93:93:55:6B:96
Certificate issuer:       /CN=e03e6ac1e9af83a313068ae79d2bf9179774d680
Certificate serial:       0C99F2
Authority key identifier: E7:D1:07:BB:B6:7D:7E:3A:8C:B0:78:3A:9C:6C:79:E4:6E:CB:DD:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e03e6ac1e9af83a313068ae79d2bf9179774d680.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10575424-e496-42ce-8bb0-6b347575b5dc/33f2ed0cff8c8afac6c8fff683274ea4d1a4e476.roa
Signing time:             Wed 24 Mar 2021 14:38:02 +0000
ROA not before:           Wed 24 Mar 2021 14:38:02 +0000
ROA not after:            Tue 24 Mar 2026 14:38:02 +0000
asID:                     266875
IP address blocks:        45.160.132.0/22 maxlen: 24
                          2803:daa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825842 (0xc99f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e03e6ac1e9af83a313068ae79d2bf9179774d680
        Validity
            Not Before: Mar 24 14:38:02 2021 GMT
            Not After : Mar 24 14:38:02 2026 GMT
        Subject: CN=33f2ed0cff8c8afac6c8fff683274ea4d1a4e476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:c7:e0:0c:06:59:1d:b8:35:af:7c:c1:69:
                    38:3d:b6:d4:6c:5f:bd:25:20:fa:42:56:b1:1b:19:
                    ea:6b:d3:90:7c:d0:d7:59:58:16:82:8c:c9:1e:ef:
                    79:9c:24:49:24:d0:63:7e:fe:3b:e3:9a:9a:f0:ce:
                    05:8e:b7:e4:e1:c6:5c:be:42:46:37:8e:e3:39:1f:
                    4a:b5:7f:9f:68:99:65:af:64:92:0c:2e:d9:96:fb:
                    c1:aa:c6:cf:5b:06:de:61:be:1e:29:b0:39:c8:40:
                    ce:33:96:aa:ff:6f:3f:d3:e3:fe:ee:e8:13:f7:88:
                    36:7d:d8:95:ef:12:c6:bc:7c:76:fa:e8:46:59:c2:
                    8e:35:a8:87:13:60:83:4d:11:62:3d:b5:a4:17:98:
                    24:0a:e1:31:b1:1f:21:a4:1d:9c:70:ee:01:f8:96:
                    a6:7f:7d:63:6a:c3:30:ed:2a:61:19:59:d1:3b:0b:
                    b0:93:2e:c8:42:38:9d:7a:73:f8:04:b8:0f:5c:21:
                    9a:20:85:78:ff:a0:a1:93:6f:79:47:7a:4e:3d:73:
                    13:88:4e:20:c1:d3:7c:4f:80:74:ac:70:35:f7:a8:
                    e7:41:02:a7:8e:c6:61:91:f0:37:a3:49:0b:a6:94:
                    1c:f0:ce:35:7a:95:84:a1:89:6f:7f:0d:53:a5:67:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:6F:E2:CA:5A:88:FD:95:C0:7F:90:8B:60:70:93:93:55:6B:96
            X509v3 Authority Key Identifier:
                keyid:E7:D1:07:BB:B6:7D:7E:3A:8C:B0:78:3A:9C:6C:79:E4:6E:CB:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e03e6ac1e9af83a313068ae79d2bf9179774d680.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10575424-e496-42ce-8bb0-6b347575b5dc/33f2ed0cff8c8afac6c8fff683274ea4d1a4e476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10575424-e496-42ce-8bb0-6b347575b5dc/e03e6ac1e9af83a313068ae79d2bf9179774d680.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.132.0/22
                IPv6:
                  2803:daa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:df:f5:49:ab:aa:bf:59:6c:be:74:d9:71:35:c0:c9:dc:
         3d:41:49:35:14:81:18:c4:c0:63:51:37:86:42:2a:a0:8d:1a:
         91:41:4c:49:46:ff:c1:c2:db:01:2b:5d:f1:4f:e8:40:a8:77:
         b0:4a:4b:6f:aa:3c:35:39:f4:6c:da:5c:38:25:d4:91:c8:01:
         a0:4f:98:69:79:1f:80:e7:e4:39:f9:b7:2c:58:55:84:b1:1f:
         67:1b:3c:f0:8b:39:7c:d2:66:ea:6c:51:5a:9d:5b:db:35:32:
         6d:93:32:8b:1c:c0:f5:52:fc:2f:a2:52:a5:f2:a2:de:95:cb:
         5d:f4:40:a5:3b:c0:cf:48:41:27:6d:2b:92:47:aa:d8:96:29:
         83:b2:bb:be:f2:2c:a9:1c:7b:8c:b8:1b:3e:d9:64:08:21:33:
         ae:0d:42:1f:38:df:ee:55:52:d7:f9:14:bc:72:c7:00:dc:60:
         27:99:11:69:ab:07:89:20:b3:bb:41:6f:9c:6b:eb:06:15:85:
         b3:44:53:b9:04:fb:f9:3a:42:cf:03:a8:bd:e6:e9:40:c1:a4:
         01:60:bf:9c:67:23:c9:8c:ca:f0:d6:26:f3:97:b3:20:c6:76:
         06:38:f4:cc:9c:2e:32:2c:f1:7d:2b:07:75:b4:fe:6c:67:45:
         1d:5c:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----