Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/517e2d114da8c869811c167f0ce58d50c3433ec2.roa
File:                     517e2d114da8c869811c167f0ce58d50c3433ec2.roa (raw, json)
Hash identifier:          CcinciAK+W4vQlZT6jnYljJZGKBA+WNFwHJhNb7FTB0=
Subject key identifier:   9F:63:B8:CE:92:E1:EE:52:6B:30:6D:0C:B3:C6:40:2C:16:8F:1B:6D
Certificate issuer:       /CN=d47c38dd10c49ac6f7ceb27120ce4600eec5ece4
Certificate serial:       0EC3B2
Authority key identifier: A9:1B:32:AC:9A:82:C9:5E:9F:55:E0:B1:F9:86:81:A6:1E:D2:68:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/517e2d114da8c869811c167f0ce58d50c3433ec2.roa
Signing time:             Fri 21 May 2021 20:26:07 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266656
IP address blocks:        45.225.156.0/22 maxlen: 24
                          2803:a120::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967602 (0xec3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47c38dd10c49ac6f7ceb27120ce4600eec5ece4
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=517e2d114da8c869811c167f0ce58d50c3433ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:54:5f:7f:0a:51:49:92:97:89:ad:93:2c:
                    02:bc:78:31:f9:b6:fe:e1:25:7b:78:c6:7c:23:9c:
                    8d:cb:05:04:8a:21:63:be:d4:f2:8d:51:55:ce:bd:
                    1f:67:a5:33:46:b2:97:8d:41:60:2e:c9:c1:fd:0b:
                    10:9b:1a:00:d8:8e:f0:2e:c1:81:4e:14:3c:1f:79:
                    1d:1f:5a:3a:64:fb:2b:8e:f2:e9:fd:23:e8:11:48:
                    94:54:82:c0:11:8e:60:71:77:a5:7f:3e:2c:3f:90:
                    53:82:39:9f:63:a9:fc:1c:43:00:da:60:76:e5:7d:
                    14:af:09:95:d6:3c:2b:d1:7d:d4:f9:62:58:9e:f5:
                    11:fe:19:47:ca:3a:40:24:e4:db:d8:1a:67:d6:55:
                    5c:86:a5:fb:52:d1:02:2b:e2:16:d8:ec:48:79:33:
                    4a:3c:74:97:6e:7a:5b:de:e9:d0:ca:98:f2:3d:51:
                    33:a0:19:57:e5:db:9c:e7:01:e7:1c:96:03:23:85:
                    fc:9c:ea:3a:28:ac:dd:5a:9f:a4:81:a4:62:28:1e:
                    76:6b:45:ef:32:95:94:5f:5b:7e:89:55:f2:26:75:
                    76:f5:10:e2:ab:f5:bc:68:9f:13:f2:dc:e9:b8:b3:
                    ab:8a:f4:a4:f6:bf:38:33:55:09:38:13:19:aa:23:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:B8:CE:92:E1:EE:52:6B:30:6D:0C:B3:C6:40:2C:16:8F:1B:6D
            X509v3 Authority Key Identifier:
                keyid:A9:1B:32:AC:9A:82:C9:5E:9F:55:E0:B1:F9:86:81:A6:1E:D2:68:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/517e2d114da8c869811c167f0ce58d50c3433ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90619da8-82e6-4f0b-b253-c6443a9ecd95/d47c38dd10c49ac6f7ceb27120ce4600eec5ece4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.156.0/22
                IPv6:
                  2803:a120::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:46:02:a0:c2:54:83:a0:bf:03:d4:a6:26:90:d8:e3:22:9d:
         78:5c:41:3f:dc:bd:b8:a0:43:6a:d1:23:de:88:44:77:1b:00:
         db:c1:73:70:d7:e6:9f:e2:68:de:ee:df:a2:c5:cf:46:5c:d5:
         a1:a2:a0:99:f7:2d:21:82:d4:f2:55:5c:b1:4c:94:93:1c:54:
         1b:f6:fc:05:8a:e2:20:78:6f:3c:c1:ff:31:37:58:82:b0:cd:
         db:18:0c:d0:fe:79:77:2b:9f:58:b0:e1:27:fb:5a:c1:0a:bb:
         f7:5e:be:5e:4d:ac:44:e9:0b:ea:57:12:71:30:65:f1:85:e7:
         2d:d1:7b:a9:53:70:89:5f:8f:3f:af:00:d3:74:e5:16:13:28:
         71:a3:67:55:dc:2a:8f:e0:d7:2f:3f:84:0d:e4:94:96:b5:4a:
         98:9f:89:88:be:b8:44:d0:e6:b1:1e:d7:bc:8d:79:5c:17:24:
         b3:5f:cb:cf:09:ff:f1:3a:d4:de:07:f8:17:65:0f:a5:fb:a6:
         43:6e:50:e9:73:25:28:b3:c0:e1:56:85:6b:9e:f6:3c:a2:ca:
         3d:f8:f3:9a:00:e2:0a:52:51:af:a6:d2:7e:55:d0:ec:06:68:
         3a:6c:e2:c4:77:fb:c7:ef:24:9e:0b:13:86:bc:eb:f7:7e:47:
         32:69:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----