Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa
File:                     ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa (raw, json)
Hash identifier:          0CZmK7St2oiOFS+QTzY8gSzLCdnuzg7D0CJuymCnBNM=
Subject key identifier:   FA:A0:2B:B1:6E:E1:C0:83:98:40:84:BE:66:C9:B5:C7:14:AF:02:F8
Certificate issuer:       /CN=7220a4031b7bb84d489fc674e48acd93362e2d78
Certificate serial:       03A718
Authority key identifier: 5E:70:E4:C4:39:BB:F1:5B:79:35:A8:85:FA:8B:8E:8A:64:D0:15:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7220a4031b7bb84d489fc674e48acd93362e2d78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa
Signing time:             Wed 24 Mar 2021 14:29:49 +0000
ROA not before:           Wed 24 Mar 2021 14:29:49 +0000
ROA not after:            Tue 24 Mar 2026 14:29:49 +0000
asID:                     269915
IP address blocks:        45.187.89.0/24 maxlen: 24
                          45.189.232.0/23 maxlen: 23
                          2803:3ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239384 (0x3a718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7220a4031b7bb84d489fc674e48acd93362e2d78
        Validity
            Not Before: Mar 24 14:29:49 2021 GMT
            Not After : Mar 24 14:29:49 2026 GMT
        Subject: CN=ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:57:c8:6c:49:f9:18:c0:2d:dd:5e:c4:9e:
                    4c:01:ee:5b:1a:04:0c:43:20:c3:69:60:75:f9:3c:
                    1a:37:b4:1e:e4:05:ed:e1:53:a6:bb:b4:ce:90:07:
                    3e:5c:84:0a:24:3a:fb:83:92:c2:e9:1a:00:71:69:
                    45:51:99:7d:25:70:7b:20:fc:23:65:cd:7d:16:dc:
                    1c:49:22:03:84:61:57:b7:30:35:04:0c:be:cb:21:
                    85:e3:76:2f:23:49:17:26:eb:eb:a4:50:69:5b:ce:
                    6f:c7:c8:38:94:46:f1:32:07:a2:ba:11:03:73:3f:
                    4e:bb:3a:35:6a:da:cf:29:05:c8:56:a0:eb:cd:4c:
                    25:5b:a2:a9:74:08:72:8f:49:9b:04:b0:a3:e7:1d:
                    3d:39:cd:ac:f7:e6:50:5a:ee:99:76:3f:9b:3b:42:
                    2a:32:49:f9:0f:7f:0b:81:8d:ea:7a:c0:24:a8:32:
                    64:f7:99:95:17:b6:15:ef:3d:35:6c:a4:f9:ef:33:
                    6d:85:bf:1c:d3:de:95:c9:cb:9f:d2:36:da:2d:c2:
                    03:d4:a9:25:28:07:c8:f1:59:db:87:fa:bd:27:f9:
                    c1:04:ba:44:e7:ca:99:50:2d:45:bd:c2:f2:77:f3:
                    f4:bb:93:ff:7d:e5:46:e7:c0:37:a5:43:88:e6:40:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:2B:B1:6E:E1:C0:83:98:40:84:BE:66:C9:B5:C7:14:AF:02:F8
            X509v3 Authority Key Identifier:
                keyid:5E:70:E4:C4:39:BB:F1:5B:79:35:A8:85:FA:8B:8E:8A:64:D0:15:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7220a4031b7bb84d489fc674e48acd93362e2d78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/7220a4031b7bb84d489fc674e48acd93362e2d78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.89.0/24
                  45.189.232.0/23
                IPv6:
                  2803:3ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:31:ad:1e:ae:3b:a8:ff:9e:88:95:96:53:fe:32:f8:0c:77:
         5b:2f:59:df:53:fc:1b:67:83:0f:e7:9f:26:1e:74:bc:34:ca:
         42:47:22:0a:e3:4e:bd:b2:78:cc:bf:80:af:f3:3a:ac:15:25:
         63:4c:bc:0c:1a:5c:b8:07:c7:f7:86:b7:f2:83:29:23:96:86:
         a4:30:0f:20:24:4c:c0:25:f2:32:1c:96:87:5f:d5:d3:1e:9e:
         53:13:08:d4:7e:ec:f8:62:ea:13:60:d0:f3:f5:52:6d:7d:ca:
         61:a4:e8:29:97:ce:be:75:92:28:99:d5:96:9c:b5:fb:6c:6b:
         af:23:9b:6d:5f:d9:5f:1a:46:7b:e8:c6:34:7b:a8:b5:b4:da:
         0a:63:fd:70:a9:57:bb:70:94:32:07:b0:ff:71:c8:c9:45:26:
         ea:8c:07:b4:ca:3e:9c:2b:15:93:c2:77:4a:cf:f8:b5:f5:39:
         3e:4d:d0:d3:6a:b4:a9:a4:cb:3f:7f:ef:c0:ab:7a:58:9d:9a:
         1e:de:c5:ef:02:25:fe:1d:bc:c2:10:38:54:fa:fa:83:6a:e9:
         27:a3:ad:ee:86:30:94:ae:92:1f:ce:31:02:6e:e9:79:42:29:
         3c:1e:ad:f0:07:49:5d:4f:4c:d9:fc:4e:cb:7a:e7:15:ff:35:
         63:e4:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----