Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/170eff37caf16172944a66091c3c5021322d55d0.roa
File:                     170eff37caf16172944a66091c3c5021322d55d0.roa (raw, json)
Hash identifier:          9nlu/E3dLV3xc/Th8yRETD9gfT6R6pB/NgjlmHF8XoU=
Subject key identifier:   EA:9A:9E:77:07:3A:B6:4F:ED:CD:16:AF:56:BA:45:BA:94:1E:65:C3
Certificate issuer:       /CN=a877a47e4a7bb2106d1aba44de1fa5ae17f4f321
Certificate serial:       0E1653
Authority key identifier: 4E:D3:9C:FD:30:51:21:88:4C:22:BF:37:54:6B:05:DB:5A:65:B7:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/170eff37caf16172944a66091c3c5021322d55d0.roa
Signing time:             Wed 30 Jun 2021 14:02:45 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     271920
IP address blocks:        45.183.42.0/23 maxlen: 23
                          2803:ad60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923219 (0xe1653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a877a47e4a7bb2106d1aba44de1fa5ae17f4f321
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=170eff37caf16172944a66091c3c5021322d55d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:d8:eb:bf:c4:6c:03:f3:f3:ce:77:ad:4a:
                    9d:d1:3c:4d:e2:db:f8:08:54:39:45:bf:80:ce:6a:
                    f7:82:20:31:cb:32:2a:6e:6e:0e:73:4e:a7:6b:b8:
                    be:2f:32:39:e1:0d:34:6d:69:89:06:e1:94:cb:e6:
                    7b:6f:90:19:66:2f:4a:cc:10:14:cf:97:c1:76:84:
                    e2:c6:cc:85:3d:4a:ed:e6:b0:a3:24:f4:a2:ce:3a:
                    91:bc:fa:14:9a:ce:91:64:11:f3:86:fc:2b:af:68:
                    2b:1e:4a:d3:0e:c3:1b:c8:de:a3:38:98:df:84:f6:
                    81:36:fe:f3:fa:b2:00:eb:44:01:e0:08:07:1d:6a:
                    55:91:b7:ea:fd:3e:f6:7b:31:c6:4f:d0:f9:ad:d3:
                    81:05:42:cb:7f:d6:7e:30:f2:66:53:64:94:18:50:
                    ab:55:13:3a:6b:44:3c:bb:6e:a7:37:0a:d3:dc:bb:
                    a8:3c:62:ca:7c:61:ff:7b:d9:90:01:fa:c2:2e:a7:
                    a4:41:da:be:b2:85:6c:42:8e:a8:60:47:2e:02:1c:
                    ab:d4:24:77:ef:80:41:ea:e6:a2:cf:1e:63:b0:66:
                    0a:5f:04:d7:17:99:dd:ae:27:80:67:b3:57:7f:8d:
                    f6:71:c6:53:15:68:e5:85:3f:ac:2d:f0:63:51:c4:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9A:9E:77:07:3A:B6:4F:ED:CD:16:AF:56:BA:45:BA:94:1E:65:C3
            X509v3 Authority Key Identifier:
                keyid:4E:D3:9C:FD:30:51:21:88:4C:22:BF:37:54:6B:05:DB:5A:65:B7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/170eff37caf16172944a66091c3c5021322d55d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d87eb24-a5c9-4112-8af3-e68bc8bafbe6/a877a47e4a7bb2106d1aba44de1fa5ae17f4f321.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.42.0/23
                IPv6:
                  2803:ad60::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:c1:68:be:a7:16:95:d7:16:c6:7c:55:9e:90:5d:c0:11:
         19:85:35:af:53:6f:81:5e:15:8e:0b:33:93:7c:6e:1a:73:a1:
         7e:8b:73:6a:7d:90:49:8b:27:4c:c4:57:9c:71:cc:f3:1f:5a:
         c7:c1:a5:e6:ef:f6:c7:77:d0:16:18:68:b8:69:75:65:fa:0a:
         1b:e7:d0:3c:39:20:fd:87:b1:3a:73:30:6e:9a:66:8b:a3:49:
         77:ef:71:0f:be:1f:38:43:da:39:b1:a7:10:92:e2:90:8c:e2:
         b7:62:95:20:61:b3:d1:b3:b8:9f:99:df:d0:75:86:33:3b:44:
         b6:c7:77:0d:a1:f5:19:29:e5:f1:8a:b1:ff:3c:d0:35:b5:69:
         8c:55:20:c0:e5:47:d3:34:e5:89:d5:20:27:2e:1c:bb:22:e6:
         83:e6:b4:23:0b:f7:59:1b:0a:18:59:48:a4:ad:24:e7:d4:49:
         23:94:31:a9:f5:f9:62:fa:df:07:c1:fc:79:8e:43:d9:b9:98:
         a8:53:88:75:73:42:b6:d9:2d:89:94:a3:bd:da:37:37:62:4c:
         a9:32:9a:86:63:fe:94:69:46:91:db:91:7b:5c:71:2e:a8:c2:
         ea:bc:fd:32:00:5b:66:ee:4c:29:f6:c4:0d:5b:5e:6e:1c:ad:
         a8:0e:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----