Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/b0923b8db1fc1548502d9784acf259dbcd0e0ee0.roa
File:                     b0923b8db1fc1548502d9784acf259dbcd0e0ee0.roa (raw, json)
Hash identifier:          0hoUk4WP4Km9eddGCbpEjWNHKqYKZmsJ09mFnXcRWd4=
Subject key identifier:   87:8C:70:E9:54:E3:8A:ED:18:28:48:32:D5:23:A1:1B:BA:47:9E:74
Certificate issuer:       /CN=4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b
Certificate serial:       0BD958
Authority key identifier: AA:FA:20:A0:D9:02:10:11:8A:58:48:E4:08:F2:73:BF:8C:7E:70:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/b0923b8db1fc1548502d9784acf259dbcd0e0ee0.roa
Signing time:             Wed 24 Mar 2021 14:45:02 +0000
ROA not before:           Wed 24 Mar 2021 14:45:02 +0000
ROA not after:            Tue 24 Mar 2026 14:45:02 +0000
asID:                     269770
IP address blocks:        45.182.188.0/24 maxlen: 24
                          2803:ed60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776536 (0xbd958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b
        Validity
            Not Before: Mar 24 14:45:02 2021 GMT
            Not After : Mar 24 14:45:02 2026 GMT
        Subject: CN=b0923b8db1fc1548502d9784acf259dbcd0e0ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:2f:f4:86:eb:21:e5:25:55:d7:84:8d:93:
                    79:d1:08:e8:f8:70:9f:7b:eb:11:0e:bc:c5:eb:53:
                    cd:f6:39:61:3d:66:86:24:ef:c9:a7:cd:05:2f:a1:
                    c6:f8:24:9e:17:44:e5:63:ac:e6:e5:49:21:c9:28:
                    0a:3e:bf:f5:47:a8:01:dc:5f:4d:a2:39:7f:fc:c9:
                    31:85:c4:9d:b2:53:d9:4c:37:31:28:1e:7b:18:0e:
                    84:0a:ab:9d:e2:6e:2f:28:cd:25:6f:e2:9b:7e:9a:
                    6a:68:49:f3:19:c0:38:15:b0:93:bb:d6:95:90:2b:
                    52:61:16:57:c0:a7:a8:fc:d6:3c:18:82:cb:e8:c7:
                    07:e6:5d:eb:96:3e:9d:b2:5e:47:91:de:e4:b5:e6:
                    37:06:3c:28:20:89:cd:73:d3:91:68:09:80:d0:c4:
                    a4:30:6c:08:a5:b1:4c:78:44:90:e3:97:ee:43:6e:
                    a2:c2:2a:7c:7d:8b:22:42:95:23:13:2a:57:f4:58:
                    3d:4c:4c:d4:25:c8:22:61:92:52:41:0a:25:42:78:
                    b5:7f:d1:33:ec:b4:00:45:35:1e:2f:c8:d6:9a:32:
                    e9:49:c5:a7:9f:d1:2b:83:f3:9b:1a:b2:a1:53:29:
                    fe:61:76:47:b1:0e:58:b6:a5:06:02:44:95:d1:4b:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:70:E9:54:E3:8A:ED:18:28:48:32:D5:23:A1:1B:BA:47:9E:74
            X509v3 Authority Key Identifier:
                keyid:AA:FA:20:A0:D9:02:10:11:8A:58:48:E4:08:F2:73:BF:8C:7E:70:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/b0923b8db1fc1548502d9784acf259dbcd0e0ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a515a2b-0a72-4035-beaf-10da20bc8dc5/4a4eff0fb9c7b05c84f071fe474cc2f1cc9f498b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.188.0/24
                IPv6:
                  2803:ed60::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:38:93:e1:4e:6c:f4:27:f8:61:91:49:89:4d:8b:c0:0e:
         d2:3f:2b:53:cb:14:7f:e2:17:56:08:0e:e2:62:af:6a:1b:32:
         96:60:be:ee:30:21:ee:e9:92:8e:b9:43:41:67:b6:c5:c0:9f:
         6c:fc:d4:67:ba:c4:0f:eb:b8:63:db:fa:e5:a8:00:37:75:5d:
         db:6f:68:76:b3:a5:f6:32:8e:b6:7c:1e:63:aa:d4:75:a0:2b:
         45:fa:00:5f:cb:97:a6:a9:8a:1a:6f:86:84:78:8e:f1:80:ec:
         e9:de:74:c5:09:d0:c2:82:a7:c8:83:dd:83:7d:7e:4c:14:f0:
         e8:49:a9:c7:7a:77:f6:2e:b2:7c:30:00:61:d4:d4:83:38:89:
         bf:ac:a2:14:30:1d:04:08:ba:b1:67:53:a1:d3:26:15:61:a2:
         63:da:51:fb:66:a8:b8:43:33:77:0d:2f:1e:4f:71:36:12:d3:
         39:ed:66:4d:99:72:32:7b:c8:36:f0:14:be:12:21:56:f0:c9:
         ee:4f:f6:52:6a:e9:07:19:ff:33:40:af:d4:18:6e:ce:83:8d:
         b1:80:47:12:df:54:f1:79:11:8a:a4:38:f5:52:f0:42:42:b5:
         39:6f:81:02:11:5d:01:03:79:c0:2e:72:6c:39:17:89:fc:a5:
         66:10:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----