Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/e50caa5b6a6dc8312826c6b96ee6bcbce00a49bf.roa
File:                     e50caa5b6a6dc8312826c6b96ee6bcbce00a49bf.roa (raw, json)
Hash identifier:          AMzEhk4giPf1s2QfIRHC2fNyZXhEF2Z15k55OzrUi0k=
Subject key identifier:   7A:58:50:37:9C:91:C2:9A:A8:E8:01:79:AB:44:1D:1B:E5:76:CB:A8
Certificate issuer:       /CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
Certificate serial:       0C0287
Authority key identifier: F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/e50caa5b6a6dc8312826c6b96ee6bcbce00a49bf.roa
Signing time:             Wed 24 Mar 2021 14:48:11 +0000
ROA not before:           Wed 24 Mar 2021 14:48:11 +0000
ROA not after:            Tue 24 Mar 2026 14:48:11 +0000
asID:                     3549
IP address blocks:        45.185.16.0/22 maxlen: 22
                          2803:5360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787079 (0xc0287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4b356b54565faadd5f517f4770fa4a9fd3874a
        Validity
            Not Before: Mar 24 14:48:11 2021 GMT
            Not After : Mar 24 14:48:11 2026 GMT
        Subject: CN=e50caa5b6a6dc8312826c6b96ee6bcbce00a49bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b2:b6:1d:23:17:b7:ca:86:0f:a1:94:3e:4b:
                    07:fd:97:e7:db:8c:e3:70:08:94:a3:99:b2:eb:82:
                    aa:e7:c3:e8:5d:79:48:b8:38:7e:d0:a1:c6:0a:67:
                    7a:0d:8a:2a:fb:42:c6:54:2e:1e:76:1b:ef:cb:94:
                    5b:7f:20:6f:56:4d:61:75:c0:06:ad:67:c2:54:c1:
                    8e:38:87:24:bd:30:42:dc:9c:53:bf:7e:ba:eb:aa:
                    1e:34:da:e0:eb:f0:0f:d8:08:8d:38:2c:2e:7f:89:
                    7d:e9:f0:61:9a:aa:1f:0d:b9:a8:ba:e2:c3:68:8c:
                    c7:98:af:71:f4:e0:8b:d1:74:69:f4:94:a0:88:72:
                    fe:84:8d:a7:8b:89:44:5b:84:cb:38:d8:ec:01:f4:
                    3a:1a:67:b0:80:9f:9a:36:22:ae:dd:c2:4f:79:84:
                    5c:f2:1c:81:7f:34:29:53:62:0b:72:a0:7b:79:8f:
                    d2:6b:90:34:59:44:b7:37:8c:b5:53:43:f2:0f:a6:
                    23:d3:1c:8e:cb:a8:67:16:ab:e5:80:2a:8a:3e:66:
                    ec:a7:99:f6:82:f8:af:5b:2f:a8:5e:ef:79:f5:f3:
                    c4:28:b7:a4:ba:23:7b:77:56:e7:dc:ea:b6:ab:69:
                    80:20:39:3a:86:27:38:8a:00:c9:eb:dd:d5:68:84:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:58:50:37:9C:91:C2:9A:A8:E8:01:79:AB:44:1D:1B:E5:76:CB:A8
            X509v3 Authority Key Identifier:
                keyid:F9:A2:30:73:1F:C4:8A:07:26:22:56:75:C7:BA:00:EE:5B:AE:EC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4b356b54565faadd5f517f4770fa4a9fd3874a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/e50caa5b6a6dc8312826c6b96ee6bcbce00a49bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6eff3886-2afa-44a8-8d40-fd2d796c0d5b/fd4b356b54565faadd5f517f4770fa4a9fd3874a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22
                IPv6:
                  2803:5360::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:52:1d:a5:3a:46:91:25:e0:d7:98:87:fa:9d:71:3a:df:
         31:3d:66:e2:8d:9d:da:90:0c:85:a5:b2:0b:be:8b:79:08:12:
         50:ec:a7:97:f4:f6:19:2e:fb:7d:e1:09:b8:fb:a0:da:c9:87:
         29:e8:2f:80:9f:30:31:d5:3b:ff:13:c7:96:6a:ae:d6:12:39:
         13:fb:c9:a3:03:e6:4a:08:90:91:0b:00:12:5e:a6:80:92:d2:
         5c:3b:5d:34:76:cd:7d:f8:67:15:92:4c:9e:46:24:60:b9:d4:
         7b:ff:39:c5:27:09:4d:e9:02:9c:29:5d:e2:0f:bb:7a:79:38:
         62:98:5e:a7:e9:76:ba:66:30:52:05:ac:61:23:d6:32:e6:8c:
         14:3b:cc:17:f2:32:61:ab:dc:7f:55:7d:94:d5:19:b1:5d:50:
         c9:a1:45:5e:f2:68:dd:05:c2:6d:0f:ba:c7:4f:ea:da:c0:6a:
         fc:87:0d:7e:32:7e:2e:3f:5c:e8:00:74:19:ef:96:97:7e:4d:
         65:db:82:19:6b:de:90:df:37:49:a3:8a:8d:d3:27:87:13:46:
         e1:a2:42:f1:d8:67:ee:3f:fc:38:d7:9a:51:c9:90:0d:1d:13:
         83:27:03:70:d6:16:2e:dd:41:29:3c:2f:b8:b0:db:d8:b7:cc:
         02:ee:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----