Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/47615f46f7063abda7cf0eddb64723c2025487de.roa
File:                     47615f46f7063abda7cf0eddb64723c2025487de.roa (raw, json)
Hash identifier:          Jyc5bPU3kU7R5d9PPZ1sI8Ajlft7yIR9DjAYd1WXUng=
Subject key identifier:   1E:00:31:B7:54:E5:36:1F:32:C7:93:11:11:8E:84:D2:E7:1B:E7:AD
Certificate issuer:       /CN=5fc7f0db9a5164f90e759ae11ff173e2845cfc55
Certificate serial:       0C33F7
Authority key identifier: D0:B6:9A:CB:9A:27:FA:1A:52:68:1F:A0:8F:10:78:EC:9F:3F:FF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/47615f46f7063abda7cf0eddb64723c2025487de.roa
Signing time:             Wed 24 Mar 2021 14:45:19 +0000
ROA not before:           Wed 24 Mar 2021 14:45:19 +0000
ROA not after:            Tue 24 Mar 2026 14:45:19 +0000
asID:                     266695
IP address blocks:        45.229.196.0/22 maxlen: 24
                          2803:f520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799735 (0xc33f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc7f0db9a5164f90e759ae11ff173e2845cfc55
        Validity
            Not Before: Mar 24 14:45:19 2021 GMT
            Not After : Mar 24 14:45:19 2026 GMT
        Subject: CN=47615f46f7063abda7cf0eddb64723c2025487de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:68:70:4b:25:c9:1a:23:b5:07:d9:c6:62:
                    aa:b6:82:a5:47:81:5d:2d:f3:06:96:5f:12:e0:7a:
                    0e:56:f5:5e:92:e4:62:dd:8c:48:39:a7:e6:d2:4e:
                    e6:22:7b:a7:bf:99:96:c2:f4:10:bb:55:c3:a4:60:
                    d5:93:b0:76:23:7a:3d:22:1f:c7:9e:40:70:82:9d:
                    c5:10:2a:37:43:db:c8:28:e4:94:7e:4c:8d:b4:b8:
                    8c:57:bc:8a:c8:8f:5c:6e:53:20:11:23:06:e2:1b:
                    6d:f4:62:dc:42:2e:9f:a4:54:e7:3f:83:ed:11:f5:
                    68:58:b1:bc:22:36:48:91:37:23:8c:d6:15:59:21:
                    36:40:e9:44:87:16:4b:5f:b5:31:e4:e2:3e:15:a7:
                    e5:26:57:90:0a:9f:f3:d0:08:87:24:db:f3:be:6a:
                    00:09:52:80:a5:d4:b5:4a:46:de:d3:73:09:89:81:
                    09:70:bf:32:6f:85:d5:33:d9:7a:e0:c7:0d:a5:3e:
                    9b:ff:f6:02:32:97:07:b8:a6:77:9b:a9:57:7d:de:
                    31:d8:f5:55:92:0a:fb:52:d1:f1:3e:e2:4f:25:e5:
                    09:b8:0b:e7:b8:49:1f:69:a2:95:c7:b5:1f:29:5c:
                    82:4b:00:34:7e:a7:71:ba:23:e4:4d:9f:32:f4:9c:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:31:B7:54:E5:36:1F:32:C7:93:11:11:8E:84:D2:E7:1B:E7:AD
            X509v3 Authority Key Identifier:
                keyid:D0:B6:9A:CB:9A:27:FA:1A:52:68:1F:A0:8F:10:78:EC:9F:3F:FF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/47615f46f7063abda7cf0eddb64723c2025487de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22ac7a54-3a07-4b27-8e03-10bd95136868/5fc7f0db9a5164f90e759ae11ff173e2845cfc55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.196.0/22
                IPv6:
                  2803:f520::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:45:0f:1c:4b:53:53:20:5e:d3:ab:8b:c6:2f:87:eb:1b:
         93:1c:a1:f7:4c:48:76:60:3c:69:22:4b:1a:6f:e5:6a:0b:1c:
         51:df:bf:b5:3a:35:af:e3:d8:00:41:a6:7b:de:9f:fb:65:a7:
         c8:58:4e:78:a6:90:d1:c3:9c:6b:da:5c:96:47:be:95:a9:9a:
         5e:e4:d8:55:5e:18:72:95:60:70:62:df:7d:f2:54:1f:f0:d6:
         a3:be:ca:a7:59:02:51:de:cd:cf:07:84:f7:a4:6b:7d:46:f5:
         61:f5:ff:fc:05:d7:fa:38:ab:9b:c6:65:0f:cb:3e:9f:5a:49:
         b9:d0:d1:fd:42:2d:4b:7d:5c:29:dc:e1:92:fe:88:7c:d2:e5:
         28:ff:8c:4e:a9:ce:7b:93:3f:fc:5a:ac:49:1e:b8:8c:1f:f2:
         79:f8:29:f5:aa:ca:7f:34:66:33:a9:8b:2a:22:2e:7b:26:3d:
         5c:49:1d:78:0f:6e:05:34:1a:de:d1:e3:a8:1c:75:cc:c7:e6:
         5c:89:66:0c:7b:7b:fa:f2:e1:af:53:5a:1d:08:d6:1e:b5:4f:
         1f:85:5a:e1:84:65:9c:06:2f:7c:b5:98:0d:b6:1f:c2:50:7a:
         9b:c3:89:7a:e8:4b:08:e3:7a:bf:f4:08:cc:b3:00:7a:9c:b2:
         d3:21:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----