Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/b45f702709fd98762323323c200469284bb72ae3.roa
File:                     b45f702709fd98762323323c200469284bb72ae3.roa (raw, json)
Hash identifier:          yGIrBEvPB1+GVh+Hjoul6S/3zs0bdDSjFEOqhhwpmIg=
Subject key identifier:   4B:7B:51:DF:4A:57:47:51:04:C0:0A:75:E5:81:63:CA:84:24:09:16
Certificate issuer:       /CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Certificate serial:       0D7222
Authority key identifier: 73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/b45f702709fd98762323323c200469284bb72ae3.roa
Signing time:             Wed 24 Mar 2021 14:40:21 +0000
ROA not before:           Wed 24 Mar 2021 14:40:21 +0000
ROA not after:            Tue 24 Mar 2026 14:40:21 +0000
asID:                     264668
IP address blocks:        131.196.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881186 (0xd7222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
        Validity
            Not Before: Mar 24 14:40:21 2021 GMT
            Not After : Mar 24 14:40:21 2026 GMT
        Subject: CN=b45f702709fd98762323323c200469284bb72ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:dc:8c:41:dc:fc:8e:5b:e9:4f:60:3d:21:
                    aa:72:68:be:78:65:55:e2:ab:b1:7f:2c:c5:fa:d1:
                    41:bb:5b:67:7c:82:9a:b0:74:5b:b4:31:b8:09:d7:
                    84:d9:02:56:4c:90:74:e9:46:a3:2a:d4:8e:49:49:
                    8f:f1:dd:3b:37:54:2e:af:dd:b8:03:3e:a8:79:c5:
                    66:ae:8a:cb:cf:4a:19:91:bc:95:5f:8f:3b:a9:a5:
                    df:56:4a:4b:fc:2c:31:d8:cc:9e:1f:d4:e9:98:72:
                    a2:82:5f:59:77:92:9b:91:e4:0e:cc:a2:77:6d:c1:
                    90:42:88:f9:90:51:ce:d6:ed:e1:cd:4b:ce:bd:73:
                    a3:c0:7e:4e:00:d3:dc:7b:e0:01:e1:ad:48:8f:b6:
                    c5:3f:17:49:63:0f:93:c8:aa:01:05:bb:97:31:88:
                    87:d4:46:50:2e:52:c7:81:b5:43:e0:74:a1:4d:d6:
                    89:8c:a3:08:95:c3:6b:81:37:57:3f:dd:cf:04:da:
                    dc:fd:fc:42:f4:27:f6:79:91:ee:89:ab:6c:8b:07:
                    e4:aa:6f:cb:7c:a0:ee:c8:63:57:52:fa:17:13:42:
                    90:b8:db:e2:c8:d6:45:bb:32:fd:51:60:2e:5b:0f:
                    a8:dd:59:43:18:fd:96:09:45:a8:8f:9b:78:ad:34:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7B:51:DF:4A:57:47:51:04:C0:0A:75:E5:81:63:CA:84:24:09:16
            X509v3 Authority Key Identifier:
                keyid:73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/b45f702709fd98762323323c200469284bb72ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:08:7e:da:eb:41:aa:fe:e6:1a:50:2a:cf:31:2e:ed:61:
         d5:74:25:58:33:d2:eb:b6:62:78:65:00:24:18:d3:98:fa:33:
         94:36:63:7b:ce:fa:2a:55:f1:1b:fe:fa:db:cc:ac:1b:5f:d7:
         55:3a:65:69:08:91:d4:de:89:84:9d:ec:97:21:df:3b:7a:66:
         ad:98:59:ce:21:e9:14:cf:e6:2a:80:92:bc:b0:af:17:a5:ad:
         9f:0c:6c:8e:69:cb:ee:80:a8:d4:73:e7:a9:c1:2c:19:78:ed:
         91:f1:16:4c:27:9d:d0:1d:0b:8e:d4:f8:f0:ea:86:cb:7e:13:
         9a:24:94:c5:38:bc:7a:b2:4a:5d:84:d0:90:a9:46:f0:7a:48:
         42:5f:d6:01:8d:25:58:a9:72:51:ce:df:4d:6e:4c:60:f9:8d:
         c5:6c:b2:25:70:c8:77:76:4e:c4:a8:e7:a8:8a:42:fd:e9:d6:
         fb:80:8c:2a:da:7e:84:58:a3:2c:ba:49:21:e6:f8:85:06:a7:
         5a:e1:6c:f4:7f:d4:2e:20:90:e8:cc:75:eb:55:03:47:dc:d9:
         fa:f2:38:23:f2:30:58:44:8a:ca:bb:d2:5f:0d:10:ca:d8:e2:
         34:3b:04:f3:4b:da:a4:1e:e1:da:02:be:e8:1a:c2:41:4d:cf:
         a9:83:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----