Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/b870f188cc2dd73bae426044d52f94f4ef1cbb36.roa
File:                     b870f188cc2dd73bae426044d52f94f4ef1cbb36.roa (raw, json)
Hash identifier:          2sBPP0+qCdWsls1iqCWRj3HwugeE0qAhaDJam8KBsPA=
Subject key identifier:   03:30:C5:BC:DC:03:D0:58:EE:08:6C:CC:E5:65:A9:10:37:92:BB:F6
Certificate issuer:       /CN=8de2b1bc144048a5118f84232c51e79737eafa07
Certificate serial:       0D33BF
Authority key identifier: 28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/b870f188cc2dd73bae426044d52f94f4ef1cbb36.roa
Signing time:             Wed 24 Mar 2021 14:45:59 +0000
ROA not before:           Wed 24 Mar 2021 14:45:57 +0000
ROA not after:            Tue 24 Mar 2026 14:45:57 +0000
asID:                     265869
IP address blocks:        45.227.18.0/24 maxlen: 24
                          2803:f620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865215 (0xd33bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2b1bc144048a5118f84232c51e79737eafa07
        Validity
            Not Before: Mar 24 14:45:57 2021 GMT
            Not After : Mar 24 14:45:57 2026 GMT
        Subject: CN=b870f188cc2dd73bae426044d52f94f4ef1cbb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:d7:e1:63:ec:13:c5:6e:1b:e8:e7:96:5f:
                    46:fa:fd:70:f1:16:55:b1:8a:b4:b3:ae:39:76:85:
                    2f:90:e6:d7:71:8c:79:0e:14:47:0f:d8:b9:f7:84:
                    cf:be:d0:79:8c:6e:48:18:b4:29:2c:8c:db:71:5f:
                    02:fd:75:9a:a4:0e:33:4f:94:9f:3e:e2:d4:2d:6b:
                    8d:48:04:ee:85:4b:e7:35:5b:65:b9:54:56:62:45:
                    6d:0a:43:2a:58:58:b6:e1:00:8c:eb:92:24:4b:9f:
                    00:e2:d7:3d:86:7b:1e:59:dc:fb:40:31:18:34:2f:
                    84:eb:92:25:65:72:f0:ba:77:62:6b:44:c7:9d:99:
                    70:c0:b9:e1:92:42:f9:b5:88:71:3b:8f:19:85:df:
                    7e:0d:ac:04:20:09:da:d0:b5:b0:fe:22:41:76:8d:
                    a1:de:b4:d3:43:b0:e1:8e:55:b9:52:92:bc:5f:ab:
                    df:35:8e:b7:82:17:06:de:47:8e:88:7c:46:0e:fe:
                    5e:09:e9:d4:8a:ff:10:e7:2e:60:4b:cb:4f:e2:29:
                    f9:c7:2b:d3:79:5e:37:91:70:bd:56:53:a2:60:a7:
                    07:6b:d2:2b:4b:99:6d:8b:7a:66:95:b3:af:2c:a1:
                    24:31:7f:4e:70:b7:a2:9b:4e:62:a7:b2:80:8c:07:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:30:C5:BC:DC:03:D0:58:EE:08:6C:CC:E5:65:A9:10:37:92:BB:F6
            X509v3 Authority Key Identifier:
                keyid:28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/b870f188cc2dd73bae426044d52f94f4ef1cbb36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/8de2b1bc144048a5118f84232c51e79737eafa07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.18.0/24
                IPv6:
                  2803:f620::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:fb:ee:66:7c:4c:70:81:03:9e:5f:65:bd:d5:b5:9e:e0:
         6e:e1:ff:2f:9e:42:19:51:9f:8d:1d:df:92:f5:7c:d9:13:37:
         0a:e7:fb:f7:11:f4:c7:46:54:e2:7e:a3:92:7b:54:47:cf:21:
         dd:b6:d5:2c:49:a3:6f:5e:c0:d8:d7:66:ca:9d:fd:e4:aa:5a:
         8d:77:58:57:0d:9c:0e:7e:29:05:1d:ff:3a:84:6c:36:02:d0:
         6a:77:9d:e7:a6:c0:c0:bc:6f:33:8b:05:f5:38:aa:ff:ed:97:
         b6:22:33:56:95:19:62:c1:6a:c7:8c:2c:89:03:89:9b:55:75:
         55:91:a1:65:bd:8a:09:62:24:fb:4c:02:3f:5d:26:9d:47:3c:
         ca:c3:55:c8:ab:35:05:4e:b7:26:a7:4c:7b:8d:6b:82:34:bf:
         29:1e:fa:46:08:e2:65:c4:7a:27:f7:ff:8e:bf:db:12:1a:44:
         c0:90:dc:02:b4:b8:07:70:92:ed:22:d7:48:56:2e:2a:f3:46:
         0d:46:12:c8:f4:e4:5f:84:b8:36:8f:70:6a:06:97:82:59:84:
         82:5b:35:8a:ee:5c:40:d3:9b:db:4a:4c:07:44:be:98:14:52:
         9c:d0:70:98:08:8f:ed:a5:87:11:22:10:72:e2:5c:a4:d2:47:
         d6:c1:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----