Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/8103e22b5d0d5b4654b631c85933b7fcd08444d8.roa
File:                     8103e22b5d0d5b4654b631c85933b7fcd08444d8.roa (raw, json)
Hash identifier:          JJUB3P4ZiwaETeiOhU/e6cHALlaVIHLhY6X+7uKC2YE=
Subject key identifier:   75:EA:4C:A0:74:FF:E4:FB:4E:D1:D9:15:56:60:FE:A5:78:7F:FB:87
Certificate issuer:       /CN=4b8b57b22334a0b12bef09679148c1c681fc8149
Certificate serial:       0D9DD8
Authority key identifier: 97:A7:0D:2F:FD:B3:3C:24:7D:48:B4:2E:CB:CF:94:D5:41:EE:E2:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b8b57b22334a0b12bef09679148c1c681fc8149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/8103e22b5d0d5b4654b631c85933b7fcd08444d8.roa
Signing time:             Wed 24 Mar 2021 14:29:33 +0000
ROA not before:           Wed 24 Mar 2021 14:29:33 +0000
ROA not after:            Tue 24 Mar 2026 14:29:33 +0000
asID:                     266685
IP address blocks:        45.228.16.0/22 maxlen: 22
                          2803:a520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892376 (0xd9dd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8b57b22334a0b12bef09679148c1c681fc8149
        Validity
            Not Before: Mar 24 14:29:33 2021 GMT
            Not After : Mar 24 14:29:33 2026 GMT
        Subject: CN=8103e22b5d0d5b4654b631c85933b7fcd08444d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:4c:d4:40:75:1c:83:45:25:52:b2:8d:cd:
                    ac:cb:2a:0c:18:ed:d5:7f:91:cb:87:fd:03:e8:b3:
                    65:94:49:21:04:f8:e8:7b:86:1e:e1:c4:ca:39:c0:
                    32:b5:4b:c3:42:81:e2:b4:92:bd:0f:29:49:e9:b8:
                    98:b1:a4:e7:f6:90:1b:23:98:b3:73:7d:4b:74:ba:
                    f5:50:06:ff:4d:17:2e:03:14:11:5c:3d:f4:64:0f:
                    0b:75:2c:b9:12:5e:a5:29:88:8a:ef:78:e1:36:3a:
                    6c:3f:81:f8:9c:79:27:58:3c:9c:6b:64:92:06:ab:
                    e7:62:9b:84:b8:17:00:cb:7b:53:95:ff:b1:3c:97:
                    b4:3b:34:d6:08:25:e7:8c:8a:25:bc:00:ed:b5:41:
                    f2:eb:d0:fb:df:5d:7d:40:16:79:3e:81:b9:fb:f3:
                    f3:59:ea:a4:18:3e:bb:d0:3e:47:73:d8:75:3f:d4:
                    86:94:1d:2c:a3:aa:b8:af:2b:91:cf:73:88:70:1e:
                    86:42:d3:91:4b:e7:72:13:5c:ed:fa:08:bf:a5:ad:
                    9d:a4:91:bb:f9:d8:e6:13:3e:d5:b3:eb:cc:5e:ad:
                    72:3d:6a:42:62:7f:f0:e4:3e:67:ea:aa:36:8e:4e:
                    08:08:cf:43:cb:ec:07:70:04:43:69:0b:bc:f2:2b:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EA:4C:A0:74:FF:E4:FB:4E:D1:D9:15:56:60:FE:A5:78:7F:FB:87
            X509v3 Authority Key Identifier:
                keyid:97:A7:0D:2F:FD:B3:3C:24:7D:48:B4:2E:CB:CF:94:D5:41:EE:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b8b57b22334a0b12bef09679148c1c681fc8149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/8103e22b5d0d5b4654b631c85933b7fcd08444d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/334cdd23-fcf6-407c-ace2-f3a211f3ca81/4b8b57b22334a0b12bef09679148c1c681fc8149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.16.0/22
                IPv6:
                  2803:a520::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:dd:02:5f:34:9e:09:43:81:be:5d:2e:07:0c:7e:51:9a:
         c0:83:fa:46:55:65:ee:78:6d:7c:fb:12:0f:fa:12:0d:8a:bb:
         6b:89:3a:38:95:c7:60:81:ea:db:42:9e:1a:b3:3f:7d:9f:43:
         87:b7:4f:c4:2b:3f:86:0f:ee:94:14:d6:50:9e:0f:65:4f:b4:
         56:d4:e6:cd:75:da:87:9f:41:70:0f:24:f4:f9:6f:45:77:d1:
         51:b2:72:7e:be:93:ac:f5:82:77:74:41:50:62:c0:21:8b:16:
         42:a0:9f:e6:8b:03:7a:33:63:a9:82:5b:37:b9:58:43:ab:c6:
         65:ed:4f:71:79:4d:da:25:1b:4a:d5:eb:ce:83:57:0b:c9:50:
         db:a0:55:8e:47:35:1b:d4:0b:95:00:2e:a8:27:ca:36:c4:67:
         83:d5:8c:5c:11:2d:46:0f:28:0b:19:c4:eb:9f:a6:60:48:8a:
         6e:71:1e:fe:c2:8a:0c:35:d2:fe:f0:19:b5:26:70:6b:1e:e3:
         7f:1f:c5:ed:aa:34:4a:fb:70:47:ab:99:71:38:cb:12:13:0a:
         1e:b1:97:b2:e3:d2:ba:13:2a:7f:38:b2:30:02:a5:11:d6:5a:
         2e:58:a1:dd:12:a9:47:de:d3:b5:c9:8e:8c:f4:d4:36:aa:9c:
         47:89:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----