Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3116a883-7de6-4f32-a3bf-3c1977b72da2/7fee6aa38a75f9dddd69010357a3fc426cea6a50.roa
File:                     7fee6aa38a75f9dddd69010357a3fc426cea6a50.roa (raw, json)
Hash identifier:          Pm5SeXoYrintPzhcHXm+Ksw6716WPdBQj7uQym+M3pQ=
Subject key identifier:   69:C5:5E:A5:A9:A1:38:27:94:13:30:86:05:F3:3E:D2:D1:92:7C:9E
Certificate issuer:       /CN=a9d1ad5279f7e81ef7b9147c45f0f5e754b189eb
Certificate serial:       101A0F
Authority key identifier: AF:79:A3:49:58:0C:68:57:C6:E2:B7:51:64:9C:22:B7:4F:00:4E:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9d1ad5279f7e81ef7b9147c45f0f5e754b189eb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3116a883-7de6-4f32-a3bf-3c1977b72da2/7fee6aa38a75f9dddd69010357a3fc426cea6a50.roa
Signing time:             Wed 23 Jun 2021 17:28:04 +0000
ROA not before:           Wed 16 Jun 2021 03:00:00 +0000
ROA not after:            Tue 16 Jun 2026 03:00:00 +0000
asID:                     266713
IP address blocks:        45.230.36.0/23 maxlen: 24
                          45.230.36.0/24 maxlen: 24
                          45.230.37.0/24 maxlen: 24
                          2803:8320::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055247 (0x101a0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d1ad5279f7e81ef7b9147c45f0f5e754b189eb
        Validity
            Not Before: Jun 16 03:00:00 2021 GMT
            Not After : Jun 16 03:00:00 2026 GMT
        Subject: CN=7fee6aa38a75f9dddd69010357a3fc426cea6a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:8d:32:33:4c:b0:d8:05:bd:fa:66:b0:85:
                    e4:d4:cd:fd:a9:39:f1:c5:15:e6:50:44:4f:54:f0:
                    64:ad:04:3c:29:28:03:56:92:c7:92:b4:e0:15:c1:
                    11:97:e5:d1:39:99:8b:8a:70:cb:95:11:d9:15:a7:
                    39:43:0e:43:12:29:6c:ec:89:26:63:fa:b6:2b:ed:
                    32:1e:81:e4:a5:81:9e:9f:4d:70:fa:8b:d8:89:7a:
                    14:77:b7:a5:4b:ac:e1:15:b3:8b:c1:85:47:e7:a6:
                    9e:5e:c7:0b:66:75:6f:6f:70:4f:3f:c9:22:78:6a:
                    6a:4c:87:1b:66:33:6c:e9:ec:1b:5e:f8:9e:26:4f:
                    25:5a:d7:9b:c9:51:6a:f0:cd:de:b3:02:25:07:ff:
                    46:61:22:dc:ff:ab:aa:f4:15:d9:84:cf:68:36:2a:
                    a3:e0:bd:06:a8:53:9d:21:b9:fb:2c:f4:88:6e:f2:
                    87:53:c7:4b:8f:89:71:8d:b1:e9:dd:a1:ce:0b:60:
                    fd:d1:67:a7:25:80:8c:0e:eb:85:86:d9:42:d9:d7:
                    51:52:af:da:88:85:f2:06:64:bc:45:93:c0:79:3e:
                    e4:6d:0c:ff:96:ad:dd:9e:0c:05:af:56:ea:68:e2:
                    2f:4b:db:ac:bb:e5:cf:4c:7e:1f:63:ef:7b:61:f5:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:5E:A5:A9:A1:38:27:94:13:30:86:05:F3:3E:D2:D1:92:7C:9E
            X509v3 Authority Key Identifier:
                keyid:AF:79:A3:49:58:0C:68:57:C6:E2:B7:51:64:9C:22:B7:4F:00:4E:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9d1ad5279f7e81ef7b9147c45f0f5e754b189eb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3116a883-7de6-4f32-a3bf-3c1977b72da2/7fee6aa38a75f9dddd69010357a3fc426cea6a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3116a883-7de6-4f32-a3bf-3c1977b72da2/a9d1ad5279f7e81ef7b9147c45f0f5e754b189eb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.36.0/23
                IPv6:
                  2803:8320::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:1c:e2:cf:af:29:95:46:a9:f4:cf:4c:5c:2e:8d:be:14:
         5b:34:b1:d4:48:c8:ea:28:50:11:ef:ab:44:16:05:31:3e:2f:
         be:91:f6:bf:8b:8b:62:94:6d:52:02:27:48:0a:92:a5:8f:09:
         95:ff:d0:56:1b:ae:61:76:40:c8:ac:36:3f:f2:8a:5b:78:22:
         8b:7e:eb:da:01:27:0a:01:73:0e:c7:cf:71:63:02:fb:38:f2:
         38:37:ce:39:fe:15:e5:f9:b0:16:f5:1f:69:ea:b8:f2:a7:e8:
         0f:ad:1e:bd:9e:3d:06:54:e2:6c:d2:fb:4d:56:7d:f1:f9:ea:
         cd:9b:d6:16:b9:50:04:83:2a:f6:29:34:ca:9c:35:74:67:8d:
         4d:80:20:13:72:ec:9a:ba:67:db:c0:6d:84:06:2a:ff:85:c6:
         09:8e:2b:5d:10:2b:82:7f:4b:79:2b:a6:98:a7:09:93:81:6b:
         37:17:44:b6:b0:dd:e2:25:e8:58:c1:43:a7:63:60:ea:23:f8:
         b6:7a:9a:bf:e6:c9:89:a2:37:72:a8:27:1b:7e:ac:16:cb:e5:
         20:bc:35:8f:a0:a2:88:d2:19:9f:72:fd:ee:ba:c3:50:3b:a2:
         0c:c4:1f:eb:dc:19:73:3e:d2:a0:bf:27:29:4a:48:2b:10:09:
         66:76:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----