Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa
File:                     6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa (raw, json)
Hash identifier:          culp9DmOCphjzPK0wci5b1JVHNU9WDC2EBjVIt6Eytg=
Subject key identifier:   AD:FE:C2:62:57:9B:87:C6:65:89:82:C6:B0:FF:5D:DB:D7:72:5A:B1
Certificate issuer:       /CN=5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb
Certificate serial:       0C8D77
Authority key identifier: 51:23:63:D1:74:CB:1D:34:BB:21:6B:0C:5F:91:05:0B:21:0E:AE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa
Signing time:             Wed 24 Mar 2021 14:30:47 +0000
ROA not before:           Wed 24 Mar 2021 14:30:47 +0000
ROA not after:            Tue 24 Mar 2026 14:30:47 +0000
asID:                     266883
IP address blocks:        45.161.8.0/22 maxlen: 24
                          2803:faa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822647 (0xc8d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb
        Validity
            Not Before: Mar 24 14:30:47 2021 GMT
            Not After : Mar 24 14:30:47 2026 GMT
        Subject: CN=6af4e4e243bb955809e4f5d291787fa0ccbf3878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:ce:b4:c4:84:69:d3:87:5d:9e:e7:8f:ca:
                    83:45:0b:28:23:90:d4:71:c9:6e:7d:5f:41:29:0c:
                    40:d0:43:fa:f0:0d:d5:1e:9c:4d:ae:c5:77:f4:77:
                    14:a2:6c:55:51:dd:cb:3d:7b:8d:01:2b:d9:38:8d:
                    a1:9b:58:38:b8:be:29:92:32:dd:3d:65:ca:3f:1d:
                    86:1b:d9:a3:5b:5d:dc:41:ae:e5:c1:69:22:34:92:
                    cb:44:9d:54:e5:eb:e5:b9:f6:e5:c0:f3:bd:8a:b0:
                    81:62:47:df:ea:09:3f:ef:a6:21:a2:f0:bb:af:3d:
                    35:4f:89:03:e6:9e:13:03:4c:98:e5:3d:ee:e9:29:
                    cc:a7:c9:1b:e7:11:9b:09:60:69:b7:0d:40:45:c2:
                    75:5b:4f:b4:df:79:e6:15:43:ae:ab:e6:6b:a7:f1:
                    a6:28:fb:fd:1d:d0:8d:3c:02:5a:58:45:a4:23:56:
                    b6:4b:a7:64:1d:21:5d:5f:ac:ff:9b:d4:c3:36:cc:
                    a8:75:ab:f6:7a:af:a5:97:ab:62:b4:3f:fd:d1:87:
                    1d:b2:ef:3e:42:73:2a:23:77:e2:df:93:5b:61:8b:
                    cf:58:2f:af:8a:7b:e1:86:d9:40:ae:28:35:ff:eb:
                    ae:38:16:b2:c3:d6:9e:f4:7d:7e:53:18:08:ee:e0:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:C2:62:57:9B:87:C6:65:89:82:C6:B0:FF:5D:DB:D7:72:5A:B1
            X509v3 Authority Key Identifier:
                keyid:51:23:63:D1:74:CB:1D:34:BB:21:6B:0C:5F:91:05:0B:21:0E:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/6af4e4e243bb955809e4f5d291787fa0ccbf3878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54d79dd1-b832-45b2-8089-510d2188f353/5f064c090ca2fcd0a812fe3a5a67124da7aa7dfb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.8.0/22
                IPv6:
                  2803:faa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:a5:0f:23:03:1e:2b:96:6e:4d:62:b5:1d:89:76:4c:23:
         43:d4:77:c4:42:b2:60:6f:00:71:27:a5:65:e7:9a:d9:df:a0:
         2d:16:52:3e:20:e0:ab:68:ca:25:2c:29:4b:a8:a4:a7:30:29:
         db:01:28:0b:f8:3f:d3:46:2a:14:8b:fb:60:c7:47:4d:97:be:
         c8:3f:78:c0:2c:df:6f:5c:c7:15:44:7e:c8:66:5f:f9:fe:86:
         c1:03:d0:1d:e9:bd:b3:5c:97:b3:2a:03:e7:27:a5:d3:75:05:
         db:7a:aa:57:91:d0:40:f1:5d:cb:5a:7b:c8:4d:30:6a:d1:61:
         c2:54:73:e0:fc:0a:46:34:d3:fe:49:24:30:c8:63:31:73:e5:
         13:5d:05:f5:6e:18:5f:2c:5c:83:db:ae:31:be:d8:0c:cf:a7:
         94:25:cc:fa:16:88:41:cb:20:ac:f3:97:c7:0c:65:ca:56:8b:
         ee:23:c6:e6:fd:d7:3b:ae:61:0f:b1:d2:e6:3c:1c:0e:b1:75:
         3e:03:06:fd:dc:20:5d:6b:fd:6d:9f:54:d4:2d:2b:ff:5d:12:
         e1:c4:09:0c:25:2d:72:b8:be:a5:a9:48:ac:4d:5c:0e:de:a6:
         40:95:0c:0c:80:0e:26:b6:04:00:ca:17:86:6f:d2:2d:96:f8:
         64:d7:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----