Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/b719afd64fd80372e5b7d86b89ea062970bb19a9.roa
File:                     b719afd64fd80372e5b7d86b89ea062970bb19a9.roa (raw, json)
Hash identifier:          XVc+6FExBYRTgymho4f+XmKDa61BKbaxBJtfqKCrS8c=
Subject key identifier:   45:08:82:EB:3A:CE:FF:38:8B:C4:1C:43:2B:2F:06:C6:4D:6A:80:86
Certificate issuer:       /CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
Certificate serial:       0C4628
Authority key identifier: 4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/b719afd64fd80372e5b7d86b89ea062970bb19a9.roa
Signing time:             Wed 24 Mar 2021 14:40:02 +0000
ROA not before:           Wed 24 Mar 2021 14:40:02 +0000
ROA not after:            Tue 24 Mar 2026 14:40:02 +0000
asID:                     266834
IP address blocks:        45.238.56.0/22 maxlen: 24
                          2803:4ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804392 (0xc4628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7ccceacdc123bdc2570502f568e65109ac06d3
        Validity
            Not Before: Mar 24 14:40:02 2021 GMT
            Not After : Mar 24 14:40:02 2026 GMT
        Subject: CN=b719afd64fd80372e5b7d86b89ea062970bb19a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:09:e7:70:b2:2c:7b:4b:a3:e5:8b:e3:a3:9b:
                    71:55:06:04:e5:04:cf:4d:d6:1f:ab:e5:06:7e:3c:
                    c1:03:82:f3:0c:14:e5:75:97:17:20:2b:a3:bf:ba:
                    f8:fc:d5:d9:29:89:e9:82:8f:c6:0b:02:b0:86:c8:
                    04:23:09:3d:e5:e4:f1:9e:0c:e2:ee:65:af:7c:8d:
                    e9:06:18:1a:1e:85:5b:db:27:2e:3d:23:ad:66:e8:
                    23:16:16:cf:49:ee:78:a6:41:70:00:d0:e3:7b:73:
                    5e:f0:87:f3:92:54:b7:8c:2f:2b:31:c4:94:24:6a:
                    db:8c:a6:6d:0e:0d:86:11:96:44:d1:dd:49:7b:26:
                    c1:6b:dc:65:ac:59:9d:65:8f:f4:30:77:b3:83:cf:
                    ab:18:db:51:6c:b5:dd:86:99:d6:6a:8b:e1:d0:32:
                    20:78:ce:f4:4c:0b:07:02:e8:90:bf:25:da:d6:96:
                    09:9b:8c:43:35:3a:32:3a:e6:5f:95:51:9a:90:20:
                    60:50:19:0f:e6:e4:98:00:10:66:9b:1c:90:5f:8a:
                    74:2e:06:ce:2c:35:c5:ec:1c:f4:ef:04:e5:03:67:
                    46:4a:34:bc:79:a2:83:e0:27:2c:84:a6:30:31:bd:
                    f9:67:6c:24:dc:04:18:9f:7e:85:d2:63:01:eb:5c:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:82:EB:3A:CE:FF:38:8B:C4:1C:43:2B:2F:06:C6:4D:6A:80:86
            X509v3 Authority Key Identifier:
                keyid:4E:34:EE:2E:93:90:D7:4A:7F:44:C4:02:BA:E9:6E:AC:7B:67:50:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7ccceacdc123bdc2570502f568e65109ac06d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/b719afd64fd80372e5b7d86b89ea062970bb19a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/960164cb-eb5f-4722-a8d2-93173b785d24/4d7ccceacdc123bdc2570502f568e65109ac06d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:03:e9:09:35:df:98:07:b7:55:44:cb:49:b4:48:bc:4f:
         f9:52:88:84:3c:ab:46:5c:4d:1f:b8:e4:69:37:dd:2c:23:bb:
         62:99:95:8e:66:a4:48:c5:5c:e0:80:eb:78:47:b4:af:50:59:
         8f:5d:d1:1f:49:75:c7:4c:eb:ed:c7:ac:8f:cd:8d:a3:f4:82:
         3f:b1:b3:52:36:c3:25:d5:62:fa:0d:54:7f:c0:ff:6d:fe:b6:
         12:b0:5d:e2:ab:b6:ac:af:59:8e:4e:41:74:13:f5:1b:ff:2b:
         c2:ca:cb:a4:9e:db:4c:4f:1b:93:57:c9:35:1d:ca:84:01:55:
         0a:7a:61:4c:5e:4d:11:3c:72:fb:4c:58:cb:2b:a8:61:99:c7:
         be:af:f5:8e:17:60:53:22:bf:99:a7:6d:fc:ae:11:f3:14:70:
         39:f1:90:35:3e:a5:14:8e:0f:4d:a6:da:46:8d:69:f0:05:df:
         2c:7e:57:95:a7:c3:92:07:79:1e:7a:93:7b:18:32:c6:35:e0:
         90:33:27:37:3c:96:fa:ed:8f:93:19:cd:4f:0a:ca:4b:7e:15:
         00:3d:27:16:ae:4d:07:18:b1:66:29:4a:01:47:3f:41:37:15:
         a4:8f:3f:40:cd:e1:35:0e:4b:e5:9c:20:8f:34:72:da:f3:6a:
         40:74:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----