Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/bada81982653bc913d516089e54f83c56858d7b1.roa
File:                     bada81982653bc913d516089e54f83c56858d7b1.roa (raw, json)
Hash identifier:          YUjNzrvA1QgAGUw5+gNWPAfoe7X03AKn4NMPxQNWP54=
Subject key identifier:   62:C8:5C:98:DE:07:45:00:DB:E2:C6:FC:F2:44:34:E9:D7:6D:1B:67
Certificate issuer:       /CN=36b10bc44a32bc95053829056f3cce43ed317445
Certificate serial:       085B5B
Authority key identifier: DA:54:EC:5E:D6:BC:1D:86:7A:78:10:97:3E:EB:7A:73:84:02:63:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36b10bc44a32bc95053829056f3cce43ed317445.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/bada81982653bc913d516089e54f83c56858d7b1.roa
Signing time:             Wed 24 Mar 2021 14:30:37 +0000
ROA not before:           Wed 24 Mar 2021 14:30:37 +0000
ROA not after:            Tue 24 Mar 2026 14:30:37 +0000
asID:                     267703
IP address blocks:        45.164.204.0/23 maxlen: 23
                          2801:1b:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547675 (0x85b5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b10bc44a32bc95053829056f3cce43ed317445
        Validity
            Not Before: Mar 24 14:30:37 2021 GMT
            Not After : Mar 24 14:30:37 2026 GMT
        Subject: CN=bada81982653bc913d516089e54f83c56858d7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:1a:12:b7:eb:1b:9f:a7:eb:7b:46:e3:0e:
                    7d:ef:87:ec:94:17:77:33:84:60:cc:10:37:69:14:
                    9a:df:88:10:f2:c6:68:f0:77:fe:6e:32:13:aa:1e:
                    0c:bc:28:4a:84:f8:46:4b:80:00:5c:cf:bd:1c:22:
                    be:c9:87:f9:17:a6:41:71:12:aa:2e:b1:73:ee:40:
                    d7:20:6f:a9:c9:b1:e4:c4:69:64:cd:ae:6a:aa:9b:
                    23:8e:30:67:60:1b:40:54:73:ee:0f:7d:fe:b0:fd:
                    a5:5a:09:c5:c2:a0:8d:45:d8:b7:a1:8a:b2:46:26:
                    a2:86:69:58:dd:a6:4a:d1:a9:3c:b3:69:c6:21:22:
                    72:b4:0e:26:fb:a2:1b:91:64:0c:44:d9:26:79:e8:
                    d5:4f:d0:52:b7:6e:bc:0e:90:72:80:fc:1b:98:0d:
                    0d:1b:58:be:07:a9:af:57:ce:46:4a:e9:be:66:84:
                    36:fb:1e:3f:03:f0:0e:7c:03:1b:85:37:49:91:eb:
                    25:97:be:1a:89:48:36:e7:73:c4:cc:3a:9c:19:89:
                    7b:e4:d2:2e:2c:34:49:e6:0c:8d:42:f1:dd:0a:85:
                    85:17:b5:91:b9:7b:d7:a6:7d:14:e4:b1:a5:d3:87:
                    28:22:fe:2f:f0:98:86:af:cc:1b:82:b2:f1:9c:c9:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C8:5C:98:DE:07:45:00:DB:E2:C6:FC:F2:44:34:E9:D7:6D:1B:67
            X509v3 Authority Key Identifier:
                keyid:DA:54:EC:5E:D6:BC:1D:86:7A:78:10:97:3E:EB:7A:73:84:02:63:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36b10bc44a32bc95053829056f3cce43ed317445.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/bada81982653bc913d516089e54f83c56858d7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1893802a-9a7c-4d06-a8f0-7495f66f3c0d/36b10bc44a32bc95053829056f3cce43ed317445.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.204.0/23
                IPv6:
                  2801:1b:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:b4:ec:32:8a:d1:da:b9:1d:2b:96:bf:08:d6:be:5c:a7:d8:
         3b:a9:29:1e:0d:65:6f:c4:84:68:6c:68:34:3c:54:d8:db:aa:
         9f:ee:4b:14:e4:72:18:c4:b6:74:6e:e9:17:36:08:88:6d:17:
         31:f7:46:2d:37:13:ed:10:5a:e0:5d:35:15:5c:b2:b4:25:f2:
         15:6b:1c:2b:b4:fd:d6:e2:e9:d0:14:e8:b5:b8:7c:95:63:e0:
         19:e8:44:11:41:3e:b8:85:56:45:7c:7d:4c:02:06:df:a6:cf:
         e0:60:a7:af:e7:90:88:bd:74:de:bb:32:4e:70:b5:ff:89:9b:
         69:32:dd:07:00:31:2f:d0:60:19:da:6b:a8:fb:e9:e9:4f:64:
         cc:88:2d:43:eb:7d:59:c6:ee:12:5d:70:f4:c3:d7:eb:9c:ec:
         cb:f5:e4:48:61:2e:44:b6:3d:83:28:e2:4b:fa:00:9d:1b:a0:
         82:65:fc:ec:46:ba:f7:8e:0f:62:90:e4:a0:2d:1c:25:1f:26:
         c9:33:12:34:94:6e:cd:f4:a5:bd:bb:77:09:5a:10:e8:0e:67:
         5b:c8:5a:d4:e0:6d:34:3d:2a:d5:c6:17:00:88:9e:fc:c3:a0:
         78:0d:50:51:f6:cc:d7:e0:b7:7f:b9:4e:eb:ad:69:ae:67:6a:
         39:2f:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----