Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/1dfc8bcc826d44af6d272ef102d7f1fb1def80b9.roa
File:                     1dfc8bcc826d44af6d272ef102d7f1fb1def80b9.roa (raw, json)
Hash identifier:          AIsY6thS2iZR/RhjrXTvh2Hnj0LcltEvV0Od58DQmR8=
Subject key identifier:   08:A8:9E:49:A7:1B:3F:6B:8C:2A:4E:A9:E0:F2:C0:7F:A6:72:06:7F
Certificate issuer:       /CN=08208e4e8bb0af74452f35173d828d04b63e2d76
Certificate serial:       09E9D4
Authority key identifier: F6:AD:02:26:86:12:DE:12:3F:62:7C:23:DB:92:EE:98:88:C0:C5:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08208e4e8bb0af74452f35173d828d04b63e2d76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/1dfc8bcc826d44af6d272ef102d7f1fb1def80b9.roa
Signing time:             Wed 24 Mar 2021 14:43:06 +0000
ROA not before:           Wed 24 Mar 2021 14:43:06 +0000
ROA not after:            Tue 24 Mar 2026 14:43:06 +0000
asID:                     270131
IP address blocks:        45.177.176.0/22 maxlen: 24
                          2806:33f::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649684 (0x9e9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08208e4e8bb0af74452f35173d828d04b63e2d76
        Validity
            Not Before: Mar 24 14:43:06 2021 GMT
            Not After : Mar 24 14:43:06 2026 GMT
        Subject: CN=1dfc8bcc826d44af6d272ef102d7f1fb1def80b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:a3:76:73:27:7b:9d:27:30:de:3b:a6:0d:
                    66:aa:1f:63:bc:c9:3e:80:80:35:62:ae:08:69:25:
                    a2:b4:64:8f:8e:71:b4:66:27:1d:3b:68:07:e2:9b:
                    30:1d:62:0f:a1:1a:bb:f5:10:47:24:e5:82:6d:e1:
                    3e:d7:a7:7b:f8:5e:fd:71:35:0a:fb:8e:ec:6e:89:
                    3a:ee:f3:ac:c4:0c:5d:94:06:2d:84:4b:4c:99:18:
                    c6:98:86:12:e5:ae:dc:17:d6:71:a8:8b:aa:f6:ff:
                    eb:3a:98:7d:c5:63:aa:be:e8:f2:1f:15:f9:39:71:
                    7d:aa:3b:b0:06:ef:04:c0:57:eb:27:fd:20:10:cc:
                    d5:80:bf:30:d7:13:01:6d:2b:39:29:ec:c3:7e:c5:
                    05:3d:33:8d:0c:54:a4:5f:c7:d7:13:75:3f:e2:80:
                    2b:54:0d:75:12:a3:ff:bf:35:a5:b4:61:6b:52:bf:
                    49:b7:3d:dd:ab:80:4e:50:78:27:90:69:2d:35:a5:
                    00:1e:93:e9:b3:1d:26:ba:48:af:e4:d6:72:e3:ee:
                    83:74:c5:4e:b6:24:9b:ea:5f:3a:7e:11:94:04:f6:
                    1a:7c:97:09:ac:06:a6:92:99:6a:82:77:02:78:cb:
                    29:f1:46:f9:e9:ea:c0:a5:08:4f:ac:4d:c6:bf:e2:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:9E:49:A7:1B:3F:6B:8C:2A:4E:A9:E0:F2:C0:7F:A6:72:06:7F
            X509v3 Authority Key Identifier:
                keyid:F6:AD:02:26:86:12:DE:12:3F:62:7C:23:DB:92:EE:98:88:C0:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08208e4e8bb0af74452f35173d828d04b63e2d76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/1dfc8bcc826d44af6d272ef102d7f1fb1def80b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d11bfbd-3789-42db-b50b-dbd7771b7a2f/08208e4e8bb0af74452f35173d828d04b63e2d76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.176.0/22
                IPv6:
                  2806:33f::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:f5:04:9e:5e:22:bf:f2:61:7b:e7:db:85:95:34:5a:a4:
         6a:3c:87:c0:31:ad:8e:9a:41:be:e8:69:a7:65:10:29:8a:0e:
         30:72:d3:a7:80:4d:6f:d3:23:86:8f:96:30:a5:3d:22:81:52:
         91:d7:a7:13:d5:ce:a1:a4:e8:51:0c:c8:ae:1e:5a:e3:20:37:
         8e:e1:66:e0:4d:50:c2:8d:78:46:88:cc:c3:91:54:b8:ee:70:
         5c:f0:01:22:16:0e:e1:88:3b:fb:74:e1:f7:3f:57:25:eb:8f:
         a2:ee:e8:2d:d8:55:63:b8:88:de:a7:4e:b1:92:04:1a:c4:10:
         2e:1d:c5:86:41:d7:f5:f1:59:9d:f6:1b:ad:40:c9:2b:54:0c:
         45:0a:6b:d2:19:bf:a5:9e:3f:84:b3:e9:10:f7:ea:7c:9b:8a:
         ff:54:8f:3e:ba:c6:17:e5:2e:9d:cf:a7:6d:9c:b8:54:ac:0c:
         99:74:01:67:74:3a:50:c4:83:d9:ad:38:b6:40:c6:86:01:1c:
         57:38:ac:6d:e2:c1:a2:69:27:0f:ea:3d:82:64:ca:44:82:70:
         ed:b2:d2:19:71:38:d3:2b:e1:2c:2d:7f:d4:45:78:d8:6c:11:
         b4:ba:fe:8f:89:f9:b6:9d:e2:34:0b:38:ef:72:ea:a2:d9:24:
         52:96:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----