Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/50efa0040835d775f360717c78460a001ce055aa.roa
File:                     50efa0040835d775f360717c78460a001ce055aa.roa (raw, json)
Hash identifier:          FCA/cAXRmKrnSeRJkM76MKRK29JfsFa4Y2OmoqB1JZc=
Subject key identifier:   28:52:63:F4:E8:DE:E4:1E:0D:18:97:1A:C6:FF:43:1F:D9:0E:4F:49
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       0D232C
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/50efa0040835d775f360717c78460a001ce055aa.roa
Signing time:             Wed 24 Mar 2021 14:37:09 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     266719
IP address blocks:        45.231.55.0/24 maxlen: 24
                          2801:1d:a005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860972 (0xd232c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=50efa0040835d775f360717c78460a001ce055aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:93:04:58:53:5f:0b:8a:44:21:2e:d9:54:
                    bb:1c:08:ef:fc:62:08:38:44:a2:81:bb:bf:e3:9e:
                    01:07:ed:2b:ee:cb:c0:55:e4:94:aa:8c:c6:9a:46:
                    3b:9c:4c:85:29:b6:44:5d:ff:7d:e0:09:d2:84:69:
                    49:7a:5a:da:35:fe:3a:e7:74:c9:e5:ec:df:aa:01:
                    7f:68:37:dc:94:3b:d0:f5:cc:0d:df:dd:57:3f:9d:
                    5f:f5:31:f8:37:87:dd:53:8e:bf:5d:16:53:a6:54:
                    ed:38:8f:f3:ce:6e:1b:b1:d0:27:63:83:f2:1e:2f:
                    4e:95:ae:6b:36:28:aa:e9:bd:da:96:df:4a:16:52:
                    17:da:21:74:98:d0:d9:c2:d6:6a:8c:29:1e:93:a3:
                    a7:e6:c4:bd:27:32:3b:e7:4c:8d:f0:5e:72:7d:cd:
                    a7:30:b4:a8:04:68:ab:36:dd:67:f7:5b:9a:55:8b:
                    6e:4a:a5:68:67:d3:9b:63:b3:e6:51:d1:f7:d9:d5:
                    96:15:54:9a:d8:04:34:e8:ac:39:51:df:91:fc:ab:
                    eb:66:ac:e8:2c:43:fb:8a:a3:be:82:95:c1:7f:bf:
                    fa:9a:1b:12:93:f9:02:46:56:f8:a4:67:85:8a:a8:
                    c1:bb:08:56:64:d1:5c:87:73:5e:7a:9d:4e:d6:5c:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:52:63:F4:E8:DE:E4:1E:0D:18:97:1A:C6:FF:43:1F:D9:0E:4F:49
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/50efa0040835d775f360717c78460a001ce055aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.55.0/24
                IPv6:
                  2801:1d:a005::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:60:1f:68:33:df:e1:2a:bd:86:c7:fa:70:24:9c:60:44:
         3e:ea:46:0c:c8:bf:9a:b3:41:fe:b0:9f:0b:84:de:86:20:38:
         60:c6:bb:6b:81:d3:90:1a:b4:ad:8e:39:67:cf:ec:3a:1b:3d:
         b8:92:13:2c:ba:2d:d4:7d:fd:33:ea:8a:82:62:3c:58:b3:95:
         ea:37:ac:67:b1:53:4f:fc:2a:01:98:c6:c3:f3:60:73:79:05:
         19:56:b1:8a:c8:21:a1:f4:87:a7:4e:c0:bb:01:95:4e:2f:53:
         92:1a:6f:0a:09:0e:13:70:0d:ce:34:cb:89:42:af:dd:af:31:
         9c:91:ee:2b:3a:03:82:16:25:f9:ff:cd:d4:d7:e8:74:27:3f:
         62:75:b6:e0:4f:04:3f:28:2a:f8:2b:f5:ab:36:da:cd:10:49:
         cf:01:42:97:bf:8a:3b:01:c0:da:f5:94:8e:bb:ff:1e:f4:83:
         55:4b:64:64:f8:83:44:14:61:2f:09:e9:f2:91:39:ea:ac:25:
         ab:a7:ea:cb:66:03:c9:5b:ff:e0:28:36:51:04:4c:d5:7f:a7:
         52:0f:bc:8b:44:e4:0f:64:bd:43:f9:7a:2c:74:6f:67:b7:8b:
         4b:85:e2:c6:b3:a5:97:39:b8:91:6e:46:bc:4c:61:0c:04:fd:
         19:4a:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----