Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2896f919-a17b-4066-92a5-0ebc13ac3c77/893fc3344d5aa91c135875a5f047305e618739a8.roa
File:                     893fc3344d5aa91c135875a5f047305e618739a8.roa (raw, json)
Hash identifier:          FZytSjMrk4xJI+eu0ywSJxhLHsLXUcIeJE5yRn44x/8=
Subject key identifier:   DD:AB:71:60:17:11:DB:28:59:C2:A1:3D:68:74:2C:80:F7:98:B2:D6
Certificate issuer:       /CN=625ec2a5fa3896ecb1a7cf20dde15bcd7428ab29
Certificate serial:       0D3388
Authority key identifier: 1F:0E:05:7F:DF:3A:D4:A8:C5:FD:D3:C2:AC:2F:DC:93:DA:B8:AE:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/625ec2a5fa3896ecb1a7cf20dde15bcd7428ab29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2896f919-a17b-4066-92a5-0ebc13ac3c77/893fc3344d5aa91c135875a5f047305e618739a8.roa
Signing time:             Wed 24 Mar 2021 14:32:45 +0000
ROA not before:           Wed 24 Mar 2021 14:32:45 +0000
ROA not after:            Tue 24 Mar 2026 14:32:45 +0000
asID:                     266721
IP address blocks:        45.229.204.0/22 maxlen: 24
                          2803:2320::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865160 (0xd3388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625ec2a5fa3896ecb1a7cf20dde15bcd7428ab29
        Validity
            Not Before: Mar 24 14:32:45 2021 GMT
            Not After : Mar 24 14:32:45 2026 GMT
        Subject: CN=893fc3344d5aa91c135875a5f047305e618739a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:50:c2:d0:fc:ab:78:a1:27:58:e5:95:9e:
                    dd:04:e6:30:1c:09:69:0a:09:c3:f9:57:ad:42:52:
                    e0:73:af:bd:42:ce:b1:63:ab:62:07:e1:e5:bb:84:
                    8c:3f:87:da:0a:d7:4a:1d:96:8d:75:53:76:d0:54:
                    5b:13:6b:fc:8c:c8:29:32:e8:54:43:37:48:e4:e5:
                    35:0d:36:e2:54:28:69:5d:dd:02:0c:54:d8:84:51:
                    a6:66:ad:34:b4:de:4b:54:3a:9b:50:7f:78:65:38:
                    37:2a:7d:81:83:15:18:c6:ce:43:57:87:ab:22:f3:
                    4e:fe:60:51:06:18:d3:0b:2b:46:f2:dd:1a:f2:0a:
                    37:db:25:8f:81:e6:6b:aa:84:20:88:8e:c9:d9:c5:
                    15:8f:1e:8c:13:79:39:89:73:a0:75:b1:16:79:22:
                    c6:5b:7c:d0:50:9c:70:39:d6:0d:68:15:7b:22:4e:
                    73:78:bc:ca:11:e6:67:cc:bb:15:c5:63:b8:35:fb:
                    fc:e7:7c:59:1c:9f:9c:8e:e1:98:49:06:83:70:23:
                    ba:d4:70:7d:41:18:c6:c3:b4:15:d7:1f:60:d3:87:
                    72:e4:43:7f:66:ea:57:64:1e:11:3b:d4:e7:c7:d1:
                    cd:96:eb:15:8e:69:fe:c5:8e:77:0f:78:7b:70:62:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AB:71:60:17:11:DB:28:59:C2:A1:3D:68:74:2C:80:F7:98:B2:D6
            X509v3 Authority Key Identifier:
                keyid:1F:0E:05:7F:DF:3A:D4:A8:C5:FD:D3:C2:AC:2F:DC:93:DA:B8:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/625ec2a5fa3896ecb1a7cf20dde15bcd7428ab29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2896f919-a17b-4066-92a5-0ebc13ac3c77/893fc3344d5aa91c135875a5f047305e618739a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2896f919-a17b-4066-92a5-0ebc13ac3c77/625ec2a5fa3896ecb1a7cf20dde15bcd7428ab29.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.204.0/22
                IPv6:
                  2803:2320::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:1e:46:7f:db:b9:6a:21:ab:e6:c0:1f:31:eb:cf:3d:88:8e:
         2c:19:48:cb:59:9d:93:fc:65:d6:4b:54:91:c7:4c:b6:c6:62:
         33:72:69:62:a9:e4:9c:85:cc:5a:fe:1f:e4:ac:28:c9:b9:73:
         95:55:a0:ef:69:b0:23:af:69:c0:35:2d:26:9c:34:d3:d7:cc:
         97:d5:d1:4e:ff:78:cc:77:de:08:48:cf:98:93:8e:82:bc:a9:
         b6:be:64:50:34:95:a2:bf:35:64:90:ec:5b:37:9d:a6:9c:18:
         60:13:12:0d:d8:ce:14:25:ee:ae:8b:58:90:f2:75:3f:71:48:
         95:45:fa:55:c2:93:3d:55:3e:39:54:a3:c8:d7:2b:97:eb:44:
         8b:39:4a:af:2f:36:67:b9:10:79:28:13:8d:b0:ad:5c:1b:14:
         02:8a:ea:7c:58:3d:70:f8:0f:70:46:a3:99:2c:0c:c5:26:99:
         9d:bc:e9:f1:98:99:fb:67:9f:2f:09:ea:d8:2c:a8:10:d1:d5:
         37:93:54:f0:84:b0:f0:33:64:0e:94:e2:f0:1c:64:d1:ae:c1:
         cb:9e:10:9b:b6:35:4c:17:07:60:88:ce:14:dc:6b:82:ee:59:
         8a:1c:83:05:ca:34:fd:31:9a:27:73:a3:de:5c:bb:d9:2d:fb:
         72:01:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----