Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/15a4c5b18552ac04ea08adcd5f1e466371adf59b.roa
File:                     15a4c5b18552ac04ea08adcd5f1e466371adf59b.roa (raw, json)
Hash identifier:          blFn2FgjFDDsOsRaR1yse6IAV4D5F0HGVw9xCSminMg=
Subject key identifier:   27:02:CC:47:96:21:F0:AA:A4:B3:56:88:8E:39:D1:00:DA:00:1F:F9
Certificate issuer:       /CN=a5dbc03364e9394bad095f89989ac67e2c05347f
Certificate serial:       0CDAA2
Authority key identifier: 77:EE:86:C6:68:E8:84:1B:25:51:9B:C4:B2:A2:FB:C9:49:BC:F8:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5dbc03364e9394bad095f89989ac67e2c05347f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/15a4c5b18552ac04ea08adcd5f1e466371adf59b.roa
Signing time:             Wed 24 Mar 2021 14:30:14 +0000
ROA not before:           Wed 24 Mar 2021 14:30:14 +0000
ROA not after:            Tue 24 Mar 2026 14:30:14 +0000
asID:                     28093
IP address blocks:        45.161.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842402 (0xcdaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5dbc03364e9394bad095f89989ac67e2c05347f
        Validity
            Not Before: Mar 24 14:30:14 2021 GMT
            Not After : Mar 24 14:30:14 2026 GMT
        Subject: CN=15a4c5b18552ac04ea08adcd5f1e466371adf59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:6a:3c:33:02:c6:3b:50:98:27:2d:08:79:
                    74:89:7c:1c:59:05:c9:63:4c:da:4e:9c:b7:3a:53:
                    bf:9a:d7:37:00:c4:d3:af:e7:82:19:67:67:7f:d6:
                    87:90:2d:7e:23:9d:f3:5e:86:64:84:6a:66:ed:dd:
                    ed:c5:c3:fe:26:18:e9:e5:28:ee:3b:6f:59:29:42:
                    53:5d:23:2f:c5:6b:94:7a:a0:84:ba:7f:08:3f:c2:
                    dc:c5:db:b8:6a:fb:f9:55:c2:7f:e0:c0:68:f7:1a:
                    48:c2:24:c6:12:b5:1a:a2:a9:56:51:44:21:c3:2f:
                    84:fc:ec:35:f3:47:dc:78:ad:7a:0d:2c:a3:b9:61:
                    66:e0:ee:62:fc:78:b6:f5:d0:07:f6:99:00:0b:f6:
                    57:25:b1:44:d8:08:5b:fa:63:fa:c0:1c:c2:21:64:
                    f6:af:12:7f:4c:63:fd:41:0a:5d:3e:ad:e2:2c:62:
                    c3:df:5d:7e:e7:78:1f:b4:1d:cf:38:a2:76:b6:89:
                    2c:83:39:aa:80:f2:9f:41:bc:f6:df:a3:5f:f6:19:
                    61:15:2d:83:56:08:c1:7b:60:03:83:95:6b:ff:79:
                    1f:41:f2:e8:1b:08:c1:3e:26:ee:1c:76:6e:97:9a:
                    66:f8:7d:e1:0c:5d:b8:9b:05:14:85:a5:40:e8:39:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:02:CC:47:96:21:F0:AA:A4:B3:56:88:8E:39:D1:00:DA:00:1F:F9
            X509v3 Authority Key Identifier:
                keyid:77:EE:86:C6:68:E8:84:1B:25:51:9B:C4:B2:A2:FB:C9:49:BC:F8:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5dbc03364e9394bad095f89989ac67e2c05347f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/15a4c5b18552ac04ea08adcd5f1e466371adf59b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16e0bd43-bb6f-478f-906a-ef8742727ae6/a5dbc03364e9394bad095f89989ac67e2c05347f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ff:11:2e:12:12:78:a4:a1:d0:b2:71:83:86:e3:ae:26:1a:
         ce:ff:2e:9b:e2:e0:06:14:e8:a0:3d:f7:9e:2e:34:11:12:21:
         c3:c8:6d:49:cd:c2:f8:2b:05:6d:cd:2e:13:69:da:ee:13:37:
         2c:7d:98:cb:92:bc:4d:ed:c0:55:e5:6b:8c:b9:30:40:61:e3:
         50:ca:42:c6:71:dc:83:a8:01:57:36:86:13:bc:72:2b:1b:53:
         3c:e0:25:bc:49:f6:36:51:a2:04:65:ff:ba:63:cd:80:26:93:
         f6:7c:e7:52:83:8a:07:89:cb:01:10:be:d2:da:ba:2c:f5:e6:
         52:c7:d7:8c:c4:7d:32:25:58:6d:c5:54:4b:b7:b7:26:c2:0e:
         04:56:d2:08:f3:49:bb:83:f3:8f:b2:42:ea:3f:21:b8:6f:89:
         ce:44:e0:bd:21:ea:d2:68:ff:4e:ce:39:f9:94:c5:13:f0:6f:
         07:ea:64:f0:eb:e9:b3:82:7a:83:79:0d:f4:56:cb:c5:24:f7:
         c6:d4:b3:0d:b4:03:10:a7:f4:7e:1b:be:d5:0f:5e:95:11:c6:
         f2:be:ff:b8:5b:c1:7d:65:a8:53:e2:67:dc:6f:42:24:29:d3:
         8f:50:b6:cf:11:b7:e9:11:f7:c1:a2:9e:d3:d2:ca:0b:2c:02:
         bb:28:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----