Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/68026387b8f317d292f15ee5dc048b49331446b5.roa
File:                     68026387b8f317d292f15ee5dc048b49331446b5.roa (raw, json)
Hash identifier:          4cRWBAIuKAbQ/TAqHZPxfL9ItjO1eQEewkaijkLPM80=
Subject key identifier:   0B:3A:AB:4A:85:3A:EF:D8:5D:1F:27:A6:E3:42:B3:C2:8B:1F:8E:30
Certificate issuer:       /CN=f49af8394a6a993c0d1ddee49822705b80fbc0cf
Certificate serial:       043244
Authority key identifier: 4E:DE:54:7E:19:2E:CA:81:48:ED:05:2B:F6:34:97:47:D7:83:CF:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49af8394a6a993c0d1ddee49822705b80fbc0cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/68026387b8f317d292f15ee5dc048b49331446b5.roa
Signing time:             Wed 24 Mar 2021 14:30:29 +0000
ROA not before:           Wed 24 Mar 2021 14:30:29 +0000
ROA not after:            Tue 24 Mar 2026 14:30:29 +0000
asID:                     270070
IP address blocks:        45.185.204.0/22 maxlen: 25
                          2803:9f60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275012 (0x43244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49af8394a6a993c0d1ddee49822705b80fbc0cf
        Validity
            Not Before: Mar 24 14:30:29 2021 GMT
            Not After : Mar 24 14:30:29 2026 GMT
        Subject: CN=68026387b8f317d292f15ee5dc048b49331446b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:87:39:89:67:8e:dd:60:1c:4e:65:e4:51:
                    01:d0:51:03:c5:76:0e:cf:d3:15:65:2e:83:06:8f:
                    9e:a9:ab:f1:53:51:2c:11:05:f0:a9:57:80:35:3e:
                    49:d6:6a:e8:b6:dd:6f:13:9e:45:0e:6a:3f:8f:5a:
                    58:5b:48:f3:b2:56:21:4b:cc:b3:f2:5d:9b:23:b9:
                    5c:1f:b4:b0:84:12:b9:68:c5:a3:64:9a:4f:1b:e7:
                    2b:95:e8:dc:c3:0b:e1:d5:bf:3a:c3:b9:f0:84:16:
                    e3:c0:ce:8b:c3:20:e7:c8:59:7d:7c:3d:e2:2b:5d:
                    3d:5e:0f:e7:f8:b9:5d:bb:9f:df:c4:1e:6c:f4:dc:
                    3e:0b:bd:e3:79:c5:ca:2b:47:02:06:03:8e:9c:57:
                    e7:b7:e0:71:1e:bd:6c:b0:42:63:05:4e:b3:bf:ea:
                    f5:84:d4:dd:b6:22:e0:be:6f:a8:12:2e:f0:92:a9:
                    9b:48:3b:e7:d0:e0:cc:79:07:c7:90:17:d1:c7:39:
                    25:df:b4:54:d4:a6:95:c7:ce:a2:25:e5:80:59:55:
                    1d:f0:12:51:e2:96:5e:65:21:69:a6:67:1a:a4:92:
                    df:54:3f:d1:04:98:33:6e:8e:2c:30:e0:c0:2c:03:
                    68:1c:98:cd:f9:34:50:4c:01:40:cf:db:fd:60:c1:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3A:AB:4A:85:3A:EF:D8:5D:1F:27:A6:E3:42:B3:C2:8B:1F:8E:30
            X509v3 Authority Key Identifier:
                keyid:4E:DE:54:7E:19:2E:CA:81:48:ED:05:2B:F6:34:97:47:D7:83:CF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49af8394a6a993c0d1ddee49822705b80fbc0cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/68026387b8f317d292f15ee5dc048b49331446b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5015dc37-be36-45fe-9dd5-5b1c1340a008/f49af8394a6a993c0d1ddee49822705b80fbc0cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.204.0/22
                IPv6:
                  2803:9f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:25:f5:ca:5f:10:2f:23:62:dc:86:c0:4a:96:2f:df:b2:b1:
         10:c7:ac:4d:cf:8d:f4:58:e7:1e:6d:61:08:55:b2:c4:3c:69:
         f2:c8:e7:ec:27:6a:a9:1a:e1:05:78:51:dd:e6:cb:fb:77:af:
         13:c2:47:e9:41:a2:f0:62:5b:18:25:b4:60:86:be:0c:20:36:
         27:00:dd:62:db:d2:f5:52:61:7b:fc:bc:30:c4:93:6d:0b:74:
         c7:63:0e:66:41:67:48:f5:6b:7b:5b:6e:6f:ab:5f:de:76:98:
         a0:89:c7:af:6f:2a:54:1b:75:7f:ca:ed:89:d0:02:1f:3d:3c:
         a4:ce:62:14:32:4c:26:f8:a8:3e:52:27:85:98:c5:fd:45:d2:
         66:38:96:fe:6d:e7:10:f7:e2:16:ee:ac:3b:64:d7:44:47:09:
         e3:28:6c:45:c8:73:cc:94:b9:db:a4:1e:70:95:59:f0:1e:0f:
         77:01:d7:5b:91:5b:7d:ee:19:89:57:2a:6d:9d:89:55:2f:0e:
         a7:b6:a7:26:67:5c:4c:90:a1:c2:11:21:b4:c9:31:42:1b:ae:
         b7:49:dd:e8:2a:02:c7:66:41:7a:8c:ae:3b:21:1d:20:4a:20:
         23:73:12:59:ab:33:ef:eb:87:91:38:03:bd:3b:3d:99:57:8d:
         87:f8:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----