Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/0ab1a682051773f91073b8a29b80ca76198a0ad4.roa
File:                     0ab1a682051773f91073b8a29b80ca76198a0ad4.roa (raw, json)
Hash identifier:          YejBEEUTvG7i+PYrdInWOzNWIrnuMExpb1kI1wWFet0=
Subject key identifier:   E2:6E:33:A2:F7:62:96:77:3B:4F:D7:C1:49:A0:76:B7:1C:E7:01:72
Certificate issuer:       /CN=bbdd6c4e4e9a9fd0809152b7f9941fed54e17488
Certificate serial:       029480
Authority key identifier: A6:6D:25:3C:C4:3D:4A:E2:44:5F:E1:4F:83:80:57:18:4A:2F:58:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/0ab1a682051773f91073b8a29b80ca76198a0ad4.roa
Signing time:             Wed 24 Mar 2021 14:28:36 +0000
ROA not before:           Wed 24 Mar 2021 14:28:36 +0000
ROA not after:            Tue 24 Mar 2026 14:28:36 +0000
asID:                     266666
IP address blocks:        45.228.152.0/22 maxlen: 24
                          2801:19:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169088 (0x29480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbdd6c4e4e9a9fd0809152b7f9941fed54e17488
        Validity
            Not Before: Mar 24 14:28:36 2021 GMT
            Not After : Mar 24 14:28:36 2026 GMT
        Subject: CN=0ab1a682051773f91073b8a29b80ca76198a0ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:38:58:db:fa:ac:de:50:5b:6b:41:1f:3a:
                    db:6a:61:da:cb:13:d7:0d:08:b2:27:c3:14:75:83:
                    f5:09:64:76:80:d2:b8:ba:97:b7:f6:e9:27:6d:01:
                    a3:19:6f:09:83:9d:5c:2c:37:ab:3f:44:28:b2:bb:
                    06:b0:be:c4:ae:76:19:6e:0d:05:4d:87:da:be:f9:
                    b0:c7:6e:c5:7c:b5:60:de:52:59:16:c4:09:5b:b3:
                    14:b1:41:94:30:6c:d8:97:f1:fa:33:12:51:4e:fd:
                    ea:f9:fa:d4:22:83:50:75:a6:c0:90:74:9c:0d:cf:
                    66:74:c4:bd:93:5a:bb:80:10:78:44:e4:00:95:03:
                    d4:e0:12:b7:f0:66:73:e6:fb:16:a8:99:3d:99:2d:
                    78:7a:36:13:22:51:0c:ab:2e:e1:7c:bf:65:21:50:
                    ec:fc:d8:29:c5:2e:7e:d6:4a:c5:ec:2a:bd:2a:90:
                    21:b3:ab:6e:42:c3:e6:9d:40:02:a4:73:aa:c2:c8:
                    6e:9b:3c:a4:6e:3e:a7:e9:39:d2:1c:cb:b4:f8:25:
                    30:44:38:31:65:b5:84:73:d5:dc:96:b0:15:18:a3:
                    7f:e2:71:9c:c0:36:4d:bd:f0:a5:99:d2:61:22:9f:
                    6f:f2:3f:a4:be:ce:31:cc:dc:81:aa:14:7b:5e:c5:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6E:33:A2:F7:62:96:77:3B:4F:D7:C1:49:A0:76:B7:1C:E7:01:72
            X509v3 Authority Key Identifier:
                keyid:A6:6D:25:3C:C4:3D:4A:E2:44:5F:E1:4F:83:80:57:18:4A:2F:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/0ab1a682051773f91073b8a29b80ca76198a0ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c6ee3e0-5eb4-43d2-aad4-db098bd21bb9/bbdd6c4e4e9a9fd0809152b7f9941fed54e17488.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.152.0/22
                IPv6:
                  2801:19:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:35:5e:3d:e9:01:a8:e8:a3:c6:9e:2b:53:89:a4:f9:72:
         4e:45:35:42:99:8b:b2:3f:82:8a:12:42:1c:c5:b5:92:19:05:
         b0:19:b4:f8:88:b9:04:ec:eb:a5:30:2e:dc:63:cd:50:17:9f:
         ea:86:db:9d:a4:80:e8:8d:07:49:6a:60:c5:77:85:d7:84:8d:
         7e:02:42:21:5a:4b:83:d0:99:d6:80:56:5c:ba:70:89:69:b9:
         f9:a9:0a:d5:6a:7f:20:74:55:4d:46:db:5b:33:80:b2:dc:58:
         88:73:f3:1c:be:42:d2:f3:d2:c6:7d:e8:9e:28:6e:3d:d4:eb:
         22:04:31:0b:25:73:8e:0a:28:2e:15:5c:19:8e:1d:a7:99:e4:
         78:78:31:7c:7f:89:70:66:ae:24:80:c0:8d:a0:ad:24:cd:5e:
         6c:31:a9:bc:2e:19:10:9a:8a:e1:17:56:eb:8f:4d:1e:f9:29:
         f1:69:55:48:f7:75:28:5a:c8:ce:42:a9:dd:76:8f:91:ca:51:
         94:f2:a8:2e:7d:35:fc:17:3f:6f:ab:fe:6e:dc:4b:a1:ce:61:
         83:fd:e4:ea:9a:fa:65:c1:c0:82:a6:1f:0a:3b:a4:a0:37:ba:
         6e:9d:39:3a:77:37:5d:d0:d1:a3:1c:f3:5f:97:1a:18:0b:30:
         71:17:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----