Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa
File:                     4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa (raw, json)
Hash identifier:          AI2K7OzewaaH00uIdoZL2XYomsRmv9xLBdN0tWXyZzM=
Subject key identifier:   30:4E:57:C5:22:52:60:08:E7:77:C5:89:7E:23:ED:30:43:8D:DB:C4
Certificate issuer:       /CN=88170bb11130cbc833ab2ee961d2c4e2fd0d31c1
Certificate serial:       04D4AF
Authority key identifier: FB:71:57:62:EF:B0:E4:D3:31:95:ED:76:BB:CE:40:5A:F6:F1:82:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa
Signing time:             Tue 20 Apr 2021 16:41:19 +0000
ROA not before:           Tue 20 Apr 2021 03:00:00 +0000
ROA not after:            Sat 20 Apr 2024 03:00:00 +0000
asID:                     267932
IP address blocks:        45.180.120.0/22 maxlen: 23
                          2803:160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316591 (0x4d4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88170bb11130cbc833ab2ee961d2c4e2fd0d31c1
        Validity
            Not Before: Apr 20 03:00:00 2021 GMT
            Not After : Apr 20 03:00:00 2024 GMT
        Subject: CN=4cd9dff424ef56fce5854f0af6b50b7e3d72c857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:be:49:36:1f:d0:58:2b:5e:60:00:ba:94:
                    61:8c:b7:44:b6:11:66:94:33:9b:8d:ec:a3:81:ca:
                    af:01:2e:8c:21:22:68:17:f3:f6:99:0b:5d:e0:dc:
                    88:97:bc:d8:3b:a3:7e:7d:f5:9d:bd:70:f2:c7:5a:
                    b9:f3:85:5d:a4:dc:f1:03:7c:8a:4d:46:82:b8:84:
                    0c:04:70:a8:da:72:af:9d:ca:1a:6a:cc:51:04:dd:
                    bc:85:b3:b7:a8:e7:ff:89:fe:28:83:aa:07:9f:5f:
                    a1:55:cc:96:29:3b:c2:b4:53:1e:64:a1:15:47:18:
                    13:ff:d2:15:0d:71:bd:d5:41:ee:e2:16:4d:b0:4f:
                    b1:35:c4:b2:df:74:04:b3:e8:d0:26:37:de:8f:a5:
                    a1:a7:53:84:ef:c7:e2:2f:3a:4a:b6:79:e7:53:a7:
                    81:7b:85:14:91:12:4f:31:bf:f2:e0:86:c2:fd:26:
                    54:66:7b:e9:85:d7:2f:40:7b:88:48:cf:a7:b5:0f:
                    82:3f:0d:38:43:47:35:df:78:0a:b6:76:40:69:a5:
                    1b:be:38:08:58:c2:79:4a:42:ff:86:93:57:61:e7:
                    c4:0b:95:77:f5:30:87:22:7b:6e:c3:17:e6:36:2b:
                    98:eb:cd:d2:16:b9:be:16:d2:4c:bb:2d:54:9f:f9:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:57:C5:22:52:60:08:E7:77:C5:89:7E:23:ED:30:43:8D:DB:C4
            X509v3 Authority Key Identifier:
                keyid:FB:71:57:62:EF:B0:E4:D3:31:95:ED:76:BB:CE:40:5A:F6:F1:82:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/4cd9dff424ef56fce5854f0af6b50b7e3d72c857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65ce240a-cd5f-43e8-a1c5-516464483183/88170bb11130cbc833ab2ee961d2c4e2fd0d31c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.120.0/22
                IPv6:
                  2803:160::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:15:f3:43:ea:a5:78:03:ed:32:50:33:02:8f:3c:f5:33:
         8e:23:fd:a0:22:c6:cd:ab:01:63:39:f6:25:5c:ab:ff:74:2e:
         d7:53:44:48:1e:18:3e:04:79:68:f7:1e:de:68:32:9f:9c:2d:
         bc:87:bd:31:03:ec:5e:5a:85:35:77:68:6e:ff:66:40:05:e1:
         f7:a2:cc:66:0d:bd:06:d7:27:b0:8e:21:dd:d8:0d:69:7f:55:
         7f:b3:ea:95:24:e2:c2:70:b0:73:20:1c:ef:23:75:cf:40:f9:
         32:e1:a6:25:d4:d6:3d:98:da:63:84:47:04:20:84:39:ea:aa:
         43:3a:08:98:16:8d:38:1e:e7:63:3b:5e:2c:bd:5d:34:f7:c6:
         6e:35:ba:d1:6a:13:e9:0d:5b:2c:b5:e9:2d:1e:25:dc:13:fe:
         ce:67:81:0b:3f:da:ce:31:4a:3d:45:24:06:05:b4:d2:e6:77:
         79:bc:a0:41:17:d9:2f:0d:ea:80:c8:bc:01:80:ab:9e:ac:4f:
         cb:27:a4:78:98:ad:e8:b2:41:3f:15:a9:ad:5f:b6:52:3c:d4:
         2b:a2:99:96:5e:84:0e:1a:46:6b:1a:d5:b6:b5:a4:6e:e7:85:
         82:17:66:5d:5e:77:89:70:d9:33:1e:01:da:72:44:c5:7e:4e:
         b8:14:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----