Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/bba06ac772fb048ffaa5673784e5ac69baf702e4.roa
File:                     bba06ac772fb048ffaa5673784e5ac69baf702e4.roa (raw, json)
Hash identifier:          FtFptDTmrHY1WHQxvuPA8Zqhg0Vj2yz3Z6hwbcKrtG0=
Subject key identifier:   C1:E8:4A:38:5D:19:C7:C0:04:20:A8:10:F1:9A:EF:43:68:FE:8A:D6
Certificate issuer:       /CN=2fa4b13a4a672f37db0f6810d1b58a155fed879a
Certificate serial:       0C1FD8
Authority key identifier: 01:BB:29:6E:17:B7:02:9E:A8:C5:A6:02:39:9F:2A:96:28:39:D3:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fa4b13a4a672f37db0f6810d1b58a155fed879a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/bba06ac772fb048ffaa5673784e5ac69baf702e4.roa
Signing time:             Wed 24 Mar 2021 14:48:04 +0000
ROA not before:           Wed 24 Mar 2021 14:48:03 +0000
ROA not after:            Tue 24 Mar 2026 14:48:03 +0000
asID:                     267888
IP address blocks:        45.178.164.0/22 maxlen: 25
                          2803:fa60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794584 (0xc1fd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4b13a4a672f37db0f6810d1b58a155fed879a
        Validity
            Not Before: Mar 24 14:48:03 2021 GMT
            Not After : Mar 24 14:48:03 2026 GMT
        Subject: CN=bba06ac772fb048ffaa5673784e5ac69baf702e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:3a:12:d0:ee:af:43:bd:be:60:5f:5c:be:
                    70:e1:4d:18:8a:af:eb:aa:11:3a:b0:e5:5e:3d:23:
                    74:c1:5b:47:df:65:a4:1e:e8:6d:6e:8b:9f:9f:50:
                    a7:d6:1d:66:f0:0d:1d:2f:28:4e:cf:4a:1e:f6:52:
                    33:48:48:14:69:45:03:60:87:24:d6:68:48:53:94:
                    77:e9:23:02:d4:e6:2f:6d:62:ed:1c:d1:f3:be:cc:
                    2f:db:bf:25:84:2c:70:a1:fc:79:a8:1d:03:64:7d:
                    84:83:84:06:2b:58:ea:9b:57:31:4a:07:53:f2:bf:
                    b9:ce:a0:d2:ff:2f:fc:a6:68:77:17:ad:e6:23:11:
                    a5:65:d5:b8:bd:c8:1e:55:77:db:6a:de:ca:25:66:
                    c4:0b:6b:81:1a:e9:e3:ac:75:87:93:ee:6a:f0:ba:
                    53:43:0a:e3:79:e0:d5:8a:c8:5a:8e:3c:64:67:01:
                    15:41:dc:fd:4e:c1:75:b8:5e:a9:4e:d8:39:8f:57:
                    0d:f7:5a:05:b3:56:53:b6:ce:2d:92:cb:c5:ad:6a:
                    93:dd:10:f5:c7:b2:59:02:21:0b:c3:62:c2:25:6d:
                    1d:24:47:81:88:d0:86:34:6f:ed:91:9c:91:bf:ba:
                    87:04:5a:ed:aa:8f:a1:de:cc:43:1f:1f:49:dc:b1:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E8:4A:38:5D:19:C7:C0:04:20:A8:10:F1:9A:EF:43:68:FE:8A:D6
            X509v3 Authority Key Identifier:
                keyid:01:BB:29:6E:17:B7:02:9E:A8:C5:A6:02:39:9F:2A:96:28:39:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fa4b13a4a672f37db0f6810d1b58a155fed879a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/bba06ac772fb048ffaa5673784e5ac69baf702e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7218dea2-14d1-47da-b0cf-9155983c6297/2fa4b13a4a672f37db0f6810d1b58a155fed879a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.164.0/22
                IPv6:
                  2803:fa60::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:f0:82:b3:b6:0a:bc:d4:27:c5:fc:61:81:e7:18:f6:69:7f:
         ad:b1:ed:7a:bc:46:37:f8:c8:a7:6d:fe:ed:8c:7a:24:b3:1e:
         5f:b6:85:02:87:8f:b2:a1:e5:2f:68:a4:62:bd:19:d1:18:a2:
         08:14:15:ac:73:ec:51:9f:76:a6:12:45:ef:4e:dc:17:43:70:
         01:6f:95:66:65:e0:93:94:70:89:92:2d:e3:67:8b:a2:cc:10:
         57:98:44:ef:ec:4a:f8:29:24:30:ca:3e:a3:de:8d:6e:cf:ee:
         4a:e4:a3:86:92:a9:8b:0f:bb:7d:5f:16:66:8e:bf:e6:16:8b:
         f0:23:6a:31:7e:7d:2a:04:3c:f8:23:df:a5:0b:20:27:87:22:
         31:7a:2a:05:de:4a:80:71:29:ee:cf:0b:e2:c8:76:e9:78:c0:
         ec:59:d0:90:d0:75:8a:3d:3f:a3:33:49:aa:68:83:6c:6b:1b:
         cd:cf:81:7e:7c:7d:70:61:c7:f9:cc:dc:d3:46:8d:09:0a:fa:
         6d:ba:82:a6:d3:73:84:40:03:aa:d3:8f:c5:50:35:47:39:d3:
         c0:bf:67:0e:99:aa:a1:01:0b:e3:ac:9e:77:82:e8:14:98:ab:
         e9:10:02:b0:4a:68:6b:7c:82:60:14:df:40:ef:1f:8f:a7:60:
         a5:5f:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----