Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/33c3a37b9aab14bc89377a67e9cc8f7850327994.roa
File:                     33c3a37b9aab14bc89377a67e9cc8f7850327994.roa (raw, json)
Hash identifier:          BQxYjRQK8Hh4pjwoc4YjnWSk7MXhIBJNdkR4G80X1s0=
Subject key identifier:   32:C8:DE:04:F9:B1:40:ED:3E:8A:59:7B:71:8A:C4:E5:C9:67:70:9F
Certificate issuer:       /CN=add7eb2eab293b9031f43cb602f0cc404fa774c1
Certificate serial:       0BB388
Authority key identifier: 89:C8:6B:64:D8:66:BC:F1:F0:7C:1C:35:9C:FF:D2:F7:2A:91:B8:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add7eb2eab293b9031f43cb602f0cc404fa774c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/33c3a37b9aab14bc89377a67e9cc8f7850327994.roa
Signing time:             Wed 24 Mar 2021 14:48:02 +0000
ROA not before:           Wed 24 Mar 2021 14:48:01 +0000
ROA not after:            Tue 24 Mar 2026 14:48:01 +0000
asID:                     267892
IP address blocks:        45.175.22.0/24 maxlen: 24
                          2801:18:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766856 (0xbb388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add7eb2eab293b9031f43cb602f0cc404fa774c1
        Validity
            Not Before: Mar 24 14:48:01 2021 GMT
            Not After : Mar 24 14:48:01 2026 GMT
        Subject: CN=33c3a37b9aab14bc89377a67e9cc8f7850327994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:0c:1f:b0:11:f5:12:55:6d:ba:41:5c:39:
                    21:d2:13:60:f7:d5:f8:c5:87:dd:e0:1e:ad:39:a1:
                    e0:32:ce:88:4d:dd:f0:94:e1:b0:69:74:85:ae:ad:
                    2a:de:4f:62:a9:63:da:2f:0e:3b:24:d2:3c:cf:b2:
                    17:a4:0d:54:d0:8d:3a:93:9d:a2:6c:c1:35:9d:5c:
                    09:ba:f9:c2:aa:3b:34:f5:54:e1:79:08:c6:f4:60:
                    92:a3:64:3e:35:3e:17:2c:92:05:8d:0c:1d:c2:da:
                    37:c5:a5:a9:4d:68:b7:46:6e:d7:6d:ca:2c:ec:71:
                    46:27:c1:fc:f7:c1:20:5e:0f:fb:71:9f:8d:6c:41:
                    8a:30:ed:72:a2:82:a3:06:7a:cf:77:d2:c6:ac:38:
                    4b:fb:de:9e:64:fd:bb:60:90:af:c1:18:8d:7f:da:
                    b2:29:32:bf:b3:87:a4:1a:0d:9d:57:17:91:7c:f4:
                    80:09:68:63:47:d2:e6:65:3d:07:d5:2f:2c:14:d8:
                    65:c5:cb:14:4d:5e:1e:33:56:88:ec:19:ad:a2:ea:
                    9a:22:93:a2:ab:8d:09:e3:d4:9a:7e:04:dc:9d:b4:
                    22:a8:6f:67:0e:22:ee:11:d0:95:b2:13:de:46:b8:
                    76:80:91:87:88:f9:a0:86:5b:c5:57:87:a6:e4:27:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C8:DE:04:F9:B1:40:ED:3E:8A:59:7B:71:8A:C4:E5:C9:67:70:9F
            X509v3 Authority Key Identifier:
                keyid:89:C8:6B:64:D8:66:BC:F1:F0:7C:1C:35:9C:FF:D2:F7:2A:91:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add7eb2eab293b9031f43cb602f0cc404fa774c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/33c3a37b9aab14bc89377a67e9cc8f7850327994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e73dfa2-0480-4d53-a6ee-90bb36ad7740/add7eb2eab293b9031f43cb602f0cc404fa774c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.22.0/24
                IPv6:
                  2801:18:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:b6:75:b5:3e:89:fc:d0:e6:d8:9f:5c:7b:a2:fb:66:ff:
         7b:98:4c:48:77:82:de:a1:f7:8b:7a:77:26:4d:ab:2e:a9:01:
         d9:d2:34:fe:98:a1:06:20:8b:9b:72:2c:f7:49:38:0a:25:91:
         0f:c2:aa:f7:a1:16:65:e6:c4:40:78:33:df:64:35:4e:a3:f3:
         b6:46:02:76:98:33:a4:8a:8a:da:17:5c:08:28:9e:ab:17:5e:
         8a:be:fd:ed:fc:5d:80:e0:1c:9b:d8:3f:d1:76:e8:1e:0d:78:
         34:36:20:28:e0:99:27:86:1b:95:6f:ed:1d:a4:6b:47:13:a4:
         4b:c9:67:38:20:f6:90:5d:5d:30:55:79:83:ef:6e:f6:fc:e8:
         45:f6:89:b9:34:83:1b:1c:22:ad:8c:f2:1e:3a:7e:93:3a:17:
         fd:9f:59:aa:1a:a1:1b:b2:3a:22:00:c5:e2:83:c8:54:d9:f8:
         d1:59:61:fd:42:45:b9:25:d8:6b:68:0f:c3:47:27:82:fb:28:
         69:92:e2:54:d7:dd:b4:50:e8:ef:ba:14:c0:77:c7:d4:e8:fb:
         1f:d0:4b:e3:ad:01:ba:3c:f3:65:02:5f:9d:a1:20:99:34:f7:
         21:5d:70:1c:ec:1a:e1:44:17:19:f0:8b:f1:24:53:51:a1:0c:
         a9:98:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----