Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/9324e196df0416b691fe708bf2f3a2b6e7fe403a.roa
File:                     9324e196df0416b691fe708bf2f3a2b6e7fe403a.roa (raw, json)
Hash identifier:          Zb2QWzz63urwrNhC9ADXJ2yRDqMDt3szlty3wjneQ2U=
Subject key identifier:   61:F6:BA:C5:CB:CB:05:F8:0B:53:71:47:72:7C:49:20:10:AD:A5:C1
Certificate issuer:       /CN=69352d5404c33cc229c22b48be8672eab920961f
Certificate serial:       05B7BB
Authority key identifier: 9E:05:BC:5F:46:94:B6:9A:5C:07:76:94:B6:04:D3:CA:3F:AD:14:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69352d5404c33cc229c22b48be8672eab920961f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/9324e196df0416b691fe708bf2f3a2b6e7fe403a.roa
Signing time:             Wed 24 Mar 2021 14:37:28 +0000
ROA not before:           Wed 24 Mar 2021 14:37:28 +0000
ROA not after:            Tue 24 Mar 2026 14:37:28 +0000
asID:                     266665
IP address blocks:        45.227.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374715 (0x5b7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69352d5404c33cc229c22b48be8672eab920961f
        Validity
            Not Before: Mar 24 14:37:28 2021 GMT
            Not After : Mar 24 14:37:28 2026 GMT
        Subject: CN=9324e196df0416b691fe708bf2f3a2b6e7fe403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:7e:81:2d:4d:99:21:69:e0:e9:d1:ea:25:
                    60:88:f7:ee:ea:79:9a:67:e6:23:18:cf:2b:2b:18:
                    00:6c:2e:46:14:91:f2:07:a9:a9:0c:0a:c8:45:2b:
                    c8:81:0a:3e:36:5e:7a:98:e3:b3:84:58:35:2d:2d:
                    0c:e2:6e:d3:39:2d:4b:14:e3:73:1d:aa:34:05:56:
                    28:2d:39:a2:fc:b0:98:c6:32:9f:5a:fc:89:c8:a5:
                    bd:ef:a2:35:6b:50:66:f9:db:6e:d9:f0:57:52:64:
                    71:99:83:4f:cc:c5:58:52:dc:3b:d3:27:a9:60:6e:
                    1d:66:d4:69:15:0e:01:74:a5:af:5f:c3:72:e6:ec:
                    1e:e9:16:b2:da:d8:72:11:12:d1:88:06:fe:2d:f7:
                    ac:34:4a:f3:5e:02:71:8d:32:a1:e6:62:86:ba:1b:
                    ac:02:5e:69:fe:7c:57:9a:f8:af:fa:d9:a8:19:ef:
                    98:c0:b7:81:56:db:7d:7a:26:d6:4e:b1:78:b4:07:
                    00:a1:bc:84:be:79:7a:0a:fb:ca:71:76:59:ca:c5:
                    05:71:2b:42:a7:2b:32:4e:3c:2d:ab:ec:1c:20:80:
                    3d:ec:8d:f4:6e:06:14:16:51:a3:68:53:34:9d:2d:
                    02:5d:49:09:51:aa:8f:c5:07:76:65:74:bf:99:b0:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F6:BA:C5:CB:CB:05:F8:0B:53:71:47:72:7C:49:20:10:AD:A5:C1
            X509v3 Authority Key Identifier:
                keyid:9E:05:BC:5F:46:94:B6:9A:5C:07:76:94:B6:04:D3:CA:3F:AD:14:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69352d5404c33cc229c22b48be8672eab920961f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/9324e196df0416b691fe708bf2f3a2b6e7fe403a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2277adf6-909d-4b9d-bead-27d1b81002bf/69352d5404c33cc229c22b48be8672eab920961f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:67:b5:75:10:06:2e:dd:ae:a8:6d:5d:2c:41:15:ae:24:
         5f:5a:e7:14:21:72:f0:6c:dc:72:fc:3b:37:e9:2c:4f:cf:fe:
         52:be:ec:c7:82:28:bb:d8:25:64:4c:ca:70:5f:2e:d9:68:ea:
         07:e5:f7:89:81:bc:6f:57:09:3f:b2:bf:17:19:98:3d:fa:5a:
         52:f0:f4:31:d5:a1:67:42:f2:e0:07:44:81:e8:9f:e9:da:7b:
         f6:66:8d:dc:fc:63:80:2b:8e:3e:80:7e:5c:df:ff:1a:8e:cc:
         a5:30:a1:bc:a4:e8:a6:e9:01:3e:11:e5:6c:08:47:51:a2:15:
         d6:0d:8e:6a:e8:4d:51:37:e1:f2:fd:5f:6c:14:0f:b2:b7:2d:
         a6:da:ef:a1:76:74:f4:66:79:bf:ce:9e:59:15:51:c9:ff:20:
         67:37:f2:75:a2:db:b4:5d:5c:5e:a9:97:d2:2d:70:f2:26:6d:
         51:0b:56:8d:81:c2:91:00:46:67:cc:96:ed:7e:74:99:90:15:
         c0:7c:2a:4e:85:1a:56:b7:1c:19:a0:33:f4:a0:61:89:3d:86:
         17:84:c0:dc:43:29:2e:5d:fc:cf:13:3e:9e:08:12:e0:2c:28:
         91:e0:42:32:66:46:82:4b:e2:1d:d5:5a:78:22:2b:2b:81:e5:
         6b:5b:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----