Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/9acadb575873f1b9f3ab537ab71708c7d85aa1ae.roa
File:                     9acadb575873f1b9f3ab537ab71708c7d85aa1ae.roa (raw, json)
Hash identifier:          MIdU23ILShIvcuGCdQz+0uOlbphJ9u48Maf/CtXodxI=
Subject key identifier:   70:8F:B2:E7:D7:41:CD:88:DE:5D:FB:E4:4B:5A:32:05:24:72:6E:4A
Certificate issuer:       /CN=bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc
Certificate serial:       0D0705
Authority key identifier: 57:9C:B3:8C:3C:06:8D:31:D8:BF:AE:46:4B:30:91:68:A3:48:08:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/9acadb575873f1b9f3ab537ab71708c7d85aa1ae.roa
Signing time:             Wed 24 Mar 2021 14:33:22 +0000
ROA not before:           Wed 24 Mar 2021 14:33:22 +0000
ROA not after:            Tue 24 Mar 2026 14:33:22 +0000
asID:                     266711
IP address blocks:        45.229.247.0/24 maxlen: 24
                          2801:1b:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853765 (0xd0705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc
        Validity
            Not Before: Mar 24 14:33:22 2021 GMT
            Not After : Mar 24 14:33:22 2026 GMT
        Subject: CN=9acadb575873f1b9f3ab537ab71708c7d85aa1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:4c:36:98:f7:44:89:57:48:d7:6f:bf:18:
                    6e:a1:39:1c:a7:f7:1c:d2:8e:59:87:0b:92:e6:5b:
                    23:69:bd:6f:50:a9:ae:d8:99:9b:0d:b5:8b:2b:81:
                    91:f1:e9:24:e0:56:0b:70:32:63:2f:8c:eb:1d:ce:
                    59:83:38:60:cd:c2:69:da:ef:a4:6e:10:41:27:cf:
                    c0:f4:85:bc:a7:e5:b8:76:88:78:60:f1:ae:f7:45:
                    d7:80:6a:8f:b1:ec:ac:1d:15:82:ff:fc:c2:b2:c6:
                    5c:eb:68:48:29:a3:df:64:3d:c4:de:13:30:97:e7:
                    5e:6c:10:1a:2a:a3:f7:64:4a:a1:a6:8f:24:94:2d:
                    66:f0:73:a5:7a:76:35:e5:c9:59:b6:98:4b:dd:0c:
                    ba:cf:05:7d:4d:20:07:5f:de:b4:24:24:e0:a6:b0:
                    0f:15:b0:5f:58:5b:b3:09:7e:69:09:7e:bd:0e:e4:
                    bc:a0:ba:7e:f6:17:cd:77:03:83:c8:b2:56:ae:87:
                    f5:f9:85:8b:38:1d:dc:00:11:e3:7e:6c:c0:48:c6:
                    8c:34:f6:22:1b:84:19:19:1c:2c:5d:f6:d2:a2:db:
                    08:50:57:ce:66:e9:66:01:35:d2:71:c3:a4:d3:13:
                    da:75:96:c4:c0:77:7b:e8:97:8c:5d:f4:78:53:f5:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:B2:E7:D7:41:CD:88:DE:5D:FB:E4:4B:5A:32:05:24:72:6E:4A
            X509v3 Authority Key Identifier:
                keyid:57:9C:B3:8C:3C:06:8D:31:D8:BF:AE:46:4B:30:91:68:A3:48:08:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/9acadb575873f1b9f3ab537ab71708c7d85aa1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81dbf8d5-c76d-45e5-97b8-38237309a400/bcfcd74b779112e00db3e5aaa9203ce8ab40ccbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24
                IPv6:
                  2801:1b:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:cd:3c:ec:7d:0d:65:9c:da:83:fd:25:d9:fa:9a:b9:4e:
         48:a0:de:91:f6:53:d0:29:72:9b:50:e9:d6:ba:b2:22:7d:af:
         02:87:42:c6:78:17:7e:7e:31:19:73:77:a7:c7:c7:47:f8:23:
         0f:8a:f7:8f:a6:dd:dd:1a:46:83:dd:13:6f:d4:a2:3e:c5:88:
         45:30:ca:58:b0:75:85:25:dd:57:0a:7f:7f:93:03:4e:a3:b3:
         8c:68:cf:fb:fc:b2:bf:80:1c:dd:af:42:d3:b9:5b:d4:c3:5f:
         cc:ea:95:88:7a:47:df:ec:7a:ab:d9:8f:82:79:46:18:12:5a:
         98:9f:9f:78:bb:57:c4:4f:8d:c4:65:95:90:93:69:bf:69:14:
         12:a5:1e:28:98:7e:c6:ba:2f:79:24:59:1f:e9:7c:e2:5c:3c:
         5a:a4:d9:de:f2:43:a8:8a:ad:9b:8e:9e:93:d7:5e:85:86:79:
         ac:c4:38:df:9f:ed:7e:2b:dd:9e:f8:84:72:24:0d:c8:76:b9:
         e9:0e:97:8e:bb:50:cc:53:4f:9d:97:0f:26:3f:ea:99:b6:2f:
         67:36:e4:bd:1c:0f:11:5e:d4:95:21:52:01:71:9a:25:ae:d3:
         c9:06:bc:f3:50:99:42:ad:03:16:64:13:38:60:5d:31:42:51:
         c9:c3:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----