Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/c43c68a25abf16d5296531a309653b375366fff9.roa
File:                     c43c68a25abf16d5296531a309653b375366fff9.roa (raw, json)
Hash identifier:          oZn7hEyTK0GrnaKoXMa9tCn5l1qdK459JlQsVs7xrMg=
Subject key identifier:   96:CB:AB:CA:23:87:5E:2E:13:2B:E1:1F:D4:55:8A:6B:63:31:CE:14
Certificate issuer:       /CN=8de2b1bc144048a5118f84232c51e79737eafa07
Certificate serial:       0D373F
Authority key identifier: 28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/c43c68a25abf16d5296531a309653b375366fff9.roa
Signing time:             Wed 24 Mar 2021 14:46:00 +0000
ROA not before:           Wed 24 Mar 2021 14:45:57 +0000
ROA not after:            Tue 24 Mar 2026 14:45:57 +0000
asID:                     265869
IP address blocks:        45.227.17.0/24 maxlen: 24
                          2803:f620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866111 (0xd373f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2b1bc144048a5118f84232c51e79737eafa07
        Validity
            Not Before: Mar 24 14:45:57 2021 GMT
            Not After : Mar 24 14:45:57 2026 GMT
        Subject: CN=c43c68a25abf16d5296531a309653b375366fff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:3d:d3:69:ce:28:89:8d:9a:84:a7:5b:8f:
                    2c:73:53:d2:df:82:51:57:76:99:7d:3d:31:51:56:
                    68:2f:b6:69:26:85:56:fa:5a:79:9f:97:1a:5d:0d:
                    ea:c0:8b:ef:a7:ec:36:5f:e6:ea:88:15:a4:0a:9f:
                    ef:03:8c:df:5f:c2:61:64:7e:04:24:e2:af:56:b7:
                    e2:7e:e0:80:e7:9b:1f:85:f0:d9:54:0d:0a:20:37:
                    a0:f2:50:a0:18:1a:5d:78:21:41:91:3f:8c:4b:de:
                    12:a6:79:4a:73:ac:ed:be:e2:af:e1:d9:12:22:3d:
                    13:3a:2f:4c:ed:44:7c:15:84:51:80:b8:00:bf:8b:
                    4c:80:0d:94:fc:bc:75:77:b1:f2:07:62:67:8c:8d:
                    45:39:51:eb:05:40:61:16:30:35:3e:b3:d7:ea:2f:
                    6d:24:2e:14:43:6f:8a:cf:02:cb:df:27:00:5d:55:
                    22:70:40:67:6a:30:3b:92:ce:2f:d6:90:39:f7:eb:
                    d9:e4:b5:ea:ee:16:7e:e3:f7:6c:9b:ec:bf:2d:74:
                    a7:62:50:57:fc:57:be:2e:1c:2f:4a:d5:5e:1d:a3:
                    8f:d7:2d:d7:7b:5e:9f:84:8f:27:1c:01:a0:d0:38:
                    c9:db:24:3f:c9:f0:ab:7b:90:65:3e:a7:56:14:08:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:AB:CA:23:87:5E:2E:13:2B:E1:1F:D4:55:8A:6B:63:31:CE:14
            X509v3 Authority Key Identifier:
                keyid:28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/c43c68a25abf16d5296531a309653b375366fff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/8de2b1bc144048a5118f84232c51e79737eafa07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.17.0/24
                IPv6:
                  2803:f620::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:bb:6c:7a:fd:df:9b:7f:96:63:84:7c:d0:5f:12:48:da:
         23:61:31:e7:92:1e:f4:a9:41:66:4e:86:29:28:af:16:be:8e:
         27:39:48:1b:93:f1:a3:45:b6:7e:3a:97:b5:95:e0:79:fc:cb:
         6a:c2:34:d1:f1:fb:c5:a3:3b:0b:56:99:24:0f:f8:51:f5:98:
         46:a9:b7:9f:22:56:25:68:6c:48:2b:22:6e:dc:09:95:9f:c5:
         68:e5:87:8c:b4:c8:76:fa:00:c0:0b:97:7e:b6:6a:dc:da:55:
         ce:29:12:f5:1a:63:93:6f:15:c1:30:6f:d2:dc:26:21:00:26:
         52:91:24:bd:3b:8d:cd:fa:74:af:79:f8:bd:aa:be:5e:37:25:
         9c:1b:56:93:17:51:9a:ce:04:2b:49:53:68:eb:bd:3e:c5:7d:
         36:e3:ae:74:06:3f:64:a4:37:c1:cc:ba:36:9c:97:d0:db:21:
         1c:65:95:83:4b:85:94:02:3b:79:51:82:c6:3f:a0:7a:4b:a8:
         6e:78:83:3a:77:cc:06:d3:21:86:a9:91:8b:d0:19:a0:8b:a4:
         e0:d5:98:94:03:ea:02:87:f0:58:a5:2b:2e:14:10:99:6b:1f:
         2b:75:57:39:3b:4b:d0:9d:db:35:7f:02:4a:22:28:03:52:61:
         d8:8b:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----