Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/48f6aa7e43f4c55a2f0595bec56023fbe82b6c23.roa
File:                     48f6aa7e43f4c55a2f0595bec56023fbe82b6c23.roa (raw, json)
Hash identifier:          tPDk/yx1vSJ3VtbUU7RHlP65OV6Qk/t4tRaDOwQW3hU=
Subject key identifier:   95:70:2A:12:DC:8E:5D:51:5F:A3:D8:FA:F4:78:D0:B8:A6:5E:58:91
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       05F55A
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/48f6aa7e43f4c55a2f0595bec56023fbe82b6c23.roa
Signing time:             Wed 24 Mar 2021 14:34:39 +0000
ROA not before:           Wed 24 Mar 2021 14:34:39 +0000
ROA not after:            Tue 24 Mar 2026 14:34:39 +0000
asID:                     267678
IP address blocks:        45.162.76.0/22 maxlen: 22
                          2803:aea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390490 (0x5f55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: Mar 24 14:34:39 2021 GMT
            Not After : Mar 24 14:34:39 2026 GMT
        Subject: CN=48f6aa7e43f4c55a2f0595bec56023fbe82b6c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:2f:57:07:9d:e8:05:41:88:dc:ca:fd:c6:
                    59:04:d7:fb:4d:dc:e5:6b:37:db:78:20:15:1a:f1:
                    e4:5b:23:15:06:5a:af:96:f2:da:a9:34:38:a2:b8:
                    10:0e:79:46:95:70:d9:2c:4e:00:df:00:ef:15:e7:
                    97:69:6c:a3:31:a8:0a:77:e9:54:66:7d:71:1c:23:
                    7e:f4:83:91:70:79:6a:c0:bc:e5:3c:e2:dd:5b:18:
                    c9:5f:d7:77:ce:93:41:71:9f:23:cf:89:1c:07:65:
                    0f:b8:2f:c3:85:78:d3:1e:3b:aa:6d:c2:85:1b:7d:
                    3d:05:61:50:14:db:42:9d:29:23:6c:f2:de:f7:91:
                    28:58:cd:26:fd:d2:65:b6:0a:e2:87:d6:38:51:52:
                    1c:4a:56:ef:94:09:f9:90:1d:77:ea:ff:a2:3d:6b:
                    91:40:f8:f8:95:60:9c:17:a8:3e:f8:dd:b4:1f:63:
                    b1:a4:eb:f2:24:6b:97:8f:83:3a:38:55:7e:85:92:
                    35:82:e4:45:59:50:88:2c:d7:ef:c1:c8:d3:18:fc:
                    39:77:6f:55:25:17:08:ba:ee:bb:48:dd:06:28:4b:
                    53:c5:50:85:28:1a:98:88:b8:aa:c7:b4:22:dd:c6:
                    97:ad:20:cb:60:2b:8d:6d:65:dc:db:0e:dd:b8:f9:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:70:2A:12:DC:8E:5D:51:5F:A3:D8:FA:F4:78:D0:B8:A6:5E:58:91
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/48f6aa7e43f4c55a2f0595bec56023fbe82b6c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:fd:79:27:7d:7d:69:df:b3:0b:15:dd:03:5e:39:29:95:
         c0:bd:cd:ff:b6:64:58:a7:62:0f:a9:f6:d2:b1:0f:a1:af:dd:
         e5:8d:1b:13:8c:ec:0c:e9:80:76:98:a0:1d:1c:eb:8c:96:59:
         10:8b:06:80:7d:13:fc:30:16:2a:e8:04:de:76:9a:cd:f2:3c:
         c7:12:7a:08:19:5d:31:2d:fd:95:35:21:e5:91:6c:41:34:93:
         60:50:fb:23:29:07:9e:cf:3d:15:93:35:23:3a:2b:8f:23:88:
         17:30:3f:20:29:0e:16:fa:59:b3:8f:0c:a4:f2:76:fd:40:01:
         63:57:ba:74:a9:49:9d:39:bb:56:1f:cd:24:9a:e6:51:7b:51:
         b3:ce:6e:ab:37:e4:86:b2:d6:b8:d0:66:b6:76:68:8b:a2:76:
         b3:fd:e3:10:76:f7:ec:d2:bc:0e:1f:ed:19:42:9b:4f:e5:41:
         d5:33:e5:e2:b3:6a:f1:92:f9:f5:59:b8:10:30:ad:a5:d0:2c:
         0d:77:c7:c9:bd:15:e0:56:31:e6:b5:f1:ea:25:32:36:8c:9b:
         41:9d:63:fe:3c:1f:96:d6:cd:26:00:a8:75:90:e2:9d:bb:61:
         af:50:bc:ab:11:d1:06:e6:bc:79:c7:47:24:f1:98:2b:12:38:
         a5:28:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----