Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/394dcad7-4761-400e-9aa5-c536c4fe6739/53573bcc04c063540b0e0927af75c945f7c7c2b8.roa
File:                     53573bcc04c063540b0e0927af75c945f7c7c2b8.roa (raw, json)
Hash identifier:          CEqQruvYO40LmaBrGi4mLey2zRhFcJbB18NzQ8A5qGU=
Subject key identifier:   C2:1E:F8:5F:27:DE:59:7C:D3:8F:57:8A:6F:16:A8:1A:D3:E2:76:15
Certificate issuer:       /CN=343db32801037d3f773d0b306bb21f42048e16f1
Certificate serial:       0CF1B6
Authority key identifier: 93:71:BB:EC:8D:A6:EA:ED:B5:32:55:CD:EB:EF:7E:99:38:F2:FC:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/343db32801037d3f773d0b306bb21f42048e16f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/394dcad7-4761-400e-9aa5-c536c4fe6739/53573bcc04c063540b0e0927af75c945f7c7c2b8.roa
Signing time:             Wed 24 Mar 2021 14:33:56 +0000
ROA not before:           Wed 24 Mar 2021 14:33:55 +0000
ROA not after:            Tue 24 Mar 2026 14:33:55 +0000
asID:                     265871
IP address blocks:        45.227.62.0/23 maxlen: 23
                          2803:ce20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848310 (0xcf1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=343db32801037d3f773d0b306bb21f42048e16f1
        Validity
            Not Before: Mar 24 14:33:55 2021 GMT
            Not After : Mar 24 14:33:55 2026 GMT
        Subject: CN=53573bcc04c063540b0e0927af75c945f7c7c2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:fb:41:24:42:ca:2d:47:91:ba:5f:24:5d:
                    ab:92:6c:ee:b7:e3:00:ba:3c:18:4e:d5:c9:a7:e3:
                    a7:b2:d7:14:e5:48:cb:03:32:cc:9f:f3:0a:65:3c:
                    1d:4f:1c:55:16:92:b8:67:eb:2a:71:f3:9e:ec:68:
                    ea:29:2b:de:25:54:67:ae:fe:17:c9:96:4e:a2:ae:
                    65:b6:f6:9d:fb:bf:d4:ae:03:57:c3:89:59:7e:01:
                    5e:62:3e:ef:dc:bb:a7:3e:d3:8c:d2:e2:09:0c:a4:
                    5e:f2:fb:e4:07:70:45:ee:21:2e:ba:a2:e2:e1:42:
                    f4:e6:14:6d:bb:e0:19:fd:0e:36:8f:f6:30:01:bc:
                    49:6d:68:d1:af:4d:75:da:ce:42:87:f7:c4:e5:b5:
                    76:30:41:0c:5e:31:17:4a:8a:cb:1e:45:2f:15:56:
                    8a:df:88:a2:08:8e:d3:0c:d3:90:cb:44:7f:31:12:
                    01:20:2e:9e:18:82:6b:34:41:63:40:ef:aa:37:79:
                    ef:ea:a4:67:c8:70:29:45:32:db:61:cf:51:14:b3:
                    13:da:a1:c1:73:e8:1e:f7:3b:c6:f2:51:c3:5f:94:
                    e1:0c:a4:1b:e0:06:7e:b2:2d:01:6d:af:4f:9d:85:
                    7d:ba:46:6d:90:39:12:54:d3:0b:f3:6c:6f:c8:bb:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1E:F8:5F:27:DE:59:7C:D3:8F:57:8A:6F:16:A8:1A:D3:E2:76:15
            X509v3 Authority Key Identifier:
                keyid:93:71:BB:EC:8D:A6:EA:ED:B5:32:55:CD:EB:EF:7E:99:38:F2:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/343db32801037d3f773d0b306bb21f42048e16f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/394dcad7-4761-400e-9aa5-c536c4fe6739/53573bcc04c063540b0e0927af75c945f7c7c2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/394dcad7-4761-400e-9aa5-c536c4fe6739/343db32801037d3f773d0b306bb21f42048e16f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.62.0/23
                IPv6:
                  2803:ce20::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:74:e6:4b:fc:4a:fa:0a:96:60:f8:0f:de:fc:38:a7:c2:8b:
         93:79:70:1e:a1:1f:5e:48:05:9e:78:58:fe:26:3a:1c:23:c7:
         8d:3b:5b:82:3b:66:14:c9:25:0e:59:87:09:7f:c0:98:ff:04:
         bd:96:76:9c:8a:bf:14:37:d9:b6:03:ab:85:0a:56:57:7d:0b:
         d2:ea:a1:73:be:5e:2f:fc:77:c8:21:ff:14:53:cb:5e:52:1e:
         a8:b6:da:ea:89:f6:be:5d:6b:8b:84:d4:55:ff:8c:11:fd:a5:
         ec:b3:af:b5:0c:ce:1c:41:45:1c:c3:66:de:ef:48:be:ef:19:
         a6:de:ac:72:4a:3c:ff:a0:87:46:19:a9:0d:fd:0a:80:da:72:
         66:64:16:7c:fd:06:5b:f6:ca:25:55:83:a1:60:9b:db:50:45:
         60:7e:31:4f:ef:51:3d:04:6d:fc:4a:12:62:07:23:9d:8e:8c:
         14:7d:f7:0c:8f:19:ab:c4:92:b5:3e:67:c5:58:f7:5c:3a:f2:
         db:bb:ed:00:8b:a8:18:d6:65:56:6f:68:5d:40:24:20:df:27:
         f7:47:86:65:c2:82:23:47:4d:01:48:97:65:e7:4c:ff:b7:61:
         1c:7d:5e:4e:83:2c:fb:71:6f:cd:46:66:e8:84:6c:af:e8:66:
         11:89:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----