Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/68a7381c48b5fc39d3c2a6c668954556789600eb.roa
File:                     68a7381c48b5fc39d3c2a6c668954556789600eb.roa (raw, json)
Hash identifier:          V/EsRKWxg+zATLyimjbMNTkx+9JgSNJzbOUtzYFjUIk=
Subject key identifier:   10:D5:85:D1:47:A2:4E:99:99:3C:8F:35:11:4E:64:12:F1:9B:19:91
Certificate issuer:       /CN=8e03709f0f9fc13955d244b1e7bab74956cd979b
Certificate serial:       0C9FD5
Authority key identifier: 21:92:B9:92:72:52:16:A9:16:6C:9B:D8:A0:09:28:24:81:ED:F3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e03709f0f9fc13955d244b1e7bab74956cd979b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/68a7381c48b5fc39d3c2a6c668954556789600eb.roa
Signing time:             Wed 24 Mar 2021 14:42:10 +0000
ROA not before:           Wed 24 Mar 2021 14:42:10 +0000
ROA not after:            Tue 24 Mar 2026 14:42:10 +0000
asID:                     265684
IP address blocks:        45.228.232.0/22 maxlen: 22
                          2803:d20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827349 (0xc9fd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e03709f0f9fc13955d244b1e7bab74956cd979b
        Validity
            Not Before: Mar 24 14:42:10 2021 GMT
            Not After : Mar 24 14:42:10 2026 GMT
        Subject: CN=68a7381c48b5fc39d3c2a6c668954556789600eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:3e:9f:04:12:2b:cc:ae:ba:87:df:3a:87:
                    a0:3a:9b:71:3d:df:21:2c:bb:51:21:4b:3f:5a:46:
                    3f:88:20:fe:f4:72:3b:15:dc:e0:8a:12:b5:7c:6e:
                    e9:ba:3a:cc:00:14:d6:6c:48:81:2e:2d:e3:e5:ea:
                    ab:e1:fc:57:16:cb:56:cc:d3:2f:7b:c2:ef:a6:64:
                    21:2c:cb:cd:e5:56:19:f1:e6:c9:58:a9:1d:e3:6e:
                    49:ab:c2:81:14:22:de:cf:d2:bb:46:9d:f8:dd:f4:
                    cb:f1:41:9e:4d:a3:3c:8e:ad:81:7d:24:67:19:50:
                    c3:de:76:7e:ff:5d:fb:5a:f4:ce:a7:7d:ed:2e:64:
                    83:3c:18:47:0c:23:5f:bf:e6:5e:b4:08:e7:0f:79:
                    19:5d:c4:df:d0:89:24:cc:43:52:8f:1d:e2:8e:bc:
                    53:9f:30:a3:bb:2b:17:7e:24:ef:a2:6e:15:80:a7:
                    7a:05:4b:9a:7f:11:c0:d6:d0:62:9c:47:3f:6f:99:
                    57:c9:e6:3b:08:df:67:12:b7:e0:5b:b1:a7:33:2b:
                    24:ca:74:c0:17:8d:20:8c:1e:3f:ee:63:17:2c:cf:
                    b7:65:39:a1:e9:fb:50:9e:53:c5:cb:53:e5:13:9a:
                    2b:60:f8:09:8a:1e:b1:ba:4e:8a:10:06:3b:9f:c4:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D5:85:D1:47:A2:4E:99:99:3C:8F:35:11:4E:64:12:F1:9B:19:91
            X509v3 Authority Key Identifier:
                keyid:21:92:B9:92:72:52:16:A9:16:6C:9B:D8:A0:09:28:24:81:ED:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e03709f0f9fc13955d244b1e7bab74956cd979b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/68a7381c48b5fc39d3c2a6c668954556789600eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/8e03709f0f9fc13955d244b1e7bab74956cd979b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.232.0/22
                IPv6:
                  2803:d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:51:db:3b:54:d3:d7:b0:85:07:88:fb:53:e9:54:57:64:33:
         1b:f2:bf:8b:71:18:77:3d:6f:66:72:51:9c:35:c5:31:84:08:
         ab:a2:8b:77:1f:a5:62:bf:d3:ae:cc:45:00:25:95:a8:df:95:
         ce:98:41:ac:4c:a2:cb:1e:c6:9a:21:46:f5:87:ee:54:cc:50:
         24:61:90:02:4b:04:b6:49:a2:4f:a2:35:5f:83:82:c0:00:f9:
         5e:0a:7c:6d:b7:0f:6f:bf:2c:d3:ec:62:2b:9d:b1:74:60:d1:
         3c:3d:f1:e9:de:9d:2c:33:94:cc:16:4f:13:04:fb:87:18:be:
         da:9e:21:0b:9b:f8:07:d6:a6:35:0a:7d:26:f6:d4:2c:3d:a9:
         bb:b4:4c:79:28:23:73:22:0a:0d:a3:50:98:f9:a1:59:49:11:
         60:91:20:53:ac:45:cb:ec:2c:70:5e:3b:ea:45:c5:a9:f6:5d:
         37:e3:29:c5:0c:44:78:86:13:ab:d4:ec:b9:72:fa:d1:da:12:
         bf:05:3d:5d:34:1e:74:08:22:26:f2:dd:93:23:10:b9:f2:fa:
         63:74:1d:c7:60:b3:73:80:e3:ac:8b:1a:16:c8:fc:66:36:cf:
         b7:23:78:70:74:8d:11:21:2c:d7:12:6c:ed:28:bd:ab:9c:20:
         44:62:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----