Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/e9f4dc9be3f55d521c9bc4a9312dfd78c818bcaa.roa
File:                     e9f4dc9be3f55d521c9bc4a9312dfd78c818bcaa.roa (raw, json)
Hash identifier:          LvMO3hZqWZIucmWW0cevXJnze1l1VMZ84LCugfpFmVU=
Subject key identifier:   7A:C8:BD:CC:06:57:8D:F6:7C:22:9B:39:C7:27:55:C5:E2:5C:73:C0
Certificate issuer:       /CN=b9e848857972dee0d3d38e41a74b15ad61c4be16
Certificate serial:       068F83
Authority key identifier: 37:3B:01:89:9B:C8:95:81:27:E8:32:3C:83:9E:CF:B5:75:EC:ED:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9e848857972dee0d3d38e41a74b15ad61c4be16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/e9f4dc9be3f55d521c9bc4a9312dfd78c818bcaa.roa
Signing time:             Wed 24 Mar 2021 14:34:22 +0000
ROA not before:           Wed 24 Mar 2021 14:34:22 +0000
ROA not after:            Tue 24 Mar 2026 14:34:22 +0000
asID:                     267894
IP address blocks:        45.176.164.0/23 maxlen: 24
                          2803:2660::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429955 (0x68f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e848857972dee0d3d38e41a74b15ad61c4be16
        Validity
            Not Before: Mar 24 14:34:22 2021 GMT
            Not After : Mar 24 14:34:22 2026 GMT
        Subject: CN=e9f4dc9be3f55d521c9bc4a9312dfd78c818bcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:52:4a:2f:ef:82:88:16:b6:b4:eb:3e:4b:
                    a8:71:b6:18:65:24:7d:d6:75:b6:ff:f9:3b:37:a2:
                    22:70:4d:09:b7:a4:ca:01:84:6a:ec:1e:77:a0:13:
                    5d:53:fc:32:ac:f4:50:33:15:10:e7:25:c7:7d:ef:
                    b4:f0:b4:57:0a:36:ad:f8:d9:ab:cf:82:28:a4:8a:
                    c2:72:87:a6:3b:a8:39:0e:3f:53:00:31:7c:50:76:
                    c4:7f:f4:4e:fa:89:de:99:03:7c:37:34:1a:b7:70:
                    dc:64:e7:1e:65:50:71:19:9e:4a:ef:2a:14:7e:14:
                    ab:5d:68:e6:11:bb:1c:d0:85:69:17:71:3e:97:1c:
                    3e:43:48:24:8e:74:b7:e5:60:58:64:63:51:8f:73:
                    70:51:40:04:c6:d6:ac:51:f4:7b:bd:55:33:29:a6:
                    f9:7e:aa:97:89:81:df:7d:20:9d:0c:c8:e2:50:b5:
                    6d:cb:a2:ca:64:b5:ce:e4:71:8a:3d:01:c2:b1:3b:
                    25:bd:a0:e2:59:13:4e:a3:41:cc:9f:8e:3d:a7:24:
                    84:8f:4b:4d:6f:5d:90:db:a3:e4:b4:cc:0c:f7:39:
                    2e:93:11:e7:f9:9e:6d:cb:8f:6a:38:2f:ce:be:c0:
                    53:10:d1:83:51:d6:8e:34:7e:24:76:87:20:dd:20:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:BD:CC:06:57:8D:F6:7C:22:9B:39:C7:27:55:C5:E2:5C:73:C0
            X509v3 Authority Key Identifier:
                keyid:37:3B:01:89:9B:C8:95:81:27:E8:32:3C:83:9E:CF:B5:75:EC:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9e848857972dee0d3d38e41a74b15ad61c4be16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/e9f4dc9be3f55d521c9bc4a9312dfd78c818bcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9550643a-409d-42e6-a10d-0322b142165a/b9e848857972dee0d3d38e41a74b15ad61c4be16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.164.0/23
                IPv6:
                  2803:2660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:09:b2:7d:c1:3e:2f:b1:d6:38:a2:7c:1d:be:48:a1:9a:70:
         9c:60:77:db:1c:87:10:ab:d8:66:01:41:74:4c:24:63:d5:56:
         62:91:0d:76:40:a9:9a:b5:ce:6f:99:d8:9f:e0:31:a2:69:68:
         09:49:29:97:35:45:92:82:bb:51:be:34:cd:b1:ee:95:c8:17:
         74:53:5f:e0:17:3c:41:cd:8c:c4:9b:5e:5b:42:9d:d6:9c:16:
         65:ad:1e:d8:df:3b:5c:5c:1e:e5:16:b6:1b:1e:26:28:58:3f:
         1b:8b:89:1c:fc:bf:0c:f2:d0:5f:e2:0a:32:9a:01:05:45:43:
         76:6c:fe:3a:be:76:12:04:70:d3:27:43:3e:e1:a7:0c:94:35:
         cf:61:7d:5d:6b:61:93:10:75:36:79:8b:aa:e3:f4:12:a4:29:
         95:0a:1b:0e:84:e1:7d:f6:ae:2c:27:bc:ca:5d:81:27:7e:e3:
         b6:ac:31:ff:0a:06:66:df:6d:ac:5b:8f:58:2e:7d:26:80:31:
         3b:dd:4d:1e:e9:ce:a8:49:e7:f6:49:45:ed:bb:b9:b4:1d:2b:
         e4:e1:8d:c7:4c:f5:81:27:fd:04:bc:48:4e:ea:5f:2c:89:1f:
         b4:61:55:f0:6b:f3:9d:9e:3b:51:ec:d6:c5:e5:20:d7:c1:3d:
         7f:79:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----