Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/da33badd8625caf30f3e769a699f91731b79b9fd.roa
File:                     da33badd8625caf30f3e769a699f91731b79b9fd.roa (raw, json)
Hash identifier:          tkwKiUZZSi/tfi2l31vaseNcaTRQpPMzG+G+7WM1YDw=
Subject key identifier:   E1:74:9C:D6:E9:22:2E:60:34:F8:56:6F:98:5C:6C:6C:1C:E3:A3:2D
Certificate issuer:       /CN=8de2b1bc144048a5118f84232c51e79737eafa07
Certificate serial:       0D3854
Authority key identifier: 28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/da33badd8625caf30f3e769a699f91731b79b9fd.roa
Signing time:             Wed 24 Mar 2021 14:46:00 +0000
ROA not before:           Wed 24 Mar 2021 14:45:57 +0000
ROA not after:            Tue 24 Mar 2026 14:45:57 +0000
asID:                     265869
IP address blocks:        45.227.19.0/24 maxlen: 24
                          2803:f620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866388 (0xd3854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2b1bc144048a5118f84232c51e79737eafa07
        Validity
            Not Before: Mar 24 14:45:57 2021 GMT
            Not After : Mar 24 14:45:57 2026 GMT
        Subject: CN=da33badd8625caf30f3e769a699f91731b79b9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:40:61:49:86:72:bd:95:11:5a:bc:e2:06:
                    01:97:89:65:e8:d3:a8:bc:87:2a:58:65:26:67:b3:
                    0b:02:84:e9:0c:80:c8:15:5b:09:61:c2:93:b8:e7:
                    31:95:65:ea:70:ac:d3:8a:6b:2f:29:f9:3e:5b:11:
                    0b:c3:f6:a6:2a:f0:41:d4:fa:7b:0d:50:33:3e:69:
                    95:a9:15:31:26:68:c0:0b:60:69:f4:bc:a4:15:5a:
                    d3:2f:11:f5:80:3c:a3:33:04:a7:3e:10:af:0a:53:
                    8a:b5:9b:8c:06:a2:9c:20:79:27:cd:cb:2e:4a:ba:
                    36:56:44:3d:85:88:6d:a3:df:24:6a:fe:f8:84:68:
                    58:71:91:5a:c9:16:87:24:d7:d6:02:27:be:20:0d:
                    21:a9:0d:b9:3d:af:88:44:7c:bb:34:e9:db:f0:44:
                    89:26:45:e6:9b:90:0e:f0:bd:31:7b:ed:8e:eb:ae:
                    2d:71:2e:22:12:18:dd:bc:95:a3:19:1a:68:1b:e8:
                    63:b9:5e:b4:b7:74:73:26:f5:1d:12:70:2b:7c:82:
                    c5:0b:c6:7b:de:58:b2:9e:5b:a6:ea:5b:60:f3:41:
                    e0:de:70:23:50:f4:6a:a4:99:4b:d0:96:ca:e7:0a:
                    84:f3:87:38:1c:54:51:20:33:5c:15:e5:49:7b:76:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:9C:D6:E9:22:2E:60:34:F8:56:6F:98:5C:6C:6C:1C:E3:A3:2D
            X509v3 Authority Key Identifier:
                keyid:28:E3:78:42:95:3D:D3:EC:AF:90:2B:4F:20:3C:96:65:B1:FA:43:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8de2b1bc144048a5118f84232c51e79737eafa07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/da33badd8625caf30f3e769a699f91731b79b9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d737e2d-ff78-4ad6-be71-0d2cfdc05a35/8de2b1bc144048a5118f84232c51e79737eafa07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.19.0/24
                IPv6:
                  2803:f620::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:d9:a4:dc:24:32:3b:fe:f1:fd:7e:05:cd:01:5b:ee:e8:
         b8:ee:7e:1f:dd:10:99:21:e6:55:b2:ef:f3:4d:a9:c5:c6:80:
         08:32:af:c4:2f:54:e7:34:2b:3f:13:26:de:b1:62:3c:2a:a7:
         89:14:6d:ec:ad:33:7e:07:0c:aa:5c:26:a7:11:d2:90:93:03:
         0c:4e:f0:b5:00:6d:3b:f2:15:f8:02:f6:bf:00:b6:13:d1:ea:
         be:6b:46:11:aa:10:c5:1a:c4:f3:64:eb:ad:ad:e2:46:a3:c4:
         5e:50:8c:16:46:eb:a2:38:e4:65:30:93:47:03:1b:1a:cf:c6:
         ff:2b:45:70:ff:43:89:b5:7a:d1:77:76:57:2b:d5:eb:93:b2:
         5d:6d:29:48:2c:fc:c6:39:56:0a:48:e1:2d:f0:a6:2f:20:f1:
         94:ab:85:55:31:1d:8c:0a:8c:9e:fc:da:74:25:41:67:a1:28:
         96:22:bb:e1:d7:ca:1b:9a:25:3b:de:70:67:54:86:35:c1:dc:
         9a:15:60:af:89:f0:b2:ba:18:c8:d4:08:53:21:3b:6a:59:f8:
         7d:9a:bc:bf:92:2d:98:02:a2:9e:44:ef:87:03:fa:cd:cf:41:
         f2:8f:56:53:c8:e5:07:4b:ba:28:38:6a:0f:fb:37:df:d1:b1:
         cb:82:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----