Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/83f0f0096ca5abe9da13794e7911fb616abb0188.roa
File:                     83f0f0096ca5abe9da13794e7911fb616abb0188.roa (raw, json)
Hash identifier:          uhmuW7IS/1czRFe+CS/xPqZL3vN+N+YhZdLCDhCzk7g=
Subject key identifier:   4B:C6:B8:FF:47:A6:71:16:AD:A8:DD:8A:55:49:32:68:E1:44:E8:FA
Certificate issuer:       /CN=141d26efc804cf968706456af6b6adc1a1fe5f14
Certificate serial:       0C8FFC
Authority key identifier: 02:02:98:9A:1D:C6:78:38:1E:3A:D0:19:69:3B:B6:BF:46:D8:A9:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/141d26efc804cf968706456af6b6adc1a1fe5f14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/83f0f0096ca5abe9da13794e7911fb616abb0188.roa
Signing time:             Wed 24 Mar 2021 14:33:12 +0000
ROA not before:           Wed 24 Mar 2021 14:33:12 +0000
ROA not after:            Tue 24 Mar 2026 14:33:12 +0000
asID:                     266878
IP address blocks:        45.160.72.0/22 maxlen: 24
                          2803:baa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823292 (0xc8ffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141d26efc804cf968706456af6b6adc1a1fe5f14
        Validity
            Not Before: Mar 24 14:33:12 2021 GMT
            Not After : Mar 24 14:33:12 2026 GMT
        Subject: CN=83f0f0096ca5abe9da13794e7911fb616abb0188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:9b:a6:bf:e2:75:2f:5e:12:19:58:d0:bc:
                    25:49:75:cf:38:a7:bf:62:f5:e0:45:ee:ce:11:7f:
                    de:3d:64:93:66:65:a6:1c:75:16:d4:37:57:10:39:
                    a2:d3:fd:ee:7b:2e:f8:3f:2a:9b:6f:bc:c3:f3:29:
                    c7:2c:48:1a:59:64:2c:a0:60:df:dd:cb:bc:68:0c:
                    1d:69:d5:5c:78:5b:e9:3c:e7:84:9b:d3:b7:0e:1e:
                    3d:92:55:6a:94:9a:13:dc:61:8f:af:cd:05:3d:f5:
                    33:94:ab:0c:e0:33:af:54:b4:b6:fd:cd:96:51:6f:
                    8d:c3:7a:93:14:70:fb:42:7d:52:89:ca:92:60:b9:
                    18:70:a2:24:7f:ca:d6:3c:37:b9:d2:15:d0:ef:7a:
                    48:76:8e:07:68:1e:43:4a:81:d6:d4:24:bf:e3:54:
                    51:5b:fe:c1:41:84:d7:c9:18:3c:9e:60:6d:25:ae:
                    42:94:55:0f:db:8b:ae:f6:96:93:0c:b2:85:fe:2e:
                    fb:21:d5:3a:f2:35:f5:10:46:d3:93:06:26:9d:2a:
                    47:99:05:83:e6:00:48:33:ed:b5:4a:14:df:56:08:
                    77:f8:4a:5c:68:78:8c:95:35:08:4b:b0:ca:fc:89:
                    5f:ec:21:02:6e:c3:da:69:62:d1:cb:38:3e:f3:6d:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C6:B8:FF:47:A6:71:16:AD:A8:DD:8A:55:49:32:68:E1:44:E8:FA
            X509v3 Authority Key Identifier:
                keyid:02:02:98:9A:1D:C6:78:38:1E:3A:D0:19:69:3B:B6:BF:46:D8:A9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/141d26efc804cf968706456af6b6adc1a1fe5f14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/83f0f0096ca5abe9da13794e7911fb616abb0188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471cfff9-e927-4cde-9a40-0b974219d425/141d26efc804cf968706456af6b6adc1a1fe5f14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.72.0/22
                IPv6:
                  2803:baa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:f0:fa:27:f9:29:6b:53:a0:5f:18:a1:4d:6c:28:f0:f6:
         1a:cc:1e:44:99:03:a2:82:d7:52:94:3f:6d:6c:94:41:74:fe:
         51:f1:64:fb:a3:4a:36:10:98:47:19:d9:db:5c:4b:3b:bf:52:
         40:b3:cf:d5:c0:00:9c:5a:e8:ef:4c:d8:b9:b3:1d:c5:39:cd:
         d5:fc:62:0e:0d:cb:a3:9a:6d:21:63:1d:80:00:5a:22:e4:cf:
         66:8a:d2:8e:b7:91:0f:cd:49:3f:d5:f6:eb:2c:f3:8a:ec:20:
         2c:57:d7:34:e7:90:03:32:53:56:82:9b:66:a4:b5:ff:c9:ad:
         e5:c5:31:63:c0:32:5f:a0:d2:81:1a:a3:2e:0b:b5:41:a7:c2:
         a5:2a:6b:d7:98:88:0e:b3:83:c1:5f:b1:d6:cb:bd:d7:d0:54:
         d3:69:d9:af:0b:77:c7:d5:8b:65:eb:cf:d2:81:f0:5e:07:1e:
         22:31:16:73:3f:cd:39:fa:7b:db:2f:6c:03:95:cb:5a:6d:ec:
         7b:c0:0c:d8:8f:a3:9a:1f:1a:47:b3:87:af:0f:7d:d4:c6:eb:
         ad:13:c5:df:8b:65:58:a1:ba:c0:94:f9:cb:65:92:4a:36:36:
         31:7f:53:bf:d3:bd:c1:94:53:71:45:86:7f:2c:59:7e:a9:be:
         8d:bb:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----