Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b768f60-eaaf-449a-9dac-c63016a558c6/dab5fd744619fb87fa6453d59f9090613e0f75cd.roa
File:                     dab5fd744619fb87fa6453d59f9090613e0f75cd.roa (raw, json)
Hash identifier:          0SmONmZvIXF1Bc8uZWsN+dg5dleJc5yOuj+3nWtoFsU=
Subject key identifier:   7D:31:76:92:EC:A6:98:9A:3E:70:7F:A9:9F:09:DC:57:0D:E1:2A:52
Certificate issuer:       /CN=17e3c4e38bcfd5a9c1c6ac4bf8ed4085a15b20da
Certificate serial:       0C2B0A
Authority key identifier: FA:EC:77:18:AD:07:C0:E1:FA:FF:25:3E:D6:1B:0F:E8:A7:8B:0C:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e3c4e38bcfd5a9c1c6ac4bf8ed4085a15b20da.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b768f60-eaaf-449a-9dac-c63016a558c6/dab5fd744619fb87fa6453d59f9090613e0f75cd.roa
Signing time:             Wed 24 Mar 2021 14:29:45 +0000
ROA not before:           Wed 24 Mar 2021 14:29:45 +0000
ROA not after:            Tue 24 Mar 2026 14:29:45 +0000
asID:                     267870
IP address blocks:        45.177.64.0/22 maxlen: 24
                          2803:5260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797450 (0xc2b0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e3c4e38bcfd5a9c1c6ac4bf8ed4085a15b20da
        Validity
            Not Before: Mar 24 14:29:45 2021 GMT
            Not After : Mar 24 14:29:45 2026 GMT
        Subject: CN=dab5fd744619fb87fa6453d59f9090613e0f75cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3f:df:f4:df:f2:ac:f6:f7:e1:df:25:50:a8:
                    23:8c:5a:e8:09:26:96:78:9a:9f:6a:a3:bc:28:bc:
                    b9:53:49:c6:74:7e:b5:df:b1:25:4e:15:6c:fd:87:
                    72:23:8a:3f:d5:bf:26:96:90:ec:b7:85:49:bc:c6:
                    02:92:f9:5f:0f:1a:00:a7:67:e2:c2:1c:08:34:cf:
                    8e:90:9c:11:1f:77:e0:30:3d:8e:de:1b:ad:07:1e:
                    e5:02:ca:15:af:78:7b:13:72:67:ab:84:4e:de:f1:
                    ff:66:3a:8b:7d:9b:02:45:24:0f:40:4b:16:87:30:
                    42:d1:d9:89:1f:b4:e9:86:f1:4e:31:d3:ee:d1:18:
                    67:a4:8b:47:f9:34:d3:b3:a8:4f:87:d5:02:99:5b:
                    5b:b8:75:5e:46:90:9c:f2:dc:ee:5a:1d:3c:0e:81:
                    a6:a9:84:eb:ab:1c:4f:64:da:f1:c7:c0:d7:eb:cd:
                    28:e1:41:3c:dc:62:41:b8:6b:c2:fc:57:14:59:a3:
                    15:3b:c1:3c:10:ec:20:21:51:66:2e:74:55:bb:e7:
                    b8:8a:4f:03:0b:15:3c:87:9c:5d:52:53:5c:7e:b3:
                    80:9e:55:2e:15:15:5e:b6:8b:55:65:ff:67:a1:ca:
                    41:ad:77:21:9b:73:0d:0e:85:71:48:56:f6:57:77:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:76:92:EC:A6:98:9A:3E:70:7F:A9:9F:09:DC:57:0D:E1:2A:52
            X509v3 Authority Key Identifier:
                keyid:FA:EC:77:18:AD:07:C0:E1:FA:FF:25:3E:D6:1B:0F:E8:A7:8B:0C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e3c4e38bcfd5a9c1c6ac4bf8ed4085a15b20da.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b768f60-eaaf-449a-9dac-c63016a558c6/dab5fd744619fb87fa6453d59f9090613e0f75cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b768f60-eaaf-449a-9dac-c63016a558c6/17e3c4e38bcfd5a9c1c6ac4bf8ed4085a15b20da.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.64.0/22
                IPv6:
                  2803:5260::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:e2:f8:d5:ae:68:80:ab:dd:7e:af:03:33:b3:61:de:0d:
         b9:9f:97:e7:46:a1:ee:48:f9:a0:ff:1b:34:ca:da:57:e5:ef:
         94:7f:03:72:11:1a:6b:29:b7:79:64:d1:ba:61:fc:02:da:aa:
         66:6c:79:ea:ea:34:35:c7:a0:02:b3:fa:98:fd:40:45:4c:aa:
         4f:8f:78:4a:a6:5b:a9:6e:94:ed:84:e0:cd:eb:f0:0e:15:de:
         c6:e5:3b:7d:2d:56:1e:69:2b:5c:c7:fc:37:c7:52:9d:b8:20:
         f2:2e:3b:c0:e1:d8:e8:c6:77:0e:12:29:a9:e8:a4:d5:69:85:
         ec:bb:63:fc:74:78:77:fb:9a:5c:9b:02:8b:06:b1:01:b6:01:
         e4:e5:80:22:b9:31:9e:31:59:33:40:c9:9c:01:a1:4c:33:ac:
         47:1c:fd:59:d4:47:6f:fd:2d:1b:51:ed:fd:63:5c:d5:a8:aa:
         8a:39:5e:c6:8a:cb:8a:10:bf:1e:99:15:e0:3f:d9:a9:b1:9f:
         04:e1:e6:a6:54:d3:1a:f6:01:0e:96:ab:1c:4c:e0:ef:56:14:
         63:62:2f:d5:60:c9:c5:5f:e3:98:2a:c5:41:fb:46:cf:32:c1:
         3e:4c:9e:6d:6a:58:e5:ac:76:72:51:7c:de:4c:8a:f0:53:32:
         3d:d5:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----