Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/dd5490a66175a2b3feefecb1233d8a2ec8de084f.roa
File:                     dd5490a66175a2b3feefecb1233d8a2ec8de084f.roa (raw, json)
Hash identifier:          1IydpW9T46iJftFJbpt0w18C45f2jos8WCaoXv7255U=
Subject key identifier:   F4:BD:57:35:D6:B7:05:D9:45:CF:C1:A4:D2:B2:39:1A:69:94:DB:FC
Certificate issuer:       /CN=67d53affef11c516462c0e074e52840a3c1f0661
Certificate serial:       0BA815
Authority key identifier: 5A:F5:BD:C8:E8:D4:4D:65:6E:D1:9C:20:D8:06:9C:58:80:82:B2:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/67d53affef11c516462c0e074e52840a3c1f0661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/dd5490a66175a2b3feefecb1233d8a2ec8de084f.roa
Signing time:             Wed 24 Mar 2021 14:46:31 +0000
ROA not before:           Wed 24 Mar 2021 14:46:31 +0000
ROA not after:            Tue 24 Mar 2026 14:46:31 +0000
asID:                     267914
IP address blocks:        45.179.152.0/22 maxlen: 22
                          2803:8e60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763925 (0xba815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d53affef11c516462c0e074e52840a3c1f0661
        Validity
            Not Before: Mar 24 14:46:31 2021 GMT
            Not After : Mar 24 14:46:31 2026 GMT
        Subject: CN=dd5490a66175a2b3feefecb1233d8a2ec8de084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:b3:8b:a3:db:1b:03:38:dd:99:72:f9:23:
                    23:15:87:33:6e:a5:f3:66:30:bd:a3:24:ab:60:3f:
                    56:74:91:82:00:2b:01:5b:aa:50:0d:ab:77:70:53:
                    65:c5:3a:77:e0:8b:01:e8:ac:eb:7b:70:f5:e9:9a:
                    7c:8e:13:35:4b:7c:9a:95:a3:44:7d:ff:51:ec:85:
                    4f:ce:65:70:21:bb:47:4d:ba:63:70:3e:bc:53:01:
                    e1:33:44:7b:fe:a4:92:63:89:22:c2:ba:49:38:fa:
                    30:ce:0d:d1:40:8a:65:f8:57:ca:0e:19:a2:e4:4a:
                    fe:e4:65:dc:dc:44:77:91:e8:bb:d5:4b:0f:46:aa:
                    91:15:9b:54:60:17:00:41:16:8a:b3:44:48:c4:dc:
                    33:1c:a8:39:a4:c9:1c:a6:af:3f:b5:6c:a7:99:4a:
                    22:1c:49:a5:20:f6:51:5f:fb:89:d7:93:3e:4b:8b:
                    50:b8:a5:51:16:bb:53:bd:42:a2:c5:80:3f:a1:53:
                    0f:2a:0f:9d:03:b0:47:40:50:85:af:be:1a:d8:2b:
                    f1:e3:72:19:b9:9f:0b:dc:fd:e7:ed:10:14:cd:30:
                    bc:9a:65:af:6e:04:ca:b8:f0:4a:fa:ce:68:57:0d:
                    36:48:92:a4:a4:80:5c:4e:35:f0:c3:32:4a:69:89:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:57:35:D6:B7:05:D9:45:CF:C1:A4:D2:B2:39:1A:69:94:DB:FC
            X509v3 Authority Key Identifier:
                keyid:5A:F5:BD:C8:E8:D4:4D:65:6E:D1:9C:20:D8:06:9C:58:80:82:B2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/67d53affef11c516462c0e074e52840a3c1f0661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/dd5490a66175a2b3feefecb1233d8a2ec8de084f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/67d53affef11c516462c0e074e52840a3c1f0661.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/22
                IPv6:
                  2803:8e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:11:e7:37:a1:34:ac:a9:bb:e6:82:48:b9:67:36:41:6d:
         06:a0:42:40:c1:e5:03:44:83:59:69:0e:ef:56:25:3a:5e:8f:
         3c:46:de:d7:a5:ec:02:c0:34:d7:b0:d4:8c:56:16:1e:5c:ee:
         ad:a2:a9:2b:40:7c:75:08:d1:d2:73:d2:ec:7d:32:72:f1:98:
         c1:25:41:72:2e:7f:b5:64:a9:08:1f:02:2e:92:99:10:4e:b9:
         8c:2f:60:3a:d5:30:a1:99:28:c5:aa:ee:ec:74:dd:4f:33:77:
         54:bf:e3:a8:c9:ac:1d:01:3e:34:3f:3a:a6:42:01:3c:b1:7f:
         cb:c4:cf:71:0f:33:2d:f7:c3:78:ee:bc:7f:19:82:1b:be:00:
         69:2c:98:4a:ef:e9:71:b4:6d:c8:7d:7f:f6:f0:cd:07:3b:af:
         ae:e2:dc:1a:5f:65:83:38:40:16:91:0d:0d:95:2e:1d:8a:7f:
         58:a5:59:18:aa:32:9a:4f:9f:44:ab:ba:46:e1:5f:56:9b:03:
         cb:57:ca:4b:a6:a2:c9:46:8f:41:4c:b8:5c:b7:a0:6b:6a:7f:
         07:55:e5:d2:82:6a:19:4d:0e:ad:47:27:6f:21:60:ed:61:c4:
         9a:91:aa:1a:08:bc:52:50:82:18:d0:57:98:dd:1d:b7:b2:66:
         62:44:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----