Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/1a32e8b79f859731518353a631317e172c4066e3.roa
File:                     1a32e8b79f859731518353a631317e172c4066e3.roa (raw, json)
Hash identifier:          hraMfWYj/+73fKeLLgyvnUcykF+svVZPVWP3KojUFxI=
Subject key identifier:   3F:55:F3:03:0E:E4:BE:78:70:DE:F4:78:26:5A:37:F1:49:F1:3D:91
Certificate issuer:       /CN=21ad96db852c56e769dba59f9242b1a51f5ba4ec
Certificate serial:       0B9D45
Authority key identifier: CB:A4:3C:1B:FB:22:B9:4B:4D:2A:12:AA:05:8A:1E:D6:F6:54:54:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21ad96db852c56e769dba59f9242b1a51f5ba4ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/1a32e8b79f859731518353a631317e172c4066e3.roa
Signing time:             Wed 24 Mar 2021 14:30:42 +0000
ROA not before:           Wed 24 Mar 2021 14:30:42 +0000
ROA not after:            Tue 24 Mar 2026 14:30:42 +0000
asID:                     267874
IP address blocks:        45.175.152.0/22 maxlen: 24
                          2803:3260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761157 (0xb9d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ad96db852c56e769dba59f9242b1a51f5ba4ec
        Validity
            Not Before: Mar 24 14:30:42 2021 GMT
            Not After : Mar 24 14:30:42 2026 GMT
        Subject: CN=1a32e8b79f859731518353a631317e172c4066e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:7b:16:30:70:a7:78:86:34:3b:36:a3:80:
                    29:a1:a4:c0:7c:71:3f:cf:58:1e:a5:90:33:2a:18:
                    df:d0:04:40:7f:55:99:8d:84:ec:1e:d3:04:71:aa:
                    c0:28:00:ba:c2:1b:74:be:db:24:4d:89:8a:89:c1:
                    9d:9c:28:4e:05:39:18:08:d2:41:0a:c2:a0:51:7d:
                    36:3a:8a:36:4d:0f:24:f3:9d:55:54:13:8f:82:95:
                    08:25:13:a0:d4:42:1d:e0:ff:f1:28:36:f6:c4:38:
                    7c:25:60:72:32:12:52:5c:1d:d7:8c:06:68:5b:69:
                    b1:33:ac:d6:20:52:1f:74:dc:d5:26:d6:75:1b:4e:
                    d4:78:88:3e:7d:75:57:97:94:3b:a1:f3:5c:07:db:
                    39:e8:60:d4:10:27:bd:96:99:37:3f:3e:e4:23:c8:
                    3d:b9:93:27:0e:78:86:62:7a:b7:01:86:27:e8:ba:
                    1e:8b:61:d5:e8:4e:d4:3e:16:20:ab:66:ef:22:b2:
                    63:ef:6d:d8:fa:cd:90:4b:07:8a:51:ef:a0:c6:16:
                    84:07:fc:79:4a:a3:cb:b7:0d:6d:5f:e2:cc:0f:4b:
                    52:cd:5d:3e:50:ec:25:4d:7b:b4:0f:8a:01:e0:64:
                    38:10:78:33:e5:f0:f0:26:19:48:7c:e4:ab:cc:cd:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:55:F3:03:0E:E4:BE:78:70:DE:F4:78:26:5A:37:F1:49:F1:3D:91
            X509v3 Authority Key Identifier:
                keyid:CB:A4:3C:1B:FB:22:B9:4B:4D:2A:12:AA:05:8A:1E:D6:F6:54:54:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21ad96db852c56e769dba59f9242b1a51f5ba4ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/1a32e8b79f859731518353a631317e172c4066e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/726ebe11-8130-46d6-9fc7-c93bae9239f1/21ad96db852c56e769dba59f9242b1a51f5ba4ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.152.0/22
                IPv6:
                  2803:3260::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:99:1d:56:52:ff:6c:ea:17:d2:33:e5:2e:8d:51:0c:78:83:
         3f:ad:3f:85:ab:1a:c1:2c:3e:36:bc:82:54:96:02:80:ce:ea:
         c4:3d:4d:85:d5:ef:c1:80:69:2e:61:52:01:dd:62:b5:83:57:
         5b:19:b7:d2:1a:ed:bb:85:07:36:1a:35:e2:cc:67:e3:eb:3e:
         a6:69:45:a5:70:47:f0:6b:a4:19:6a:e1:d6:3e:d2:bf:a2:a0:
         45:9b:09:98:8f:cf:7a:0a:11:58:e8:85:af:b5:b1:ea:b6:e9:
         f8:4e:5c:77:92:f9:32:30:d3:57:f8:d8:49:27:12:c9:6e:34:
         30:6d:c0:9f:83:3d:51:09:a7:f8:83:55:d3:c1:68:fe:4c:7e:
         32:08:a2:29:a4:d0:dd:73:77:fa:b2:96:48:94:0b:d8:d0:a2:
         5a:50:ee:42:a7:c9:03:31:ec:53:5e:57:b8:5c:12:69:ed:0a:
         d8:a3:86:d7:ef:c6:d4:12:ec:62:d8:f2:c6:03:2b:bc:93:7b:
         d3:7d:e5:a5:6c:da:ae:f5:ae:e8:06:b0:58:26:c9:59:d7:d0:
         4c:e3:ff:b3:a2:57:cc:04:18:8c:a8:70:6b:fc:c7:86:4c:36:
         08:fd:70:e5:fc:ac:ad:df:11:89:d3:4f:f7:0c:db:2d:cb:7c:
         46:fc:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----