Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/40a03b38daf12ac1509e2baebcc881a839277337.roa
File:                     40a03b38daf12ac1509e2baebcc881a839277337.roa (raw, json)
Hash identifier:          XoGiSoEMsBGcM2q7kjTZIItJRhI2nlHEzNV0AmhXCgQ=
Subject key identifier:   B7:5B:09:88:5D:37:C5:E5:62:7D:8B:47:34:02:86:CA:D9:81:88:76
Certificate issuer:       /CN=c5efbeb754882f5f2224bc2390ef7ccda9c5fff1
Certificate serial:       0619BE
Authority key identifier: 42:DD:35:19:81:AC:2F:7F:26:C5:A9:63:A0:4C:18:C8:B3:F6:58:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5efbeb754882f5f2224bc2390ef7ccda9c5fff1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/40a03b38daf12ac1509e2baebcc881a839277337.roa
Signing time:             Wed 24 Mar 2021 14:46:09 +0000
ROA not before:           Wed 24 Mar 2021 14:46:08 +0000
ROA not after:            Tue 24 Mar 2026 14:46:08 +0000
asID:                     64116
IP address blocks:        45.183.44.0/22 maxlen: 24
                          2803:cd60::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399806 (0x619be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5efbeb754882f5f2224bc2390ef7ccda9c5fff1
        Validity
            Not Before: Mar 24 14:46:08 2021 GMT
            Not After : Mar 24 14:46:08 2026 GMT
        Subject: CN=40a03b38daf12ac1509e2baebcc881a839277337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:c3:c5:39:6e:7e:7f:47:e2:d3:b7:b9:eb:
                    56:28:2c:2d:3d:d5:e9:f4:2f:d3:d9:27:d6:55:ee:
                    26:c4:30:5e:d0:1b:76:12:4e:a3:06:b4:c9:5d:fb:
                    c1:96:4e:55:1e:83:3b:4d:ff:f0:46:d7:c4:16:e0:
                    5b:6f:3a:77:f3:1e:fe:d4:df:fe:0f:94:03:37:dc:
                    3a:d1:13:42:48:b4:e9:17:a5:d4:9f:93:dd:c2:55:
                    4e:66:68:ad:90:02:61:3d:45:6a:cd:38:1a:11:2e:
                    ff:6c:b2:73:5d:cf:cd:70:73:1d:03:63:3b:9d:d8:
                    3c:89:79:08:8a:e4:bf:a3:b6:2b:87:bd:5a:f0:24:
                    a7:ca:71:71:31:41:d1:38:e4:22:9e:85:f5:3d:ab:
                    02:47:44:d2:b0:0f:2c:e2:3c:1d:0f:30:eb:93:83:
                    47:e1:b9:f4:c9:1c:16:d6:30:a5:6d:33:0c:4b:80:
                    27:a5:e4:0e:3f:d8:8a:60:14:97:f8:7e:52:33:6d:
                    5b:d5:e0:ec:62:fe:29:6a:e5:da:17:be:9f:b4:4c:
                    0e:12:4f:29:35:82:4f:1b:ed:a8:7e:ff:87:06:9b:
                    5b:fc:05:d5:75:d5:88:cb:7c:f2:15:b2:75:a8:1e:
                    42:45:ee:0a:87:6f:8e:d6:8b:ee:5b:42:8b:40:a7:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:09:88:5D:37:C5:E5:62:7D:8B:47:34:02:86:CA:D9:81:88:76
            X509v3 Authority Key Identifier:
                keyid:42:DD:35:19:81:AC:2F:7F:26:C5:A9:63:A0:4C:18:C8:B3:F6:58:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5efbeb754882f5f2224bc2390ef7ccda9c5fff1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/40a03b38daf12ac1509e2baebcc881a839277337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/c5efbeb754882f5f2224bc2390ef7ccda9c5fff1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.44.0/22
                IPv6:
                  2803:cd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ee:78:1d:ce:66:39:36:d1:c8:de:9d:42:ab:af:13:1a:4d:
         bd:15:dc:a6:e5:fd:d9:84:93:f1:95:91:36:47:74:4e:3a:84:
         cb:c3:ac:65:27:0f:bf:87:9e:7c:3f:79:98:77:40:56:4b:05:
         d8:7b:cf:5c:63:bc:50:f0:05:03:9d:e7:4d:65:23:51:2b:a2:
         a0:86:ae:45:fd:d9:d9:08:87:32:99:ca:1c:87:e3:da:12:69:
         75:c4:54:d6:95:f0:65:5e:75:4d:e2:de:34:fa:b0:c5:35:17:
         07:fe:90:fa:69:af:7a:58:87:44:4d:37:37:12:e8:f1:0f:b6:
         9f:61:e1:29:07:c6:f2:b0:43:25:0f:c2:09:95:0b:68:06:68:
         83:d6:bd:b5:7a:d2:c9:1a:85:b0:6e:59:b0:99:72:76:81:70:
         a8:82:46:c5:61:ac:db:6a:2a:b0:6e:c0:0a:af:55:c7:12:9c:
         8e:82:f7:fe:a0:7e:f8:61:39:2f:4d:2e:77:f6:63:c6:ab:fb:
         14:58:de:19:b4:39:ac:85:ee:a8:f3:7e:5c:7f:19:50:a5:b5:
         fa:af:48:64:4e:fc:f8:96:0b:16:69:cd:63:1a:78:fc:5c:e6:
         48:8e:58:d6:32:8a:56:e2:8b:b6:5e:f4:3d:3b:f8:f4:75:3c:
         4e:d4:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----