Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/472fff4447dd7e92808be756b3fddb5bfbf687d6.roa
File:                     472fff4447dd7e92808be756b3fddb5bfbf687d6.roa (raw, json)
Hash identifier:          oKwWptK5vf4+ZtCZQdk3dgT0HVaGOvlrD001vCEySn8=
Subject key identifier:   4C:BF:96:01:D3:1E:24:18:8F:34:B0:2A:F3:54:0B:26:13:36:19:20
Certificate issuer:       /CN=6c4e32566e6591859de2af682b800bad4f8ce7ad
Certificate serial:       0BB7D0
Authority key identifier: 07:A5:DA:6D:EB:59:9C:9D:91:80:25:2E:FF:3B:72:4A:27:91:D2:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c4e32566e6591859de2af682b800bad4f8ce7ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/472fff4447dd7e92808be756b3fddb5bfbf687d6.roa
Signing time:             Wed 24 Mar 2021 14:43:24 +0000
ROA not before:           Wed 24 Mar 2021 14:43:24 +0000
ROA not after:            Tue 24 Mar 2026 14:43:24 +0000
asID:                     265565
IP address blocks:        45.167.252.0/22 maxlen: 22
                          2806:315::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767952 (0xbb7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4e32566e6591859de2af682b800bad4f8ce7ad
        Validity
            Not Before: Mar 24 14:43:24 2021 GMT
            Not After : Mar 24 14:43:24 2026 GMT
        Subject: CN=472fff4447dd7e92808be756b3fddb5bfbf687d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:50:e2:78:6c:55:89:07:87:81:7c:a5:28:
                    c4:b6:f8:98:6c:71:37:ff:6a:7a:cd:8b:ae:28:20:
                    54:48:e3:a4:bd:59:77:38:66:4c:a6:d3:60:f3:eb:
                    35:78:c8:75:e5:47:b7:8b:39:a5:bc:15:78:8f:8c:
                    cb:31:9e:b0:0b:7d:17:7b:a3:d3:a8:80:14:92:8c:
                    ce:a3:cc:ef:72:f2:b2:72:6e:84:12:91:92:8f:0e:
                    df:91:24:6b:79:99:a3:6b:00:42:2f:dc:a0:0f:a5:
                    12:fd:1e:56:fa:46:f6:81:13:f6:db:03:c2:fa:6b:
                    9e:3c:d1:e8:d6:92:08:2a:70:4e:cd:81:58:ed:22:
                    f6:b8:d2:70:96:7b:9c:ec:9a:bd:04:08:c8:5e:c3:
                    55:59:ba:cf:68:fc:e2:6b:f7:bf:1a:cd:76:c7:d6:
                    66:42:a4:97:d4:f5:b2:42:06:11:02:ea:2d:13:e3:
                    c4:cf:ea:37:fb:cb:a5:7a:c4:b7:0d:d3:f4:e4:a0:
                    77:34:e0:df:af:12:1a:f4:05:11:a7:90:da:29:4a:
                    e5:73:6c:45:ae:12:ce:df:f2:0b:19:4e:0f:9f:d6:
                    21:55:91:4e:5d:96:c5:97:96:4a:7d:b9:37:2b:2f:
                    69:d8:2b:5b:ba:88:23:17:e2:a3:bd:0f:e3:ee:4f:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BF:96:01:D3:1E:24:18:8F:34:B0:2A:F3:54:0B:26:13:36:19:20
            X509v3 Authority Key Identifier:
                keyid:07:A5:DA:6D:EB:59:9C:9D:91:80:25:2E:FF:3B:72:4A:27:91:D2:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c4e32566e6591859de2af682b800bad4f8ce7ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/472fff4447dd7e92808be756b3fddb5bfbf687d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b414a22-e901-4a7f-9364-7ea88fb71e5a/6c4e32566e6591859de2af682b800bad4f8ce7ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.252.0/22
                IPv6:
                  2806:315::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:7d:40:6d:7f:e6:78:a8:fd:6b:72:7f:3c:a3:3c:e5:63:86:
         ba:48:73:92:7c:e4:8b:36:90:99:d9:5a:f2:21:9d:1e:83:61:
         6c:ee:77:a6:32:a1:b1:73:fa:42:2c:0b:44:16:ee:34:0a:5a:
         14:33:d9:4c:03:a2:de:df:28:50:ca:b1:67:7e:38:53:32:73:
         07:73:50:94:db:ec:48:a9:4a:8b:a7:ce:a6:fb:cb:cf:1f:b1:
         25:ec:d6:a4:41:b8:da:50:62:07:8f:7e:95:9a:3b:20:c7:6d:
         a6:ff:fe:bb:4f:55:bc:ab:0d:63:3b:71:af:0d:10:0a:0d:9f:
         a2:1e:34:d6:0f:66:d7:c0:92:d7:a7:6e:df:5e:b4:b4:3f:89:
         46:9a:a2:12:4e:b2:0c:54:27:95:71:60:d7:a8:7e:e6:11:da:
         b4:e9:37:3a:b2:11:48:5d:03:ac:4b:09:65:8d:0f:1c:30:dc:
         4b:8e:ce:5a:85:fb:b4:ef:0b:f4:bb:19:e4:83:38:fb:bc:86:
         25:df:9c:08:73:90:6c:a1:a8:58:e6:46:99:ee:e5:60:98:61:
         35:17:30:56:a1:aa:1a:56:c9:d2:0f:60:33:3f:a0:3e:58:82:
         fe:6f:75:e5:56:58:c6:f0:e0:9d:1a:96:ce:33:da:f1:b2:e4:
         29:e6:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----