Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/b5e12c79e365597a319539762675c0382a42f306.roa
File:                     b5e12c79e365597a319539762675c0382a42f306.roa (raw, json)
Hash identifier:          0aUjU6b+5IDcxFTmfM8ZTO3tMTpgpc2pz9aKePz35tA=
Subject key identifier:   DB:CD:FA:36:2D:4C:D6:C8:A1:27:F4:15:E7:C0:2B:CA:F5:F5:BF:E5
Certificate issuer:       /CN=53eb04993eae451128bf77fb62927c254beec65e
Certificate serial:       F7EB
Authority key identifier: E3:40:1A:4D:A4:55:FA:5E:47:1B:D2:AE:AD:78:2B:88:87:63:F4:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53eb04993eae451128bf77fb62927c254beec65e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/b5e12c79e365597a319539762675c0382a42f306.roa
Signing time:             Wed 24 Nov 2021 19:54:29 +0000
ROA not before:           Wed 24 Nov 2021 03:00:00 +0000
ROA not after:            Fri 24 Nov 2023 03:00:00 +0000
asID:                     272009
IP address blocks:        45.226.59.0/24 maxlen: 24
                          2803:910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63467 (0xf7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eb04993eae451128bf77fb62927c254beec65e
        Validity
            Not Before: Nov 24 03:00:00 2021 GMT
            Not After : Nov 24 03:00:00 2023 GMT
        Subject: CN=b5e12c79e365597a319539762675c0382a42f306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:4a:cd:51:1e:d5:30:ff:04:e6:eb:04:4a:
                    16:0f:24:c2:fd:a6:d7:29:a5:4b:0a:6e:af:6c:67:
                    cc:2c:7a:a1:55:b5:3c:95:ab:2e:f1:61:08:8a:1f:
                    b9:3f:95:55:f9:f0:4e:de:ba:c1:b7:92:a8:f7:02:
                    de:e4:cb:bb:66:8d:1f:30:ee:e1:db:37:b4:09:99:
                    e0:b3:17:c7:f6:73:ce:da:92:18:2b:04:be:69:1b:
                    85:3c:24:a9:59:d4:3f:68:19:9a:c5:4b:2c:f8:cb:
                    d3:24:0c:f1:8d:99:c6:d8:50:e7:68:b3:23:29:17:
                    b9:6c:72:82:c8:a8:3b:f8:0a:79:4a:4c:0b:e3:99:
                    4d:5f:58:79:0b:a6:42:09:db:6e:b3:d7:16:df:b2:
                    64:76:4f:d9:24:cf:0b:89:ba:4c:d5:bc:55:8b:16:
                    c8:0c:5c:2d:43:7a:c0:24:c7:fb:ef:b6:54:08:73:
                    f0:0e:34:d3:f3:3d:5e:ce:40:9a:47:28:80:e4:cb:
                    c1:1c:5f:96:92:ff:b8:fe:80:b5:09:b6:b3:28:7c:
                    43:0e:c1:5b:1d:9c:84:5f:bb:72:4f:6a:04:eb:c1:
                    fc:c7:4c:c7:68:86:92:70:96:ce:f3:4d:71:64:20:
                    80:d6:fa:07:f3:a2:81:6e:db:0e:de:2c:d7:9a:55:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CD:FA:36:2D:4C:D6:C8:A1:27:F4:15:E7:C0:2B:CA:F5:F5:BF:E5
            X509v3 Authority Key Identifier:
                keyid:E3:40:1A:4D:A4:55:FA:5E:47:1B:D2:AE:AD:78:2B:88:87:63:F4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53eb04993eae451128bf77fb62927c254beec65e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/b5e12c79e365597a319539762675c0382a42f306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/53eb04993eae451128bf77fb62927c254beec65e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         eb:80:b5:8e:6c:e9:30:0c:d3:c1:50:56:33:bf:9e:02:45:8f:
         43:55:94:54:1b:50:97:4e:6d:66:55:9b:bd:d4:ee:21:e2:bd:
         09:99:bb:49:cc:c9:24:8b:ce:27:ec:c1:d7:fe:15:9b:36:33:
         dd:6c:01:ce:1e:92:e4:b6:68:5b:c1:14:e7:7f:2f:bd:47:8e:
         81:52:31:d3:bb:16:37:40:f1:18:be:71:74:c7:05:43:3d:bc:
         f0:2d:97:94:f0:9a:3d:45:87:a3:11:ac:46:10:d6:54:64:f2:
         3c:0f:41:9f:30:ab:50:ce:0a:d7:fa:e9:81:6b:f2:b0:88:47:
         30:86:72:a0:87:43:1c:74:55:fc:de:39:f7:e9:9c:d2:97:fa:
         cb:a9:77:88:ac:bd:8c:9f:c1:93:e6:aa:ab:1a:18:22:aa:98:
         e0:7d:ef:30:e1:f2:3e:aa:3c:66:35:e7:68:df:50:e2:45:8e:
         5a:c1:94:dc:6d:7a:77:0d:ae:8a:d1:c1:7c:02:19:9a:d4:2f:
         28:3c:51:80:98:50:02:89:54:7c:7d:59:c6:05:aa:52:b5:b9:
         dd:c4:d7:43:59:e1:4d:08:b9:57:b0:23:92:7e:68:8d:75:f3:
         28:4b:77:db:80:c3:33:a2:74:5a:53:2d:14:e6:51:9f:bf:75:
         98:89:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----