Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/7d6ad6a5065321d0aac98d660ae4c1584d26572c.roa
File:                     7d6ad6a5065321d0aac98d660ae4c1584d26572c.roa (raw, json)
Hash identifier:          l6jTFOXkWMAvHWG22DWGYhb94oSjoLdg9IwlHnqmccI=
Subject key identifier:   C3:8E:53:A2:BB:23:7B:D4:1F:C6:C9:A1:D2:DE:83:1A:37:C9:19:C4
Certificate issuer:       /CN=dc1bcde4257235b8bb3002cd9de9f796cf885894
Certificate serial:       0E6BCF
Authority key identifier: 1A:B6:6F:C0:8F:56:22:99:7E:8E:35:BF:6F:14:98:15:D0:C1:06:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc1bcde4257235b8bb3002cd9de9f796cf885894.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/7d6ad6a5065321d0aac98d660ae4c1584d26572c.roa
Signing time:             Fri 02 Jul 2021 17:49:22 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266752
IP address blocks:        45.232.144.0/22 maxlen: 24
                          2803:bb20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945103 (0xe6bcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1bcde4257235b8bb3002cd9de9f796cf885894
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7d6ad6a5065321d0aac98d660ae4c1584d26572c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:57:0f:9c:52:e1:f2:e3:7f:d0:8e:27:69:
                    94:01:57:d9:be:6f:1d:ca:ed:b0:a2:e1:16:1c:98:
                    16:b4:67:5d:c6:32:a8:15:b7:97:50:67:06:30:fe:
                    8f:e6:59:e0:af:b9:e3:dd:33:07:f6:78:de:5a:39:
                    70:ad:c1:05:7f:a1:f6:f7:df:58:6b:40:7f:80:c9:
                    47:82:0f:df:ed:cf:90:01:5a:ab:65:4a:97:f3:2f:
                    fe:6f:43:9d:d8:c1:96:98:c6:93:8d:37:5e:86:31:
                    51:1c:75:87:4c:49:6a:84:84:c6:d2:74:d7:df:83:
                    03:71:27:3e:8a:c1:22:21:2f:2a:1f:60:49:48:72:
                    c2:60:d1:59:11:ad:e3:59:41:80:f4:75:8d:77:f5:
                    95:52:a4:bc:1b:57:e2:bc:41:23:97:97:84:3a:55:
                    0e:28:ff:0c:48:a4:cb:4e:b7:c1:bf:c6:4b:66:09:
                    5e:35:0c:ba:68:3c:18:19:03:d1:d4:69:be:56:a9:
                    94:ed:0c:a4:0f:b0:13:ec:87:a5:c5:7d:a7:5e:1c:
                    61:ce:b2:16:29:a0:1e:3a:4f:4a:38:09:de:cd:f2:
                    b6:1e:b5:ef:7f:a4:1b:70:af:ef:98:23:70:c4:cf:
                    20:95:12:06:0e:46:a6:0d:90:f9:d1:9b:9b:1a:fc:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:53:A2:BB:23:7B:D4:1F:C6:C9:A1:D2:DE:83:1A:37:C9:19:C4
            X509v3 Authority Key Identifier:
                keyid:1A:B6:6F:C0:8F:56:22:99:7E:8E:35:BF:6F:14:98:15:D0:C1:06:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc1bcde4257235b8bb3002cd9de9f796cf885894.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/7d6ad6a5065321d0aac98d660ae4c1584d26572c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/491ca361-d845-400a-ab2f-fb40ec1fa6e5/dc1bcde4257235b8bb3002cd9de9f796cf885894.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.144.0/22
                IPv6:
                  2803:bb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:e9:b1:24:46:62:40:16:ec:fa:9e:da:a1:2e:91:cb:b9:
         cb:78:dd:ed:c5:7d:7a:d0:b2:90:3b:0d:61:b6:95:bf:29:3e:
         7b:60:c0:71:5c:51:45:85:87:95:0d:8e:8c:d2:7f:62:1d:44:
         37:de:86:be:ce:ef:71:81:40:f0:c2:48:38:d3:55:1f:c7:ec:
         a4:09:39:2a:9d:7f:69:96:09:46:03:25:0b:d5:83:a2:0d:aa:
         3a:81:04:f1:5d:01:41:a7:0b:8f:7f:4e:cb:7d:d1:a0:00:01:
         2e:7c:4c:c1:35:b1:4f:ce:62:05:c0:bb:5c:9d:a0:ec:8b:a4:
         9b:f8:b6:72:b8:ba:42:9e:49:39:9e:d1:84:44:4d:a4:53:af:
         0b:da:db:98:b3:c3:dc:8e:00:8c:df:d7:ac:6c:3d:3b:50:33:
         64:1c:20:0b:2a:57:78:9d:f1:75:ef:8e:11:48:3e:3f:49:0a:
         fb:c7:96:f2:0a:8a:6a:e0:8d:31:ed:b4:5d:5d:f2:a2:41:4b:
         6a:c7:de:33:12:bd:e0:a1:43:e5:76:a6:04:e4:71:8c:a9:78:
         f5:46:80:a5:bf:9e:58:ea:ca:f0:59:f7:eb:96:ff:12:5b:30:
         9b:1e:8e:09:43:be:72:67:b4:57:a2:ba:93:87:86:cd:ac:10:
         98:92:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----