Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/6bf630d5dc38289bb6282054e6561d67cf4a9ccf.roa
File:                     6bf630d5dc38289bb6282054e6561d67cf4a9ccf.roa (raw, json)
Hash identifier:          qbd/Ez0LuzJWZe4VQ6LKBz4pSZvQpEWa5UU9xGJuB2Q=
Subject key identifier:   BE:16:8A:C1:13:98:D7:30:C9:B2:1C:15:CE:C1:2B:8E:B8:C1:BF:95
Certificate issuer:       /CN=dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a
Certificate serial:       0D2FB2
Authority key identifier: A9:7B:E6:50:E4:7A:DF:0A:24:B5:9F:E6:39:B3:43:11:A1:86:F6:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/6bf630d5dc38289bb6282054e6561d67cf4a9ccf.roa
Signing time:             Wed 24 Mar 2021 14:45:35 +0000
ROA not before:           Wed 24 Mar 2021 14:45:35 +0000
ROA not after:            Tue 24 Mar 2026 14:45:35 +0000
asID:                     32034
IP address blocks:        45.225.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864178 (0xd2fb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a
        Validity
            Not Before: Mar 24 14:45:35 2021 GMT
            Not After : Mar 24 14:45:35 2026 GMT
        Subject: CN=6bf630d5dc38289bb6282054e6561d67cf4a9ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:56:ed:f1:7d:47:2e:30:40:5f:f4:15:1d:
                    56:2c:d4:1f:53:4a:12:eb:08:02:10:c5:5b:ff:8c:
                    3a:af:96:bb:3e:99:e2:65:22:61:60:74:96:82:73:
                    ed:01:0a:a3:fa:e8:5b:f8:97:ca:28:92:35:6a:b9:
                    30:60:aa:4e:6a:15:ce:e7:5d:38:a6:9b:5f:85:ec:
                    09:53:7a:60:61:dc:06:8e:bc:6b:ce:16:63:b7:eb:
                    e7:90:52:75:4a:e7:bc:7f:50:10:66:c3:94:bd:b5:
                    83:df:99:77:52:c8:2c:50:88:53:35:f0:bf:3a:cf:
                    e4:5f:18:e2:0b:7f:35:eb:27:7d:2b:34:c0:39:87:
                    64:35:c6:91:f8:7e:26:00:9d:9e:40:70:09:4b:b7:
                    f7:86:8b:c9:c6:ef:a5:8c:32:f0:1b:86:42:df:8c:
                    dd:45:62:81:96:69:ea:1c:0c:74:9d:e7:a8:ef:9b:
                    ec:78:37:66:ef:35:76:e8:79:83:0e:fc:19:2e:dd:
                    8a:73:2c:ca:ba:3f:1e:e2:21:06:b1:96:22:b3:3c:
                    79:24:17:77:ab:e3:b5:3f:96:d3:44:51:7f:79:dc:
                    0b:08:dc:64:2b:f6:7e:f5:3e:27:32:b9:32:5b:d7:
                    47:6a:47:72:76:c3:54:96:9c:90:11:55:d0:d6:8f:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:8A:C1:13:98:D7:30:C9:B2:1C:15:CE:C1:2B:8E:B8:C1:BF:95
            X509v3 Authority Key Identifier:
                keyid:A9:7B:E6:50:E4:7A:DF:0A:24:B5:9F:E6:39:B3:43:11:A1:86:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/6bf630d5dc38289bb6282054e6561d67cf4a9ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76e8e26d-d7c4-4f72-ba78-799eec606302/dfa1646cb8dc23ec4f0721ac2fd7323a7b79a09a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:2d:40:7c:7d:0d:de:cc:55:91:eb:5f:5b:ca:d1:ae:28:
         9e:b6:94:0c:74:e3:d5:b4:e9:66:eb:30:c7:b1:7c:f9:b3:9a:
         dd:2c:5e:b5:bf:80:a8:d5:a5:2c:db:fa:45:00:eb:90:2e:c5:
         d7:62:3d:1b:76:da:a4:93:a7:50:07:68:37:ce:d4:c1:3f:29:
         63:be:54:69:73:19:db:34:db:5c:2d:82:e5:b4:ac:51:f9:ac:
         e8:ac:d3:a4:f6:05:44:04:53:24:a1:74:52:4a:24:17:16:e5:
         e0:38:10:57:f8:95:8f:fc:9d:b0:f2:d7:62:96:55:08:7d:b4:
         e7:f2:98:8b:88:b2:90:64:6a:c6:b1:f1:16:7d:33:37:b7:a2:
         a3:cc:c4:c1:9c:ca:bc:17:74:f9:23:00:84:2f:a3:fe:54:0b:
         e1:01:a5:84:7f:b2:e1:87:d2:46:12:26:89:6a:a0:fb:a1:4c:
         50:85:29:27:69:89:a8:f7:25:c7:bc:1b:61:5e:26:1e:cf:b2:
         d4:95:d3:e4:2d:78:a6:4a:fe:b2:b9:49:b3:fd:6c:3e:1a:3b:
         94:4d:70:c2:2d:17:e8:39:db:b3:ce:ec:d7:1f:23:b2:80:83:
         6f:3a:1c:6d:e9:9b:fe:24:c8:d8:38:79:9a:7e:ec:71:c0:10:
         33:09:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----