Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/544ec9b6a20dcc026cab6a49421fb7addcac3cdd.roa
File:                     544ec9b6a20dcc026cab6a49421fb7addcac3cdd.roa (raw, json)
Hash identifier:          QVOxAuHpXH/LvDkFVhu+GsJmcrhO2paGblk4W41mRgs=
Subject key identifier:   22:98:9E:81:5F:1B:05:94:AC:14:4D:E1:DF:F9:58:F4:60:32:1E:25
Certificate issuer:       /CN=9a70223a7072e26ee6c67536cef9197634c52008
Certificate serial:       0C418B
Authority key identifier: 41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/544ec9b6a20dcc026cab6a49421fb7addcac3cdd.roa
Signing time:             Wed 24 Mar 2021 14:34:26 +0000
ROA not before:           Wed 24 Mar 2021 14:34:26 +0000
ROA not after:            Tue 24 Mar 2026 14:34:26 +0000
asID:                     265662
IP address blocks:        45.4.0.0/22 maxlen: 24
                          2803:ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803211 (0xc418b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a70223a7072e26ee6c67536cef9197634c52008
        Validity
            Not Before: Mar 24 14:34:26 2021 GMT
            Not After : Mar 24 14:34:26 2026 GMT
        Subject: CN=544ec9b6a20dcc026cab6a49421fb7addcac3cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:52:7a:dd:bd:cc:ad:e9:1d:61:57:03:a7:
                    27:7a:d8:18:bb:cc:99:03:73:38:15:06:ca:81:37:
                    28:2f:e2:86:6f:ed:bb:ae:be:68:a7:af:8f:13:fc:
                    42:8b:6a:72:3f:32:1a:e7:3e:ad:2f:19:b6:1e:2f:
                    70:07:c7:86:e7:84:63:5d:be:4b:b7:7b:01:9e:e5:
                    5e:dc:77:ab:92:73:a3:54:24:9e:e8:80:68:c4:16:
                    f5:9e:be:41:6a:d5:b0:d5:8e:9b:80:9e:02:c6:29:
                    18:1a:cc:b3:95:36:f3:20:5e:aa:6f:04:dd:be:2f:
                    de:8d:77:34:26:44:ac:aa:c8:8e:25:e0:b1:d1:bc:
                    d1:35:77:1b:bf:13:93:21:bb:3b:50:a5:48:9c:cd:
                    e3:e5:bb:0f:65:74:28:63:fc:80:79:fe:28:dd:68:
                    0e:61:1f:56:2f:62:09:5a:5b:15:2f:aa:ac:1d:01:
                    18:41:a7:11:3f:53:23:30:c5:9d:a8:5c:7a:2c:b5:
                    d9:91:44:57:93:bc:8d:c7:2c:20:fe:bd:de:93:f7:
                    60:16:55:b7:84:81:b4:5b:2e:50:68:82:c9:35:17:
                    79:c6:d2:2e:78:4a:b3:9a:b3:d2:bf:3e:4a:72:98:
                    95:18:6c:94:23:0f:ec:c7:d8:6c:43:48:d1:6f:e2:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:98:9E:81:5F:1B:05:94:AC:14:4D:E1:DF:F9:58:F4:60:32:1E:25
            X509v3 Authority Key Identifier:
                keyid:41:DB:4D:7B:9D:45:A4:ED:D2:24:27:B1:A1:CC:85:94:81:95:1E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a70223a7072e26ee6c67536cef9197634c52008.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/544ec9b6a20dcc026cab6a49421fb7addcac3cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/706a1af0-50c7-46d7-bdc1-f3c7e38fe56f/9a70223a7072e26ee6c67536cef9197634c52008.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.0.0/22
                IPv6:
                  2803:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:65:16:89:2a:0d:88:c3:2c:1f:0e:fb:69:56:e0:91:d7:f6:
         79:8f:5a:56:88:96:56:7b:e7:75:59:c0:f9:b7:5a:0e:38:12:
         e3:eb:f5:51:f9:ba:09:f5:ff:95:20:6e:2a:d7:20:75:98:a6:
         6a:4c:18:55:4b:c6:f4:15:40:ea:c2:3c:5f:d9:56:cc:75:2b:
         fd:40:70:f0:1e:9a:68:7f:c1:51:e0:6f:ed:b9:b4:42:bc:1a:
         97:17:bb:46:03:a2:90:8b:05:92:f3:d3:1c:c0:0a:d4:9f:ee:
         af:77:c0:0b:e2:28:9f:2a:aa:a0:d0:88:92:1f:02:e0:d4:b7:
         13:16:fc:b9:34:f2:ad:f1:cc:ce:b1:60:de:b9:cb:e9:0f:e7:
         52:bf:aa:bd:0b:b4:e3:a6:d0:b8:df:42:71:99:b6:83:37:bb:
         31:a2:00:68:79:93:a4:9b:aa:75:0c:f5:16:e2:9b:75:ff:6d:
         44:49:a2:56:00:7d:9a:26:02:b2:2c:ef:20:bb:9c:21:7a:1a:
         ac:08:69:ec:e3:36:23:45:8f:ed:5d:82:c4:e8:74:19:4b:d3:
         3c:ce:34:84:8e:0d:c8:2e:d9:77:c5:80:67:b6:23:d9:5e:76:
         83:de:c9:40:d7:be:3f:e5:5f:b2:d0:b6:08:94:b4:41:33:7c:
         24:b3:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----