Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/97e3b017ee20e71f422c96fc500bd3994120007f.roa
File:                     97e3b017ee20e71f422c96fc500bd3994120007f.roa (raw, json)
Hash identifier:          vneNoS9o1MNzriDJe5oDo9O9BnMsyScIJ25nczKfJGk=
Subject key identifier:   63:21:B9:95:D6:05:D2:C1:1F:D5:CF:B4:C3:4F:57:05:94:8A:B0:7A
Certificate issuer:       /CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
Certificate serial:       26EF
Authority key identifier: B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/97e3b017ee20e71f422c96fc500bd3994120007f.roa
Signing time:             Thu 11 Nov 2021 22:47:36 +0000
ROA not before:           Thu 11 Nov 2021 02:00:00 +0000
ROA not after:            Wed 11 Nov 2026 02:00:00 +0000
asID:                     265534
IP address blocks:        45.167.12.0/22 maxlen: 24
                          2806:311::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9967 (0x26ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
        Validity
            Not Before: Nov 11 02:00:00 2021 GMT
            Not After : Nov 11 02:00:00 2026 GMT
        Subject: CN=97e3b017ee20e71f422c96fc500bd3994120007f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:46:48:d1:63:43:a3:b1:61:3b:36:77:2c:
                    26:76:cb:b7:98:52:fc:b4:2a:df:4f:b5:26:86:3f:
                    7e:12:76:ec:c5:13:44:a9:4e:ce:7a:a0:8b:8f:89:
                    6e:4a:cd:53:ca:49:9c:4c:ee:15:21:a3:6d:33:34:
                    26:06:46:56:38:18:44:41:02:68:75:97:7e:b3:91:
                    03:d5:26:8c:b8:f6:5c:69:98:17:41:a7:e4:44:55:
                    28:10:44:85:58:2c:5e:9b:7e:ae:72:96:66:a2:9f:
                    20:2d:c0:12:30:29:94:01:0d:10:fa:fb:24:3c:60:
                    77:9f:23:6b:ee:cd:b0:26:67:02:de:b2:b1:83:a9:
                    b1:6c:77:8b:d3:9d:55:c9:73:33:37:83:14:d2:9c:
                    51:15:5c:e2:a3:92:a6:d8:64:0f:88:b5:e1:a7:69:
                    6d:67:63:a7:39:fd:61:0b:e6:04:ee:0c:18:99:41:
                    12:e5:14:7b:9a:64:b2:70:01:2e:3b:33:fe:ef:43:
                    b7:70:80:0c:7b:4b:f3:02:40:45:7d:d5:c4:b6:b4:
                    46:d0:eb:6b:b9:cf:9b:04:d2:b8:5d:93:2d:9f:b3:
                    2a:bd:b9:26:ca:42:ef:c9:26:f0:27:a8:5b:6c:17:
                    f6:1d:69:b4:d7:40:3b:aa:41:60:c7:e0:c2:40:34:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:21:B9:95:D6:05:D2:C1:1F:D5:CF:B4:C3:4F:57:05:94:8A:B0:7A
            X509v3 Authority Key Identifier:
                keyid:B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/97e3b017ee20e71f422c96fc500bd3994120007f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22
                IPv6:
                  2806:311::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:7c:aa:72:cd:15:35:d0:dc:2a:ba:ae:0c:ed:48:bd:23:e7:
         77:31:d9:71:51:2d:71:2f:b1:c3:78:c9:14:09:77:60:cc:f7:
         27:9f:57:8a:ef:0a:58:ea:da:12:18:e0:32:d2:de:86:95:bc:
         46:6e:2d:f0:20:b6:95:67:aa:cb:8a:7d:d5:0e:ef:7f:aa:fc:
         ed:89:aa:bb:c6:d4:9b:01:2a:e6:2a:fa:76:04:49:fd:fd:6b:
         7c:58:cd:ae:25:6e:41:83:de:ea:56:84:c8:b4:5f:21:1c:51:
         a4:05:0b:27:f5:37:c7:3c:9b:e2:0c:c4:a0:8e:2f:75:26:98:
         e3:16:f9:a4:03:ff:7b:82:33:36:fd:b0:5b:fd:ee:47:ef:86:
         47:08:0f:a4:45:7e:c7:81:52:91:16:8d:1e:92:94:73:c4:d3:
         a2:83:8f:1f:d9:98:98:6f:0c:75:36:d7:2d:c5:a4:4e:62:d5:
         53:d4:03:60:61:46:f2:66:91:22:ce:d6:37:cd:54:7a:04:b4:
         48:53:95:e9:35:81:b8:af:d3:00:e5:b0:ab:67:e8:a8:fc:b5:
         1c:87:13:c2:35:2d:6e:c2:1a:70:b3:41:5b:59:f6:ac:4c:08:
         6b:5b:4b:d6:5b:ea:78:e1:27:24:34:82:65:22:35:28:bd:81:
         21:e9:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----