Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5fde6e0f-9dba-4dc8-9d2c-f17b81ea3e70/97c012183f28691f645d17ed1896668e94f2825a.roa
File:                     97c012183f28691f645d17ed1896668e94f2825a.roa (raw, json)
Hash identifier:          NzZy/E8rVYTRy33caVfGlJFAXUUSnHnJYvO4J7FkKvs=
Subject key identifier:   6A:14:C2:33:DD:E8:7B:27:4B:36:67:AB:D0:F6:0B:59:37:F5:C3:69
Certificate issuer:       /CN=91e315d738274fb501f670342e43519f8d900968
Certificate serial:       0D94BD
Authority key identifier: E5:3C:4A:51:3D:F9:DC:5A:DB:DD:4F:6E:EA:01:82:B4:74:6A:5C:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91e315d738274fb501f670342e43519f8d900968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5fde6e0f-9dba-4dc8-9d2c-f17b81ea3e70/97c012183f28691f645d17ed1896668e94f2825a.roa
Signing time:             Wed 24 Mar 2021 14:32:45 +0000
ROA not before:           Wed 24 Mar 2021 14:32:45 +0000
ROA not after:            Tue 24 Mar 2026 14:32:45 +0000
asID:                     265860
IP address blocks:        45.71.106.0/24 maxlen: 24
                          2803:8620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890045 (0xd94bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91e315d738274fb501f670342e43519f8d900968
        Validity
            Not Before: Mar 24 14:32:45 2021 GMT
            Not After : Mar 24 14:32:45 2026 GMT
        Subject: CN=97c012183f28691f645d17ed1896668e94f2825a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:9c:ba:4f:dd:ce:cb:b5:1d:86:40:75:96:
                    59:4a:24:79:49:bb:ae:35:52:20:4a:f0:71:a1:eb:
                    ce:7e:26:ab:22:b8:d4:e1:2c:ac:6d:58:7a:b0:9d:
                    31:74:30:88:9e:0f:21:c7:b4:08:0e:8f:53:13:55:
                    61:fa:be:bd:e1:94:cd:07:4b:bf:3d:05:39:7e:d4:
                    3a:97:57:88:21:e2:72:73:ae:16:f3:57:f6:0b:cf:
                    20:f8:a1:a5:3c:c6:42:25:a2:8a:3d:5c:36:fe:64:
                    d3:94:ca:86:8e:8a:09:05:7f:9e:c1:d7:30:d9:0f:
                    13:e1:77:4a:9b:10:2d:5e:d9:ae:e6:bb:55:0b:89:
                    e2:13:5b:1a:46:86:de:be:8d:dd:a2:1c:76:40:bc:
                    95:4e:86:73:fb:1c:4f:2e:ac:c6:76:68:1f:8c:50:
                    44:e8:41:88:0c:1e:9f:70:0b:d3:cf:d4:85:01:d3:
                    6c:41:c0:39:b1:3f:fa:e6:f4:e9:bd:e5:5a:da:d8:
                    f9:97:e0:70:6c:37:a6:58:ad:2a:fa:35:2a:16:39:
                    eb:a4:c3:97:d2:39:85:b4:6c:16:01:b3:40:23:b9:
                    54:58:fa:a7:0d:25:ea:d4:a4:ec:57:1f:25:6e:fb:
                    15:35:4a:86:21:91:8a:df:17:56:81:99:6b:53:3a:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:14:C2:33:DD:E8:7B:27:4B:36:67:AB:D0:F6:0B:59:37:F5:C3:69
            X509v3 Authority Key Identifier:
                keyid:E5:3C:4A:51:3D:F9:DC:5A:DB:DD:4F:6E:EA:01:82:B4:74:6A:5C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91e315d738274fb501f670342e43519f8d900968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5fde6e0f-9dba-4dc8-9d2c-f17b81ea3e70/97c012183f28691f645d17ed1896668e94f2825a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5fde6e0f-9dba-4dc8-9d2c-f17b81ea3e70/91e315d738274fb501f670342e43519f8d900968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.106.0/24
                IPv6:
                  2803:8620::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:74:3a:ab:1a:fe:97:3f:bc:a1:c3:00:b9:bc:75:a8:43:
         4f:d7:02:44:ee:b0:6d:67:9f:88:92:66:c6:16:97:95:d6:15:
         1c:18:8a:b0:3b:22:e1:5e:c4:56:ce:25:c1:fc:d4:83:06:f7:
         46:7c:84:b9:51:b4:d9:b9:8d:96:ab:98:81:e9:62:c2:bd:a9:
         e0:1d:6c:41:d9:7b:bb:a4:e6:bd:e6:11:c9:70:9e:29:81:54:
         61:46:7f:d3:ac:b1:18:59:e5:72:ed:21:3a:78:c4:de:64:0b:
         c7:0e:82:dc:67:78:cb:e0:98:a0:f3:0f:4a:1b:8b:0c:44:d7:
         eb:6a:e1:be:52:d2:1d:0d:19:0a:42:6d:d0:7b:f1:dc:17:6e:
         9b:e6:6b:0f:eb:5e:8e:65:3b:fa:30:99:54:0b:0d:8b:ad:bd:
         23:6e:2d:ad:95:14:a2:67:df:05:d9:c8:32:47:46:6c:a8:9f:
         8c:f2:d6:1f:73:b0:36:c5:98:01:a9:27:0c:02:18:5b:eb:6b:
         ef:f5:1b:b2:a9:e7:74:eb:d8:4d:9b:e7:77:5e:c3:f2:9d:41:
         94:e9:50:3b:6c:0b:c7:6d:50:f1:1f:29:fd:d0:a5:35:fd:d0:
         e5:27:eb:ca:6b:f0:fe:4b:47:28:80:c2:db:b1:7f:04:95:e1:
         c2:25:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----