Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583f4031-fd77-4517-8f9b-dbaab24123ae/139224b45fd60440f615c13e9628a0c9804cfe3d.roa
File:                     139224b45fd60440f615c13e9628a0c9804cfe3d.roa (raw, json)
Hash identifier:          004rwrqCaoX7ezJnahMdjd+TtT15j3QXaepb6ZdSxw4=
Subject key identifier:   CE:64:88:5F:26:94:45:BF:40:C7:8A:12:6E:69:B6:71:18:FB:75:8F
Certificate issuer:       /CN=8ea5dca89a2b16a13cb204529595d395f8e5fc57
Certificate serial:       03AF
Authority key identifier: 4C:DF:5E:89:95:FE:97:6E:96:16:A2:94:2B:AE:ED:73:A9:59:63:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ea5dca89a2b16a13cb204529595d395f8e5fc57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583f4031-fd77-4517-8f9b-dbaab24123ae/139224b45fd60440f615c13e9628a0c9804cfe3d.roa
Signing time:             Mon 26 Jul 2021 00:03:38 +0000
ROA not before:           Sun 25 Jul 2021 03:00:00 +0000
ROA not after:            Sat 25 Jul 2043 03:00:00 +0000
asID:                     52363
IP address blocks:        45.176.108.0/22 maxlen: 24
                          2803:7a60::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea5dca89a2b16a13cb204529595d395f8e5fc57
        Validity
            Not Before: Jul 25 03:00:00 2021 GMT
            Not After : Jul 25 03:00:00 2043 GMT
        Subject: CN=139224b45fd60440f615c13e9628a0c9804cfe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:45:f9:70:99:17:ed:82:dc:de:83:cf:8c:
                    34:9f:15:7a:b8:0e:ce:8e:34:71:75:b6:d1:86:d8:
                    7d:15:b4:1c:6f:a5:e4:53:48:df:7f:c6:c2:3e:92:
                    c3:ff:b4:7a:d2:f5:fd:22:81:be:46:26:45:8d:c7:
                    33:f0:1d:25:fb:00:54:17:c4:1c:a9:7b:95:a1:9b:
                    a7:d0:22:89:c5:53:bd:77:bc:f3:75:10:89:06:d3:
                    98:52:28:f8:93:fa:98:18:64:d7:d8:dc:09:39:b3:
                    f8:e0:5b:24:7d:d7:ab:d5:39:7a:76:79:f0:76:df:
                    5c:86:6b:c4:d4:c9:4a:87:48:47:fd:c1:f7:64:1a:
                    db:d0:5d:c6:5b:da:b8:78:90:45:e3:f5:7a:60:b0:
                    52:90:29:31:2d:44:fa:75:c6:6a:43:70:1e:9f:4d:
                    69:50:54:9c:f2:55:02:c3:a8:0e:a6:5d:8f:25:c1:
                    4a:b8:ce:5e:63:31:52:3b:e6:5e:cc:bb:46:4e:f8:
                    fc:3d:77:52:14:ec:bc:08:d8:fb:ab:37:14:ba:72:
                    b6:84:91:f9:84:95:96:59:8d:2b:11:fb:4f:c0:d3:
                    80:e7:36:8b:8d:24:cf:e4:09:48:35:81:a5:28:77:
                    3f:52:68:de:53:40:d7:2c:68:22:c5:a5:0a:b4:d8:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:88:5F:26:94:45:BF:40:C7:8A:12:6E:69:B6:71:18:FB:75:8F
            X509v3 Authority Key Identifier:
                keyid:4C:DF:5E:89:95:FE:97:6E:96:16:A2:94:2B:AE:ED:73:A9:59:63:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ea5dca89a2b16a13cb204529595d395f8e5fc57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583f4031-fd77-4517-8f9b-dbaab24123ae/139224b45fd60440f615c13e9628a0c9804cfe3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583f4031-fd77-4517-8f9b-dbaab24123ae/8ea5dca89a2b16a13cb204529595d395f8e5fc57.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.108.0/22
                IPv6:
                  2803:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:1c:d2:1b:b2:60:78:4b:a0:4c:72:e1:b5:d6:4a:64:02:
         1f:04:68:d7:3e:46:94:59:5a:6c:9d:20:9d:d7:64:aa:8d:9f:
         1a:cf:01:93:14:12:3d:5c:cd:a7:b8:9e:aa:43:3d:8d:65:b4:
         4b:ca:22:ba:59:52:1f:4f:d7:81:bb:e2:fd:87:f3:b3:cc:65:
         de:82:31:d8:ac:e0:5a:4d:34:86:d7:88:fa:5c:e0:f3:5e:41:
         f4:c3:3f:ba:5d:41:f8:53:d6:53:ad:1e:bf:22:e8:14:9b:97:
         20:eb:1e:9f:97:b5:58:11:62:ff:63:5d:fd:2e:a7:b5:a1:bf:
         98:df:f2:20:7b:2f:45:1e:9a:d2:a6:b6:ff:b9:b0:8a:74:83:
         bb:7f:97:5b:21:10:d2:56:81:33:01:38:93:d3:84:40:a1:83:
         fe:fa:c8:07:9e:20:02:4b:03:92:1c:8e:81:e4:e4:40:84:8a:
         66:1f:80:30:1c:50:17:55:62:dd:69:27:06:17:cd:50:23:2c:
         3c:80:24:ac:a0:24:b1:17:83:42:9b:a8:f0:02:d9:e8:fa:01:
         34:0c:94:b6:0f:e1:ec:07:a6:9a:91:d2:d8:c5:1e:fb:ca:6e:
         35:e9:c0:e0:59:b3:ee:f7:db:8d:fe:74:9a:93:8e:f3:4d:6b:
         b8:e8:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----