Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3213a133-5784-4719-8018-fc3fc2b23bed/03e5f92e6bb553e8e8462a2faed9129461ccdb3c.roa
File:                     03e5f92e6bb553e8e8462a2faed9129461ccdb3c.roa (raw, json)
Hash identifier:          X+pAZeFXx781hK1OGr4uMNDZIJPNjHu7F3hzD81vK24=
Subject key identifier:   74:2A:AE:50:2F:D5:A7:C6:CD:CF:42:51:80:BB:B2:ED:F1:24:F4:25
Certificate issuer:       /CN=4eefc21efdf018c51b59542117158f02acdd350c
Certificate serial:       052A
Authority key identifier: 54:21:CF:A2:7E:1B:27:24:CB:FB:DF:39:5F:BD:52:6B:45:69:97:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4eefc21efdf018c51b59542117158f02acdd350c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3213a133-5784-4719-8018-fc3fc2b23bed/03e5f92e6bb553e8e8462a2faed9129461ccdb3c.roa
Signing time:             Tue 15 Jun 2021 16:26:03 +0000
ROA not before:           Tue 15 Jun 2021 03:00:00 +0000
ROA not after:            Thu 15 Jun 2023 03:00:00 +0000
asID:                     27843
IP address blocks:        45.231.80.0/22 maxlen: 24
                          2803:1320::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eefc21efdf018c51b59542117158f02acdd350c
        Validity
            Not Before: Jun 15 03:00:00 2021 GMT
            Not After : Jun 15 03:00:00 2023 GMT
        Subject: CN=03e5f92e6bb553e8e8462a2faed9129461ccdb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:6a:11:8f:94:eb:60:88:cf:4f:15:05:a1:
                    b3:8c:51:56:04:b6:11:0d:1e:f9:4c:75:06:b7:6e:
                    47:61:19:5a:83:74:a0:d2:e3:6d:72:12:ad:a5:ab:
                    cd:4b:2f:10:56:ed:d3:b1:b9:00:de:f9:3b:f9:9a:
                    26:2a:ef:4f:1c:c6:c4:2c:e3:85:9b:7d:ff:13:ab:
                    2a:14:a8:06:a0:28:d9:f5:8b:ed:57:ef:08:92:10:
                    19:6a:2f:81:0e:cc:c6:af:43:4f:7f:cd:94:11:12:
                    3b:f0:f7:14:08:ed:6b:cf:cd:7f:f8:56:a8:aa:70:
                    41:41:ef:b7:5c:73:51:92:fc:47:4a:50:00:09:18:
                    6e:56:60:2a:ff:8d:ff:62:c6:6c:c8:67:dc:f2:bc:
                    0a:f6:27:b4:91:dd:23:e6:ef:14:13:50:23:23:79:
                    27:d0:63:29:b4:ec:b1:5d:28:b0:99:b0:8e:b4:94:
                    9a:2f:e9:a7:53:60:5c:cc:1f:b0:29:09:84:6a:ae:
                    43:7c:d3:76:30:83:3a:ce:ac:06:01:45:a1:dc:41:
                    a4:60:de:e7:ba:1f:1f:40:83:52:2e:d2:77:65:c5:
                    0e:00:1e:c5:91:f3:05:4d:1e:ad:40:c2:87:cf:4e:
                    3a:9b:ca:dc:63:85:ec:59:5f:ab:61:c0:e5:ba:5c:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2A:AE:50:2F:D5:A7:C6:CD:CF:42:51:80:BB:B2:ED:F1:24:F4:25
            X509v3 Authority Key Identifier:
                keyid:54:21:CF:A2:7E:1B:27:24:CB:FB:DF:39:5F:BD:52:6B:45:69:97:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4eefc21efdf018c51b59542117158f02acdd350c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3213a133-5784-4719-8018-fc3fc2b23bed/03e5f92e6bb553e8e8462a2faed9129461ccdb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3213a133-5784-4719-8018-fc3fc2b23bed/4eefc21efdf018c51b59542117158f02acdd350c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.80.0/22
                IPv6:
                  2803:1320::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:6e:e6:ba:ec:8d:2a:90:25:94:3a:e9:23:e0:34:62:cd:
         d8:a9:5e:e5:f1:df:df:f9:9f:bd:e0:fc:80:73:7b:1c:64:c5:
         6b:7b:17:f1:13:62:cd:49:88:2b:b5:93:da:9c:c8:9f:ac:01:
         78:54:a4:5d:2f:d7:96:11:ab:24:7b:3f:ad:ff:fe:1e:72:5b:
         dd:99:1d:bc:71:e3:15:a6:d9:88:20:c2:e5:f5:24:13:79:11:
         c2:72:36:7c:37:c3:a5:19:67:90:1a:a9:6f:c4:82:5d:4f:23:
         f0:8a:73:17:a7:a0:28:f1:36:7c:4a:04:2f:46:a2:33:ec:67:
         79:80:15:b3:37:4c:d6:e9:a9:a4:5e:d6:a3:dd:b9:48:37:86:
         1a:d2:6b:1e:32:4c:a4:cd:f5:fb:89:8f:0b:a4:49:c7:33:c3:
         71:21:af:a4:db:51:1e:d5:12:cd:ef:7e:27:c6:ec:b2:b0:2a:
         08:03:0a:37:40:48:0a:67:c5:77:dc:f2:05:5a:89:26:0d:a1:
         43:c6:4a:3b:cb:91:4e:53:ef:3a:8b:47:23:2c:a5:f5:08:e3:
         3f:b6:5c:71:1c:5c:6e:cb:68:08:05:dc:9b:9b:83:ab:03:6a:
         ed:bf:55:a6:e3:05:50:2b:16:d1:58:80:4b:09:ee:cd:67:ae:
         24:b9:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----