Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/599b411fea05d2235e9460add25b1ac470b275eb.roa
File:                     599b411fea05d2235e9460add25b1ac470b275eb.roa (raw, json)
Hash identifier:          KSPJvWp7l1RDIJihQeeDSebuViuVa8gx7a81lGSwwa0=
Subject key identifier:   D1:B5:D2:F4:4C:65:F3:17:71:7E:EA:6B:D8:65:DE:93:E0:47:4E:A0
Certificate issuer:       /CN=93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f
Certificate serial:       062BB0
Authority key identifier: 25:F0:7C:1B:8B:8D:51:95:36:C4:4C:63:5F:F7:EE:6A:C9:78:BC:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/599b411fea05d2235e9460add25b1ac470b275eb.roa
Signing time:             Wed 24 Mar 2021 14:34:20 +0000
ROA not before:           Wed 24 Mar 2021 14:34:20 +0000
ROA not after:            Tue 24 Mar 2026 14:34:20 +0000
asID:                     61466
IP address blocks:        45.168.68.0/22 maxlen: 24
                          2803:d5a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404400 (0x62bb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f
        Validity
            Not Before: Mar 24 14:34:20 2021 GMT
            Not After : Mar 24 14:34:20 2026 GMT
        Subject: CN=599b411fea05d2235e9460add25b1ac470b275eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:b1:29:eb:e0:ab:a9:8b:a3:e5:65:9f:b8:
                    28:90:2c:e3:da:7a:92:77:1c:42:a0:b2:f4:fb:98:
                    37:29:32:66:b1:0d:e8:07:a4:ce:fa:22:fa:3e:aa:
                    cb:e0:0f:2c:a4:e6:07:93:f8:76:83:6f:5d:6f:d0:
                    94:e3:ad:97:83:89:4b:76:c1:5a:98:4e:f6:3f:b6:
                    be:97:d9:9d:b8:65:95:d7:a8:ff:0b:bf:aa:25:59:
                    5a:1e:e7:7e:96:86:44:ed:d8:ba:93:a6:37:13:03:
                    ed:a0:98:42:8d:2a:63:d1:2f:55:4b:9c:4a:51:96:
                    da:cb:8d:90:12:ce:6a:99:3b:d2:8a:6e:53:37:b2:
                    fa:37:f3:08:0a:ac:dc:e4:9c:1a:20:41:cc:8c:61:
                    b7:40:c9:21:24:c1:66:ef:cc:2c:ce:6c:82:ed:ef:
                    11:6a:01:18:80:46:14:1d:53:0c:ba:0c:a4:7f:cc:
                    60:11:aa:db:89:e4:e7:62:04:1e:87:0c:bd:6d:4a:
                    18:b7:a2:1e:2a:98:9f:51:25:74:d4:20:ca:68:13:
                    17:e7:ec:47:78:ad:3a:9f:31:60:bd:6e:f4:11:18:
                    cd:35:3c:ec:0e:11:93:bd:2d:77:b6:fc:3a:0e:c6:
                    b9:e5:a7:a8:cd:47:e1:80:0d:8e:97:f8:44:9e:29:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:D2:F4:4C:65:F3:17:71:7E:EA:6B:D8:65:DE:93:E0:47:4E:A0
            X509v3 Authority Key Identifier:
                keyid:25:F0:7C:1B:8B:8D:51:95:36:C4:4C:63:5F:F7:EE:6A:C9:78:BC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/599b411fea05d2235e9460add25b1ac470b275eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9406f549-85a8-4d30-ae77-5af975c303ed/93c4f3ab2c35f9f3289deaf0f4dfdf1b1687634f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.68.0/22
                IPv6:
                  2803:d5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:21:30:05:33:47:af:1d:e0:86:95:96:60:b1:fb:23:2d:bd:
         5e:f2:04:39:6f:07:ee:42:52:50:c3:b1:89:2b:8c:73:cf:55:
         4e:8a:a4:36:37:de:19:25:eb:5a:b9:b5:b8:9e:5d:e7:fa:e6:
         2e:8c:9c:19:6a:de:1e:3f:90:dd:17:6f:43:fa:b1:c0:d0:95:
         42:0f:98:8d:b2:c1:b1:50:66:08:a5:f7:31:d9:e7:77:e7:64:
         c5:46:a6:0d:84:ec:90:36:8a:27:c9:24:1a:81:80:f6:d2:be:
         03:da:18:29:bb:f3:29:18:8c:ba:74:c5:a6:73:6c:fb:16:0b:
         44:38:f5:58:19:c9:d6:18:65:d4:20:1b:fd:a5:b4:ce:a2:6d:
         47:01:2d:d1:6b:c3:04:99:19:16:89:61:71:94:f7:f0:f9:6e:
         f6:2c:8a:84:c6:ed:e9:79:fe:16:9b:67:9f:1a:c0:7e:ec:c4:
         66:cd:db:09:3b:67:c0:0a:82:a9:cb:79:56:6f:8b:16:3d:d5:
         53:80:58:7c:af:c2:58:4d:80:c9:7a:da:72:1b:36:e1:ec:af:
         2d:35:c1:e2:5e:98:aa:f4:1a:28:ea:49:9b:6a:34:9b:de:7e:
         fa:cb:de:35:91:f5:f8:fd:6b:d4:97:82:e6:93:87:01:72:15:
         c5:c9:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----