Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15d88dc3-263b-44aa-99be-bb4ad2369669/0070d311cadebcc1bf38a8c6a12e3bc728cb3753.roa
File:                     0070d311cadebcc1bf38a8c6a12e3bc728cb3753.roa (raw, json)
Hash identifier:          zXOUpbyhdPwk6PkhHwnIMS1o7Fn/i60YIgXc6Eu8/9c=
Subject key identifier:   98:DD:A3:63:81:3E:8D:2D:9D:65:41:8E:EF:39:5D:4F:B9:E9:89:44
Certificate issuer:       /CN=78d2697de457465027bb4c840d6aa79e853f20a2
Certificate serial:       045E
Authority key identifier: 31:C9:F0:CD:A3:95:7C:5B:03:26:D3:8E:34:6A:FB:4B:25:77:A4:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78d2697de457465027bb4c840d6aa79e853f20a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15d88dc3-263b-44aa-99be-bb4ad2369669/0070d311cadebcc1bf38a8c6a12e3bc728cb3753.roa
Signing time:             Tue 12 Oct 2021 15:23:19 +0000
ROA not before:           Tue 12 Oct 2021 03:00:00 +0000
ROA not after:            Thu 12 Oct 2023 03:00:00 +0000
asID:                     269861
IP address blocks:        45.187.88.0/24 maxlen: 24
                          2801:18:c800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d2697de457465027bb4c840d6aa79e853f20a2
        Validity
            Not Before: Oct 12 03:00:00 2021 GMT
            Not After : Oct 12 03:00:00 2023 GMT
        Subject: CN=0070d311cadebcc1bf38a8c6a12e3bc728cb3753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:66:d3:85:13:4f:af:a8:18:08:78:28:1f:
                    f4:bb:b2:06:59:a4:75:90:2c:63:60:06:8c:48:ec:
                    25:19:5f:35:8f:85:9a:63:3f:a5:c0:f5:a2:ab:fb:
                    e1:d0:78:e2:18:91:f9:f9:dd:c3:a0:c1:9f:40:a6:
                    ea:79:5a:96:80:02:c1:14:0b:d8:af:9d:39:0c:35:
                    a2:55:02:3e:d5:79:a3:8f:ea:50:7e:58:98:e6:36:
                    06:91:a6:59:a0:a1:a5:34:7b:12:f1:90:80:c0:c7:
                    f9:aa:63:87:e1:b2:ed:82:d8:8c:9e:e7:17:d2:b3:
                    40:6d:00:f9:97:b0:5a:c0:eb:ae:9c:a3:ae:b9:a2:
                    2b:0d:71:c6:41:32:f2:b7:20:c7:3b:2b:3f:24:2e:
                    13:fc:a0:97:f1:5e:ef:fc:3d:a6:f4:c7:ed:a4:b0:
                    d8:77:d9:f4:32:d3:c7:d6:7c:1b:ae:6f:19:39:5e:
                    0d:d7:a2:e4:6f:73:86:1b:2a:16:bc:38:43:95:5f:
                    eb:e6:cb:a3:78:70:ff:7e:d7:44:90:ea:56:74:44:
                    01:e2:ab:bd:ab:d3:41:f8:6d:ea:d2:7a:cf:26:f9:
                    f5:22:fb:45:47:04:32:72:90:00:b6:92:ff:d7:b4:
                    96:05:c3:e9:2e:90:a4:ed:c6:05:cf:93:fc:1e:0a:
                    ad:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:A3:63:81:3E:8D:2D:9D:65:41:8E:EF:39:5D:4F:B9:E9:89:44
            X509v3 Authority Key Identifier:
                keyid:31:C9:F0:CD:A3:95:7C:5B:03:26:D3:8E:34:6A:FB:4B:25:77:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78d2697de457465027bb4c840d6aa79e853f20a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15d88dc3-263b-44aa-99be-bb4ad2369669/0070d311cadebcc1bf38a8c6a12e3bc728cb3753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15d88dc3-263b-44aa-99be-bb4ad2369669/78d2697de457465027bb4c840d6aa79e853f20a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.88.0/24
                IPv6:
                  2801:18:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:11:20:36:ec:02:c1:a6:1f:6e:38:73:68:92:6c:ca:a3:
         6f:25:fb:34:be:73:eb:82:8c:32:18:a0:04:7c:68:86:42:c8:
         74:25:19:ce:bd:ad:d6:cb:4d:f9:39:3a:5b:b9:dd:4c:85:dc:
         02:f4:56:f1:6e:62:c6:ab:b2:c7:94:1e:26:6b:13:15:0f:2c:
         10:2f:8d:5b:2d:2d:89:46:0e:46:d4:f9:76:18:63:18:d1:c6:
         32:ce:a1:e1:64:ee:ea:ed:dc:db:20:e4:ff:9a:ad:d7:0f:9b:
         75:92:71:4b:ac:b7:d2:b0:e8:ba:e5:22:ac:c4:84:79:55:14:
         90:40:80:9c:5b:41:30:35:15:cb:95:09:56:fd:a6:0c:8c:a0:
         dc:b7:79:5b:7f:f6:dc:77:9e:75:88:12:c3:56:ec:ef:12:8e:
         63:3c:35:35:24:50:18:68:ce:8f:df:95:62:5c:15:53:44:d2:
         21:ab:8f:25:e3:99:41:55:f5:1b:2b:c0:af:63:c5:59:cc:36:
         61:0b:50:5f:bc:8c:7c:8c:16:e1:2c:1d:bb:91:2e:15:eb:93:
         25:50:83:90:a1:28:0e:dd:ca:68:c4:7b:c6:84:00:b2:78:c9:
         b4:6d:a8:c4:4e:73:8b:27:34:a9:d4:1d:70:41:d0:f0:fc:5a:
         b3:36:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----