Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/0bc9a107945353fee06ecf6f3463df75416bc8f2.roa
File:                     0bc9a107945353fee06ecf6f3463df75416bc8f2.roa (raw, json)
Hash identifier:          Y7kt9XkdC9tAaCgMcGcR6MbLG0ZibytXrXwa5Lg6a/k=
Subject key identifier:   C7:BD:37:7E:1D:4F:73:9A:53:D5:9E:5C:4F:99:EA:E2:AE:20:86:74
Certificate issuer:       /CN=83a2fa724a7b279c34deab04bfa5acdb5616a7d4
Certificate serial:       0446F0
Authority key identifier: 83:92:73:34:A1:D8:11:39:56:F7:34:6D:15:90:E0:29:A1:17:79:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83a2fa724a7b279c34deab04bfa5acdb5616a7d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/0bc9a107945353fee06ecf6f3463df75416bc8f2.roa
Signing time:             Fri 18 Jun 2021 23:33:48 +0000
ROA not before:           Fri 18 Jun 2021 03:00:00 +0000
ROA not after:            Sun 18 Jun 2023 03:00:00 +0000
asID:                     266732
IP address blocks:        45.231.72.0/22 maxlen: 24
                          2803:b320::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280304 (0x446f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a2fa724a7b279c34deab04bfa5acdb5616a7d4
        Validity
            Not Before: Jun 18 03:00:00 2021 GMT
            Not After : Jun 18 03:00:00 2023 GMT
        Subject: CN=0bc9a107945353fee06ecf6f3463df75416bc8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:e2:c1:9d:db:22:9e:69:31:17:33:1b:b5:
                    0c:42:8f:5b:04:45:bb:3b:88:76:29:38:73:55:ea:
                    2c:cf:00:7e:ea:d1:5c:64:24:07:d3:6c:0c:2e:e8:
                    df:02:ed:17:f3:c1:78:00:54:e5:73:dd:cd:c7:ef:
                    ae:ea:d9:be:2b:5a:a9:5e:6d:b6:65:f6:61:b1:ef:
                    53:df:09:50:2d:12:2b:ab:17:6a:64:d6:e5:92:e0:
                    4d:32:ec:45:d2:5b:2c:78:1d:21:ee:57:5e:5d:51:
                    05:ff:da:43:0a:d7:a4:42:ed:16:e2:3b:b9:a2:f2:
                    3e:12:80:c4:cb:e9:4e:15:de:90:f5:05:4d:2e:d3:
                    7c:17:6c:15:b5:ba:14:30:03:12:87:12:5c:a0:31:
                    fc:ee:43:f0:88:a5:97:e7:20:8f:6a:6c:e9:34:12:
                    47:cd:4d:3c:fe:2c:d6:99:e7:a5:86:02:8e:62:06:
                    0d:14:21:fe:54:1e:77:de:0e:75:d3:17:13:39:c7:
                    1e:2f:c7:c9:0d:c7:fb:5c:27:e2:6f:6b:6d:29:18:
                    1e:47:98:2c:b6:5d:11:54:af:9f:e2:21:c7:15:41:
                    03:e5:cc:fe:51:d2:e8:77:3d:e4:fc:98:9b:e2:68:
                    1a:87:97:39:00:6f:a5:28:75:2d:49:fa:13:4c:50:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BD:37:7E:1D:4F:73:9A:53:D5:9E:5C:4F:99:EA:E2:AE:20:86:74
            X509v3 Authority Key Identifier:
                keyid:83:92:73:34:A1:D8:11:39:56:F7:34:6D:15:90:E0:29:A1:17:79:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83a2fa724a7b279c34deab04bfa5acdb5616a7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/0bc9a107945353fee06ecf6f3463df75416bc8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5103b3-71bb-43f3-8378-e829f669e77c/83a2fa724a7b279c34deab04bfa5acdb5616a7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.72.0/22
                IPv6:
                  2803:b320::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:a2:50:e7:3a:51:51:74:3d:7a:26:ba:52:1a:f5:f4:13:
         c2:a3:82:ba:22:6c:d7:e7:91:e9:bb:b3:4a:26:29:6d:e8:c0:
         38:58:89:4d:c4:97:66:fd:27:54:01:09:e9:4c:d0:42:26:ec:
         50:ca:45:8e:1c:40:3d:8d:60:fe:14:9b:1e:5e:d7:3f:61:03:
         ce:0c:49:5f:90:28:69:16:e9:b9:58:19:84:13:37:2f:94:f8:
         68:ed:2c:05:10:3a:a3:31:8a:62:f3:01:10:52:03:d3:6e:25:
         91:71:79:e5:1d:59:e9:fb:e0:0e:eb:b5:83:03:e7:32:dd:db:
         8c:ca:73:70:47:38:23:ef:34:83:fc:ca:28:30:57:95:bb:ea:
         1e:0f:71:ba:3b:3b:68:96:00:ec:b5:1b:4f:9a:b5:7f:11:1f:
         9c:74:46:04:76:88:92:26:61:e5:fb:e3:69:91:02:60:e7:9f:
         32:22:18:a1:65:d7:1d:b1:45:ef:75:01:04:8e:d2:b6:ab:2f:
         a3:fd:31:81:29:cb:e6:7a:e7:48:5a:9f:90:c3:86:1d:f5:04:
         c1:39:73:6b:5b:ab:bb:3e:92:26:d2:30:c1:31:5a:81:9a:ff:
         62:f4:ef:f0:85:18:4b:50:24:fa:cc:aa:e6:2b:74:9d:9e:c5:
         b2:63:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----