Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/19422456dae05b5003110d2fe3817bbdd6441b59.roa
File:                     19422456dae05b5003110d2fe3817bbdd6441b59.roa (raw, json)
Hash identifier:          Z/vGgd9RjMPqM5L0pPze4O4itLDiw3a3MQY5lIWeqDI=
Subject key identifier:   0A:C4:A3:1B:B4:A0:54:26:63:FD:FD:43:84:7C:20:17:20:DB:E9:E6
Certificate issuer:       /CN=15f17e39b2a57eadc93fc47962028588c7fc873f
Certificate serial:       0BA1E4
Authority key identifier: E3:DF:CD:25:F0:87:8C:A8:D3:F8:39:8A:71:EC:BD:31:53:BC:7E:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15f17e39b2a57eadc93fc47962028588c7fc873f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/19422456dae05b5003110d2fe3817bbdd6441b59.roa
Signing time:             Wed 24 Mar 2021 14:47:29 +0000
ROA not before:           Wed 24 Mar 2021 14:47:28 +0000
ROA not after:            Tue 24 Mar 2026 14:47:28 +0000
asID:                     12684
IP address blocks:        45.174.8.0/24 maxlen: 24
                          2803:3060::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762340 (0xba1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f17e39b2a57eadc93fc47962028588c7fc873f
        Validity
            Not Before: Mar 24 14:47:28 2021 GMT
            Not After : Mar 24 14:47:28 2026 GMT
        Subject: CN=19422456dae05b5003110d2fe3817bbdd6441b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:4b:c4:3e:c5:2d:2b:04:a2:f8:90:39:24:
                    4a:82:18:46:87:4b:40:b8:7e:cd:5d:62:7e:dc:43:
                    e5:ae:8e:8e:b1:8c:36:7a:72:03:4f:ce:63:ac:4f:
                    52:0b:68:8d:da:8f:37:2a:76:12:e1:33:42:76:25:
                    a6:3a:d5:84:50:7e:46:5d:b7:94:3d:e2:71:ff:9b:
                    a2:c5:7c:fb:56:18:01:11:1c:49:d1:a8:a3:ac:c3:
                    66:c7:b2:49:0d:b6:73:ad:e8:ba:54:5c:7d:b6:12:
                    1e:5e:24:d1:e4:2a:f0:62:6e:5f:43:e8:41:a9:49:
                    29:80:2d:59:ad:7d:3f:b7:50:d2:23:30:01:07:3b:
                    cb:71:0c:80:c3:6b:29:81:a4:4f:b0:f2:13:82:77:
                    9f:43:71:c2:a4:63:79:92:4c:29:28:d6:f3:83:cc:
                    ad:19:36:72:68:8a:6b:85:f9:6a:6d:bb:b1:1c:4a:
                    89:58:e5:ca:28:b4:38:7c:ad:ad:fb:5c:77:a2:06:
                    e1:d4:a3:3c:90:ba:1b:27:91:88:4d:7a:dc:59:4a:
                    f0:90:cb:84:f0:82:6c:e3:d1:ed:c1:67:2e:e7:48:
                    d5:89:4b:03:90:db:d0:03:24:01:d0:54:26:3d:ed:
                    6a:1c:29:0c:be:f4:24:48:ce:23:cc:fe:d1:bc:89:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C4:A3:1B:B4:A0:54:26:63:FD:FD:43:84:7C:20:17:20:DB:E9:E6
            X509v3 Authority Key Identifier:
                keyid:E3:DF:CD:25:F0:87:8C:A8:D3:F8:39:8A:71:EC:BD:31:53:BC:7E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15f17e39b2a57eadc93fc47962028588c7fc873f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/19422456dae05b5003110d2fe3817bbdd6441b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/656d715d-a239-46a1-a4c0-85ed7528c811/15f17e39b2a57eadc93fc47962028588c7fc873f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.8.0/24
                IPv6:
                  2803:3060::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:4e:29:90:98:ed:6c:38:88:c7:29:38:20:01:79:3d:75:
         57:df:bb:67:16:3f:35:c8:b5:09:11:b4:72:d6:2d:24:99:7a:
         64:ab:f7:a3:bb:3a:1f:97:97:9c:d9:fe:30:13:6d:79:64:87:
         37:7b:74:b1:60:df:5a:b4:d8:36:8b:64:de:40:4b:8a:b5:3b:
         9e:d2:c5:c8:bd:62:86:c8:29:2d:db:4f:9f:df:85:29:45:3c:
         bf:be:54:5c:ae:b0:b5:87:af:1a:5e:07:2a:f1:80:1b:91:d2:
         98:02:7b:3e:3f:2f:38:16:7a:10:4a:92:78:00:5c:06:dc:a7:
         29:72:1d:c7:10:4f:c5:53:51:bd:23:5d:c3:c6:4e:e4:95:e0:
         43:4a:9d:fa:3a:3d:bf:80:c2:9a:7d:d7:d8:97:1d:9f:7e:15:
         b2:68:15:e6:30:2a:90:d7:4b:39:19:34:10:3c:a1:30:05:bc:
         2a:6c:72:bc:e9:38:70:2b:53:2d:b7:a2:bb:0a:00:96:72:ac:
         8d:82:c6:7d:02:72:a9:86:6e:74:d2:91:80:e5:55:38:46:74:
         48:10:75:0d:80:d4:86:ba:80:44:41:8a:ec:06:a3:ca:4f:aa:
         59:52:8a:95:9d:85:5c:05:14:f7:e2:3a:67:fe:93:c6:5a:17:
         1b:ac:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----