Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa
File:                     18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa (raw, json)
Hash identifier:          KwZ1iikf3k2lrxWvDNsBtYovWM6PJMvQblyvUkv8kJ8=
Subject key identifier:   95:89:16:C8:29:3D:05:9B:B0:78:17:E5:E3:D5:7A:09:8E:53:14:80
Certificate issuer:       /CN=e98b3a7ddef8f773492165299fd1cc4c656e96c9
Certificate serial:       0C48BD
Authority key identifier: 1C:59:56:31:DA:F6:42:96:39:A6:50:40:F5:B3:C6:BC:E5:1D:23:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa
Signing time:             Wed 24 Mar 2021 14:46:17 +0000
ROA not before:           Wed 24 Mar 2021 14:46:17 +0000
ROA not after:            Tue 24 Mar 2026 14:46:17 +0000
asID:                     266694
IP address blocks:        45.229.168.0/22 maxlen: 22
                          2803:7520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805053 (0xc48bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98b3a7ddef8f773492165299fd1cc4c656e96c9
        Validity
            Not Before: Mar 24 14:46:17 2021 GMT
            Not After : Mar 24 14:46:17 2026 GMT
        Subject: CN=18e5f7f234267eef704cb6345b5ccfaf79a4ad68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:b2:db:30:52:b4:9b:fd:04:af:24:fa:05:
                    a9:93:04:17:56:22:2a:e8:0a:ac:2c:54:35:e4:4d:
                    84:b7:3f:de:06:12:6d:19:7d:32:e5:36:d0:b6:e5:
                    4d:81:7e:d7:a1:ef:ca:08:d5:57:22:a8:4a:3b:74:
                    d2:6d:bf:76:f3:e6:eb:f8:d6:ad:78:0e:ff:46:eb:
                    dd:da:74:89:ee:89:f8:e6:17:f4:69:6c:8f:18:3d:
                    b8:1e:41:ea:a5:ef:d0:2e:63:c8:1e:0c:e4:b3:9c:
                    7f:08:60:f3:d6:e8:a1:4a:1a:08:cb:ab:d7:9e:66:
                    8d:26:b6:c7:e0:18:5a:6d:31:4e:a2:74:19:33:da:
                    1c:d9:c5:24:27:6e:47:37:9f:2a:de:bd:54:54:bf:
                    8d:5d:fd:3d:91:da:f9:6d:e1:3b:e8:3b:f5:a5:75:
                    14:64:1d:18:a0:32:d4:78:65:6c:13:b5:a7:fa:66:
                    1d:62:69:5a:57:28:26:b9:6b:34:98:3b:da:ab:7c:
                    a7:7c:86:ed:e7:e3:a0:3d:f7:a2:86:f9:b0:af:d2:
                    56:0b:7e:b1:7b:bc:03:08:29:8f:17:0b:7f:c2:e3:
                    8b:aa:28:37:ff:0d:42:9a:81:b3:ef:b5:fd:1f:2b:
                    f9:ac:9b:8c:d2:e3:6b:12:48:df:9f:f3:23:59:26:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:16:C8:29:3D:05:9B:B0:78:17:E5:E3:D5:7A:09:8E:53:14:80
            X509v3 Authority Key Identifier:
                keyid:1C:59:56:31:DA:F6:42:96:39:A6:50:40:F5:B3:C6:BC:E5:1D:23:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e98b3a7ddef8f773492165299fd1cc4c656e96c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/18e5f7f234267eef704cb6345b5ccfaf79a4ad68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3610cc96-62c5-4998-a956-b9430c979458/e98b3a7ddef8f773492165299fd1cc4c656e96c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.168.0/22
                IPv6:
                  2803:7520::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:4a:d8:76:8f:fa:59:e4:8c:99:94:db:68:61:c5:2c:5e:
         82:d1:1e:2b:9e:af:0f:87:82:a9:d2:fb:22:bb:dd:1c:7f:16:
         18:3f:d1:de:27:b8:7d:4a:7d:d7:50:3b:9e:87:e9:69:b4:f0:
         87:81:10:01:32:9f:d8:0c:c1:d2:52:3f:bd:35:90:06:91:ec:
         63:3f:23:a7:27:cf:57:81:ab:a3:3e:a1:1a:9b:e3:6d:6e:1d:
         99:8b:71:09:31:cf:33:cb:f3:0e:24:d4:da:5e:a9:8f:21:3f:
         7f:ff:5d:70:15:05:b6:6b:d6:48:5d:ae:88:e0:d3:8e:ec:76:
         7a:0b:c0:b3:bb:4d:3f:16:45:bf:af:9d:99:f7:b6:f7:61:14:
         2d:8e:9a:6d:68:14:7a:b0:51:24:c5:df:8a:5b:85:50:79:65:
         c2:77:b1:03:f9:15:f9:5c:0c:cd:51:cf:5a:de:8c:fd:25:65:
         0b:49:00:59:28:0c:85:53:16:1c:45:8a:40:d0:7f:8d:85:e6:
         7e:a1:3f:9d:f2:28:4e:4a:32:83:80:f4:28:46:71:01:b0:85:
         3e:bb:c9:96:fd:27:9f:ea:b2:9a:1f:5a:2b:72:22:6e:28:31:
         ad:4d:98:4b:26:c5:86:a2:f0:15:68:ae:52:39:9f:0c:0c:32:
         cb:d4:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----