Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/d754120792f3adf64dddc176deec23d6c4fba69e.roa
File:                     d754120792f3adf64dddc176deec23d6c4fba69e.roa (raw, json)
Hash identifier:          MI++VeTnU3QcrK5c6CKKnwOVJzo5JT2QqTDyFBLSSy8=
Subject key identifier:   70:43:C3:35:E8:C9:B4:37:F3:15:C5:13:D9:C8:A3:71:BF:1C:72:87
Certificate issuer:       /CN=a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c
Certificate serial:       064CEA
Authority key identifier: 06:AA:E5:53:5F:36:8E:89:85:6C:60:3A:76:24:ED:60:1C:F9:69:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/d754120792f3adf64dddc176deec23d6c4fba69e.roa
Signing time:             Wed 24 Mar 2021 14:34:19 +0000
ROA not before:           Wed 24 Mar 2021 14:34:19 +0000
ROA not after:            Tue 24 Mar 2026 14:34:19 +0000
asID:                     61466
IP address blocks:        45.227.176.0/22 maxlen: 24
                          2803:2120::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412906 (0x64cea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c
        Validity
            Not Before: Mar 24 14:34:19 2021 GMT
            Not After : Mar 24 14:34:19 2026 GMT
        Subject: CN=d754120792f3adf64dddc176deec23d6c4fba69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:6d:3c:d7:71:27:9c:a9:fa:e3:04:4f:17:
                    8a:f3:d0:0d:29:05:37:cb:21:fa:bf:77:55:95:54:
                    7a:ad:29:da:4d:6a:b4:00:80:99:b2:f9:51:a6:1a:
                    e4:32:92:72:a9:61:2e:d8:6c:27:0a:59:58:f5:ee:
                    d0:be:cc:e9:51:e0:a2:7d:17:21:49:fc:71:f8:02:
                    86:88:94:93:bf:92:4b:4a:71:10:d6:b6:45:0b:6a:
                    4c:2a:9a:42:cf:8a:8c:3c:aa:49:de:90:f4:3d:c4:
                    89:62:22:04:aa:65:6b:23:d7:84:4d:d7:9f:1f:58:
                    92:7b:6f:9a:53:46:c2:44:b6:8a:61:92:aa:fc:5b:
                    6b:e3:8c:84:cd:d9:c5:75:a4:ce:6a:81:06:4a:16:
                    ba:c2:ab:43:f9:ef:e5:f6:f3:a3:5a:d0:e9:63:0c:
                    04:a8:55:8b:1d:c2:c0:19:08:6f:17:64:dd:e2:6a:
                    8a:e7:e3:cf:fb:eb:e9:d1:6e:26:63:32:b0:f2:e1:
                    55:d2:b5:dd:0b:59:82:11:4d:b0:67:c9:ce:4e:e3:
                    c6:61:70:16:e5:76:67:78:05:a6:4d:0f:c6:39:fa:
                    e5:4a:d5:98:31:c3:69:69:1c:54:75:03:72:a5:14:
                    b7:05:70:3b:4c:6c:6d:91:fd:ac:5c:5f:3f:63:45:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:C3:35:E8:C9:B4:37:F3:15:C5:13:D9:C8:A3:71:BF:1C:72:87
            X509v3 Authority Key Identifier:
                keyid:06:AA:E5:53:5F:36:8E:89:85:6C:60:3A:76:24:ED:60:1C:F9:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/d754120792f3adf64dddc176deec23d6c4fba69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6adb16d9-1b4b-4c7c-aab9-cd1bfc5a4fa1/a7daa5fcb9d5de1a7a65327493103ca7a7f4bf6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.176.0/22
                IPv6:
                  2803:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:9e:8c:21:8d:a1:24:3c:3a:64:4d:f0:9c:57:95:05:46:
         c7:97:49:c9:15:e1:93:3b:9e:89:ae:14:26:4f:ea:d1:7f:3f:
         37:fe:b4:9c:c5:72:3d:df:2b:fb:ed:92:4a:a8:34:ab:12:52:
         0a:64:b1:3d:2e:89:1d:46:a4:62:42:57:9e:e7:0c:19:65:6f:
         7b:6d:db:22:b7:54:08:ee:69:55:66:90:a3:09:51:98:d1:b7:
         d7:24:94:16:31:b6:76:4b:b4:94:3a:b4:71:00:80:25:c0:99:
         bd:41:33:ef:29:8b:3e:85:7d:c3:63:4c:90:59:61:ae:93:5d:
         5b:5a:8e:7d:b7:7b:64:d4:32:df:e3:74:b4:ba:94:63:37:e4:
         4e:ac:9a:e2:ea:38:e2:2f:33:95:2e:ce:cb:b2:ce:0a:62:82:
         74:7b:e7:0a:5b:19:84:8a:20:2b:ca:17:56:b1:85:76:55:de:
         56:a0:2f:67:3c:59:fe:5d:38:ba:a5:33:78:6a:09:28:20:9c:
         ec:97:66:56:cc:6b:fa:ea:2f:cf:da:fa:51:13:83:a3:0a:4e:
         4b:c1:fc:7d:1a:cf:15:7f:c9:66:88:03:30:4a:a7:7e:03:a5:
         5c:e3:5a:eb:f5:83:ea:d1:6e:fa:d8:49:5a:86:6e:42:64:c9:
         33:20:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----