Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61012f8a-3ad7-4d3f-adbc-f518fa463cd5/ad275f294ac58eff1032257a5ff15e18a699866e.roa
File:                     ad275f294ac58eff1032257a5ff15e18a699866e.roa (raw, json)
Hash identifier:          R73IE4Wbu1jD4uCwWbGgf2vCmWrig6yJUIX9DF7V3iU=
Subject key identifier:   4C:E5:7D:51:28:42:CA:A4:7A:C3:B3:DD:54:9D:4F:8A:05:71:A6:D6
Certificate issuer:       /CN=657394a48721c3046fca2374238bf00514c6d52b
Certificate serial:       09CB01
Authority key identifier: 21:F3:91:D6:11:74:15:24:D7:66:00:0B:BB:75:F0:9B:63:EB:21:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657394a48721c3046fca2374238bf00514c6d52b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61012f8a-3ad7-4d3f-adbc-f518fa463cd5/ad275f294ac58eff1032257a5ff15e18a699866e.roa
Signing time:             Wed 24 Mar 2021 14:45:19 +0000
ROA not before:           Wed 24 Mar 2021 14:45:19 +0000
ROA not after:            Tue 24 Mar 2026 14:45:19 +0000
asID:                     269922
IP address blocks:        45.191.164.0/22 maxlen: 22
                          2803:9ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641793 (0x9cb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657394a48721c3046fca2374238bf00514c6d52b
        Validity
            Not Before: Mar 24 14:45:19 2021 GMT
            Not After : Mar 24 14:45:19 2026 GMT
        Subject: CN=ad275f294ac58eff1032257a5ff15e18a699866e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:78:c8:df:25:71:6c:d0:31:18:c0:ed:42:
                    34:26:74:a6:02:09:a7:59:66:5b:fe:bc:2d:6e:e3:
                    73:72:31:b0:2e:08:85:fa:f9:50:d3:05:49:24:87:
                    cd:8e:b0:d6:89:00:81:51:4c:ca:3a:b2:e5:5d:2d:
                    33:f8:eb:05:20:17:5d:68:c4:63:f7:24:a1:d3:af:
                    95:10:e3:83:67:d2:64:66:12:28:9d:cc:45:d3:56:
                    6b:d0:14:f1:1b:28:51:ce:ae:1e:fd:c8:04:3c:6d:
                    67:59:cf:4e:07:31:c5:9a:a0:45:c2:ae:8a:9f:18:
                    06:57:04:4e:6d:7b:db:a4:99:d5:e8:e0:55:e2:ee:
                    7d:1c:18:92:de:aa:a4:b2:ea:f7:b2:f6:98:94:2e:
                    d3:b0:b9:a1:8d:4c:64:64:8d:96:cf:a0:80:4f:5e:
                    12:78:ec:a3:b5:52:e2:eb:d0:9e:75:4f:da:72:34:
                    f2:07:a4:05:d0:66:57:25:af:9b:fa:ca:29:c0:61:
                    e4:9b:37:34:02:4e:67:26:10:73:57:87:5b:9b:e4:
                    5d:9f:f1:0a:18:f4:6b:65:3d:56:01:93:d5:d2:d7:
                    fc:12:14:09:48:ad:70:5c:9a:f3:d2:1b:39:7f:5f:
                    70:ba:75:63:26:c0:c7:ed:a9:26:f8:c0:d4:cb:27:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:7D:51:28:42:CA:A4:7A:C3:B3:DD:54:9D:4F:8A:05:71:A6:D6
            X509v3 Authority Key Identifier:
                keyid:21:F3:91:D6:11:74:15:24:D7:66:00:0B:BB:75:F0:9B:63:EB:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657394a48721c3046fca2374238bf00514c6d52b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61012f8a-3ad7-4d3f-adbc-f518fa463cd5/ad275f294ac58eff1032257a5ff15e18a699866e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61012f8a-3ad7-4d3f-adbc-f518fa463cd5/657394a48721c3046fca2374238bf00514c6d52b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.164.0/22
                IPv6:
                  2803:9ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:38:d3:f9:44:fa:fc:6b:8a:d5:7e:7b:3c:7f:2f:b5:0f:b8:
         1e:f1:4b:b2:01:3c:e9:97:91:3c:af:d8:9a:3f:9b:ea:43:0a:
         6f:18:42:a9:49:73:24:ce:af:0a:3a:96:a7:4e:8c:4b:8e:16:
         86:e6:8b:65:ed:8f:91:70:c5:6e:bc:b0:8f:fe:4c:4b:b9:31:
         b8:1d:f5:77:3b:e2:64:ff:e0:10:96:77:3f:f4:de:1d:dd:cd:
         0c:db:90:d4:70:27:73:bb:dd:13:f7:d2:51:38:b7:8a:e6:29:
         1c:08:c0:c3:02:59:bc:65:a7:56:97:78:06:61:2c:1c:6d:4e:
         c9:f8:b7:4e:19:67:62:31:df:69:85:6c:52:00:48:9a:ef:6b:
         57:be:fa:d4:95:7a:82:7e:f0:66:71:af:ab:c7:79:19:39:69:
         47:34:13:70:36:7b:9f:79:8c:34:e6:e1:38:74:eb:5c:d7:92:
         6a:1d:a7:11:53:85:32:1d:79:ff:31:1c:fb:a5:a8:0b:d5:50:
         92:9b:8e:ee:41:c8:5a:11:54:ea:5b:fc:69:be:64:07:46:bd:
         d9:26:b6:97:3c:ad:c2:3b:55:ad:da:e2:9e:ba:fb:de:67:89:
         c8:51:d6:9c:0b:1b:19:5b:ce:1b:65:35:91:5e:5e:41:2f:6e:
         85:bb:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----