Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e778ebb-e25a-4929-be47-73ac4f9543b6/da4b0cb17b44e57d6618e5cde2175c0c5215c43b.roa
File:                     da4b0cb17b44e57d6618e5cde2175c0c5215c43b.roa (raw, json)
Hash identifier:          FdQPhSFhS9D124slESSdQw/bjHHYrns+vz6Tc+MJ0xg=
Subject key identifier:   32:C6:4E:E8:5A:B3:1D:EA:64:9F:C3:DD:81:F1:3E:2E:D1:A0:10:43
Certificate issuer:       /CN=6eb164b7b41804585b6373a77bbd26eb791a3004
Certificate serial:       0B9695
Authority key identifier: 40:85:61:A7:60:2C:50:75:70:C2:D0:31:81:B5:39:69:0D:87:1D:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6eb164b7b41804585b6373a77bbd26eb791a3004.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e778ebb-e25a-4929-be47-73ac4f9543b6/da4b0cb17b44e57d6618e5cde2175c0c5215c43b.roa
Signing time:             Wed 24 Mar 2021 14:45:17 +0000
ROA not before:           Wed 24 Mar 2021 14:45:17 +0000
ROA not after:            Tue 24 Mar 2026 14:45:17 +0000
asID:                     269758
IP address blocks:        45.183.41.0/24 maxlen: 24
                          2801:13:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759445 (0xb9695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb164b7b41804585b6373a77bbd26eb791a3004
        Validity
            Not Before: Mar 24 14:45:17 2021 GMT
            Not After : Mar 24 14:45:17 2026 GMT
        Subject: CN=da4b0cb17b44e57d6618e5cde2175c0c5215c43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:19:e2:8d:15:cd:5c:e1:e8:3f:49:16:ee:
                    b4:1c:f5:5d:d4:c6:5a:b0:ec:33:d1:19:c8:e4:c0:
                    88:59:dd:16:d5:04:4e:94:5b:ef:a6:f3:a4:6a:64:
                    f2:52:93:6f:2b:ca:8f:75:d8:cc:ed:a9:5d:c9:73:
                    49:67:9d:79:c6:27:9e:a1:a4:1f:92:67:80:ee:39:
                    bd:dc:cb:41:16:44:bb:5c:d9:0e:38:63:db:a2:66:
                    69:d8:5f:9c:a2:80:25:5f:c0:39:d3:7d:59:6b:bc:
                    e1:47:67:64:df:af:5f:75:c7:6b:ef:85:27:cf:ba:
                    0c:c7:de:04:f7:c0:d0:aa:43:88:20:f0:58:7e:84:
                    72:21:44:69:5d:5e:d5:bb:e4:d3:50:f7:60:04:71:
                    7f:2f:85:25:1d:c6:99:86:7b:7e:3e:f4:2c:cb:b6:
                    98:71:6a:84:b3:f9:93:bc:d0:25:ff:0a:ed:eb:b9:
                    6d:c5:1b:17:53:98:74:f3:8c:df:80:25:bd:00:a0:
                    1c:47:16:87:9a:05:09:0c:9c:1c:6f:75:3e:54:6b:
                    98:09:01:63:fa:cb:29:c5:58:6d:59:48:93:42:69:
                    ee:76:5c:8a:ff:47:83:8a:e4:72:9b:e4:f8:57:57:
                    6b:cd:cf:49:71:41:c9:8a:6c:21:88:06:ed:05:ec:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:4E:E8:5A:B3:1D:EA:64:9F:C3:DD:81:F1:3E:2E:D1:A0:10:43
            X509v3 Authority Key Identifier:
                keyid:40:85:61:A7:60:2C:50:75:70:C2:D0:31:81:B5:39:69:0D:87:1D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6eb164b7b41804585b6373a77bbd26eb791a3004.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e778ebb-e25a-4929-be47-73ac4f9543b6/da4b0cb17b44e57d6618e5cde2175c0c5215c43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e778ebb-e25a-4929-be47-73ac4f9543b6/6eb164b7b41804585b6373a77bbd26eb791a3004.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.41.0/24
                IPv6:
                  2801:13:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:89:c1:18:e3:e9:64:18:dd:e4:8e:a7:e9:32:a5:c3:19:a2:
         a9:12:ff:fd:6c:eb:ae:d7:fe:cb:ab:dc:2d:5d:b6:0a:6c:94:
         ab:62:e4:bf:05:94:95:9e:66:41:e6:ad:63:3a:e3:1a:28:a1:
         c8:4d:36:fb:9f:8e:d0:cb:78:d5:29:bf:97:5d:cd:22:c5:bc:
         0f:be:02:22:23:20:4c:0f:a6:86:51:e6:6d:fc:ed:15:d8:8f:
         98:b2:15:27:63:26:3f:65:9e:7b:4b:cf:a4:b6:bb:3b:c8:94:
         60:8f:cb:2c:0f:e6:49:1a:09:61:38:78:a6:e3:9f:6f:7e:09:
         b0:36:d9:a9:1c:af:ed:64:c1:b5:68:f9:67:1a:f4:84:7d:b1:
         36:2c:1d:d2:69:a2:96:dd:bc:e9:e5:b6:44:e9:f1:ce:a6:21:
         35:db:28:2b:de:19:1e:50:05:d5:ce:dd:a3:66:2f:42:e2:b9:
         05:53:89:38:73:a2:3e:93:46:74:36:91:1d:d4:34:b4:09:3d:
         2e:75:70:3c:24:6a:1d:1c:71:0f:8c:42:d6:51:6a:29:2e:3b:
         e2:2d:25:aa:fb:84:4d:33:6d:35:ea:36:41:4c:45:c5:80:23:
         38:78:0f:f7:6b:18:93:6e:1c:1e:91:ba:fc:bf:c4:0b:36:be:
         e3:bf:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----