Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27430e4f-cb10-489c-88e0-1d570b260fdb/d2efd80db68b3d24403ef835d5ed9b0574548e2e.roa
File:                     d2efd80db68b3d24403ef835d5ed9b0574548e2e.roa (raw, json)
Hash identifier:          UaCL/NC0Cp0IxuTO3pqt+KdeBIQx0C7JWUUPcuig8MQ=
Subject key identifier:   14:76:A7:1F:37:3A:B9:5C:C3:8B:B3:B5:49:7C:DB:3B:87:46:88:BD
Certificate issuer:       /CN=eeece89ff964248a0f8ca366250760ae4b773968
Certificate serial:       0D1483
Authority key identifier: E4:62:D0:26:5C:55:14:D9:04:8E:E1:3B:A3:4E:E5:7E:B7:04:2A:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eeece89ff964248a0f8ca366250760ae4b773968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27430e4f-cb10-489c-88e0-1d570b260fdb/d2efd80db68b3d24403ef835d5ed9b0574548e2e.roa
Signing time:             Wed 24 Mar 2021 14:30:37 +0000
ROA not before:           Wed 24 Mar 2021 14:30:37 +0000
ROA not after:            Tue 24 Mar 2026 14:30:37 +0000
asID:                     266773
IP address blocks:        45.233.236.0/23 maxlen: 24
                          2801:1e:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857219 (0xd1483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeece89ff964248a0f8ca366250760ae4b773968
        Validity
            Not Before: Mar 24 14:30:37 2021 GMT
            Not After : Mar 24 14:30:37 2026 GMT
        Subject: CN=d2efd80db68b3d24403ef835d5ed9b0574548e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:0b:26:eb:02:bc:01:0f:b9:1d:e6:c1:de:
                    07:64:83:c5:f2:75:45:8f:6a:dc:dd:8a:1b:c3:d1:
                    89:94:04:f3:ae:b6:10:37:56:fd:d9:fb:54:05:bc:
                    4e:6e:cb:e3:3a:b4:e6:19:80:b4:8a:5a:89:28:31:
                    f2:a2:d2:c0:34:53:62:fb:1b:6e:3b:a3:15:b1:11:
                    9e:d7:73:43:5b:f4:d3:6b:bc:56:2a:26:5a:eb:68:
                    5d:a6:9a:98:d6:7d:63:be:d1:a8:cb:7d:11:86:17:
                    4b:c3:5f:2e:d6:dd:5d:a1:d5:0c:e6:dd:0a:c2:a1:
                    ba:ac:c4:bd:99:18:04:ae:ad:34:a1:60:8b:29:ad:
                    79:13:f4:25:c9:b5:07:74:f0:22:e6:b6:c1:0e:50:
                    33:71:a0:12:07:31:07:4c:92:a4:af:99:8a:e8:25:
                    79:c4:5f:d2:e3:2c:4c:e6:9e:a6:cb:93:e6:b7:23:
                    9c:31:f4:83:da:08:0f:1e:35:5f:16:5e:b0:52:9c:
                    46:ab:f6:5f:74:7e:1d:0a:bd:1c:a3:5e:aa:2c:00:
                    ff:1f:a4:9c:7e:d5:a2:ec:9e:aa:e6:78:a9:44:15:
                    f7:8f:c4:a2:8f:09:aa:eb:61:ad:e2:82:1f:1b:d8:
                    e2:61:fb:3d:72:02:bb:50:47:b7:79:bb:ad:29:bd:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:76:A7:1F:37:3A:B9:5C:C3:8B:B3:B5:49:7C:DB:3B:87:46:88:BD
            X509v3 Authority Key Identifier:
                keyid:E4:62:D0:26:5C:55:14:D9:04:8E:E1:3B:A3:4E:E5:7E:B7:04:2A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eeece89ff964248a0f8ca366250760ae4b773968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27430e4f-cb10-489c-88e0-1d570b260fdb/d2efd80db68b3d24403ef835d5ed9b0574548e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27430e4f-cb10-489c-88e0-1d570b260fdb/eeece89ff964248a0f8ca366250760ae4b773968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.236.0/23
                IPv6:
                  2801:1e:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:ab:7a:b0:53:d6:bf:3a:05:93:d5:0f:45:a9:45:ab:41:9d:
         24:f2:57:a8:04:d0:a0:3a:f5:c1:0c:26:b6:c1:55:1b:9a:84:
         0f:1e:74:1b:59:97:00:c0:38:a6:15:c0:42:b6:c9:06:49:ee:
         b8:15:f5:81:4c:2d:bb:75:e6:eb:b0:2b:93:a0:4a:77:0a:32:
         18:d3:c0:4f:60:3c:06:3b:02:2f:ce:27:17:f3:27:4c:6e:5b:
         1a:62:1c:4d:ec:93:15:0b:8c:d4:77:19:bc:e6:ed:b4:50:04:
         97:13:55:65:b7:4c:93:d1:90:32:57:e4:43:aa:5a:bb:16:fe:
         ac:89:5e:ee:14:ca:98:89:01:f6:fd:8d:54:54:bc:82:9b:47:
         91:b2:65:30:91:aa:83:9d:db:2d:18:6a:c6:f6:84:ec:65:b0:
         28:f8:26:79:28:a0:f5:89:f8:59:92:f8:84:5c:ed:6b:81:37:
         4c:69:2e:9c:b5:e2:f0:a3:7f:f5:bd:30:9d:bf:e0:b6:4f:8f:
         3c:03:59:3a:11:92:56:e4:a1:74:c9:cb:c5:03:ae:d5:a6:95:
         2f:ee:e2:de:ac:92:14:71:36:74:bb:98:d6:e4:63:3e:83:49:
         0b:89:85:b0:32:0e:12:32:6b:95:96:36:90:5e:ff:d7:12:e5:
         42:5a:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----