Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/dfc841d340c6b9d40bd53aad9b0404d8f0f8d122.roa
File:                     dfc841d340c6b9d40bd53aad9b0404d8f0f8d122.roa (raw, json)
Hash identifier:          gZIiciL7Vk0mumoBQSO3sxEYW0fJScjtraV4ZCjYLTg=
Subject key identifier:   41:FD:41:48:EE:2F:A8:19:22:8B:36:E6:A4:BC:15:60:A6:E5:A7:4F
Certificate issuer:       /CN=3f96f12eb7e64f4a5d987b62fdb1944445102da7
Certificate serial:       0B692A
Authority key identifier: 02:46:34:DB:E3:FD:6B:E0:43:19:DE:78:3D:38:69:E7:43:AA:7D:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f96f12eb7e64f4a5d987b62fdb1944445102da7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/dfc841d340c6b9d40bd53aad9b0404d8f0f8d122.roa
Signing time:             Wed 24 Mar 2021 14:30:01 +0000
ROA not before:           Wed 24 Mar 2021 14:30:01 +0000
ROA not after:            Tue 24 Mar 2026 14:30:01 +0000
asID:                     52496
IP address blocks:        45.188.136.0/22 maxlen: 24
                          2803:8f60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747818 (0xb692a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96f12eb7e64f4a5d987b62fdb1944445102da7
        Validity
            Not Before: Mar 24 14:30:01 2021 GMT
            Not After : Mar 24 14:30:01 2026 GMT
        Subject: CN=dfc841d340c6b9d40bd53aad9b0404d8f0f8d122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:74:01:40:7d:f0:84:e6:75:a4:52:f0:be:
                    c2:33:5c:75:39:72:1f:8a:1c:31:2b:88:ad:95:db:
                    d5:f4:73:35:c2:2c:3a:3e:c9:fb:b7:5f:fb:9a:4a:
                    e9:64:37:07:dc:50:cb:9e:6c:f0:83:f8:9a:ce:f7:
                    dc:25:de:d0:22:6f:ff:75:18:21:2a:6d:86:e2:96:
                    31:b0:e6:90:cf:d5:13:71:fa:c1:ea:2c:bc:bb:40:
                    e8:49:9c:0f:8c:fb:5a:2e:4e:18:c3:55:de:fd:ee:
                    30:31:b4:38:46:bd:16:c2:cc:ad:dc:1b:5e:a8:ff:
                    83:3f:d5:64:a0:89:d3:49:61:d8:0e:b9:13:5c:09:
                    b9:1f:8f:0b:96:9f:de:76:02:2d:81:ce:89:7c:56:
                    b1:2a:1d:ab:3a:16:2f:23:ea:be:09:43:d9:34:b5:
                    65:91:18:f5:86:16:e1:7b:ed:c3:6f:c7:2f:a5:b2:
                    d9:3f:b0:6c:68:17:1d:d4:bd:c9:c4:fe:b2:e7:9f:
                    48:b4:ab:6a:81:01:1f:30:1d:7d:06:cb:b9:be:4d:
                    f2:19:51:3b:56:23:5f:3f:68:ab:de:21:22:ad:51:
                    33:9c:6d:fa:5b:99:7b:c8:1f:8c:5c:08:05:f7:f2:
                    25:cd:38:ea:61:f9:d6:ef:59:61:9b:1a:b6:21:b1:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FD:41:48:EE:2F:A8:19:22:8B:36:E6:A4:BC:15:60:A6:E5:A7:4F
            X509v3 Authority Key Identifier:
                keyid:02:46:34:DB:E3:FD:6B:E0:43:19:DE:78:3D:38:69:E7:43:AA:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f96f12eb7e64f4a5d987b62fdb1944445102da7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/dfc841d340c6b9d40bd53aad9b0404d8f0f8d122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ba23fa-ec9e-4900-ba90-1f54611ccc2e/3f96f12eb7e64f4a5d987b62fdb1944445102da7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.136.0/22
                IPv6:
                  2803:8f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:3b:fc:15:14:dc:8f:82:23:33:72:7c:16:23:e5:76:13:
         51:17:bb:8e:3e:c2:57:90:52:62:95:ed:a9:51:4b:f5:77:b2:
         c0:79:fe:b9:29:b5:1f:46:10:a3:80:f4:2e:72:67:40:b3:af:
         f7:06:b7:fa:7e:16:8b:1d:2a:ac:80:70:a2:da:66:12:a0:93:
         92:a3:d0:11:cf:19:9a:56:b4:5d:ef:6b:c7:4c:02:f5:78:36:
         fc:77:84:e8:8c:aa:b9:64:e3:a4:5f:aa:8b:63:6b:e6:2f:65:
         c8:05:44:d7:98:e7:36:4a:8c:51:f9:63:c1:00:23:77:a0:2d:
         7e:39:41:d3:79:b0:98:43:64:a1:4f:9c:09:a7:44:31:d2:ee:
         9a:46:c9:8b:27:cf:a4:9b:95:56:2b:cd:02:52:07:b6:b9:16:
         4a:6c:d6:67:ee:bf:8d:4e:94:3f:05:92:0f:ac:db:c8:3d:99:
         ce:3e:1f:d2:b5:47:07:29:5e:5b:7b:84:d3:7f:69:66:f4:f7:
         04:c5:4b:c5:03:02:87:fb:b9:35:66:da:44:e5:a9:85:64:3a:
         8f:41:ad:54:37:53:1e:84:3e:0e:0f:fb:b7:a5:ef:04:3d:d0:
         47:98:13:bd:03:32:c0:81:5b:03:80:a1:92:a2:a3:95:37:01:
         02:f8:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----