Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/200807d8fe95ee8d63a71b978d9e4f4877fb4a48.roa
File:                     200807d8fe95ee8d63a71b978d9e4f4877fb4a48.roa (raw, json)
Hash identifier:          hBlOQlUrbVAKzIxKnYLMkVQRm6IJ+hmCD9zfD+7SE4E=
Subject key identifier:   85:1E:B8:67:C0:E6:AA:E5:F0:D3:F8:E2:51:6B:B0:E7:FA:B9:09:A4
Certificate issuer:       /CN=955d77e286553ae66ca30e8d9c9c76a1916a4be0
Certificate serial:       0BBD4A
Authority key identifier: 5D:D8:DC:68:AF:35:93:E2:94:16:7C:3B:61:A3:6D:26:6F:3A:EC:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/955d77e286553ae66ca30e8d9c9c76a1916a4be0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/200807d8fe95ee8d63a71b978d9e4f4877fb4a48.roa
Signing time:             Wed 24 Mar 2021 14:34:01 +0000
ROA not before:           Wed 24 Mar 2021 14:34:01 +0000
ROA not after:            Tue 24 Mar 2026 14:34:01 +0000
asID:                     263702
IP address blocks:        45.178.132.0/22 maxlen: 24
                          2803:b660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769354 (0xbbd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955d77e286553ae66ca30e8d9c9c76a1916a4be0
        Validity
            Not Before: Mar 24 14:34:01 2021 GMT
            Not After : Mar 24 14:34:01 2026 GMT
        Subject: CN=200807d8fe95ee8d63a71b978d9e4f4877fb4a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:98:a7:4b:99:be:07:18:84:cc:4b:21:4f:
                    e1:f0:7f:c8:48:13:f4:d0:ad:af:72:08:08:1a:81:
                    8e:5a:f2:de:ce:b9:4c:4d:59:4e:1f:c7:40:e3:93:
                    23:b9:cb:8d:9c:11:aa:1e:f1:fc:91:3f:06:94:31:
                    8d:01:3b:ff:d4:73:ba:5b:44:a5:ad:e5:64:2f:aa:
                    2d:ae:af:85:36:8c:2d:79:cf:21:e0:ed:2f:a8:22:
                    24:d5:a2:a5:cd:1b:f8:9e:71:20:04:da:55:45:8b:
                    e0:be:fa:ab:ed:18:2a:b4:94:cb:64:c5:0a:0e:fe:
                    c6:86:f8:5a:b8:67:5f:8d:2e:f6:87:0e:6d:4c:79:
                    54:08:14:82:85:1c:c2:73:d4:fb:9a:dc:8e:d1:1f:
                    80:04:8c:d5:1c:d5:b1:4a:e6:45:84:9f:31:8d:bf:
                    10:df:63:e7:97:f3:ea:59:02:dc:c5:d7:3e:44:e9:
                    4a:eb:9c:50:0e:16:e7:34:83:75:90:e4:85:be:1f:
                    5c:36:09:25:7f:87:13:f3:6d:ad:17:22:b8:df:d4:
                    f5:ab:72:2a:4a:fa:6b:7f:55:a0:23:d4:60:c2:4d:
                    1f:4d:c6:fb:ca:19:0d:79:47:16:ff:f9:24:26:98:
                    2a:0d:6a:ea:1c:27:4d:e8:f8:33:6c:78:05:c7:3e:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:B8:67:C0:E6:AA:E5:F0:D3:F8:E2:51:6B:B0:E7:FA:B9:09:A4
            X509v3 Authority Key Identifier:
                keyid:5D:D8:DC:68:AF:35:93:E2:94:16:7C:3B:61:A3:6D:26:6F:3A:EC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/955d77e286553ae66ca30e8d9c9c76a1916a4be0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/200807d8fe95ee8d63a71b978d9e4f4877fb4a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/955d77e286553ae66ca30e8d9c9c76a1916a4be0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.132.0/22
                IPv6:
                  2803:b660::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:4b:01:0c:f8:2c:36:2a:ee:43:28:24:d7:a3:88:7d:b1:df:
         cf:41:2f:d3:72:8d:d3:52:98:01:c2:af:01:58:3b:6c:7f:a7:
         fb:7c:9a:9a:97:39:86:9c:7c:c3:57:b1:bf:9a:bf:b8:16:bb:
         2b:c6:34:28:6a:22:0a:e3:95:c9:a9:ab:65:6b:36:ad:e2:d8:
         84:8d:91:26:c5:ea:3f:59:63:d1:0f:c5:24:19:70:52:17:a3:
         30:9b:9a:95:1c:4d:29:d2:21:b1:77:2a:aa:0b:ed:b6:b9:de:
         6b:fb:2f:03:d9:65:13:1e:f8:97:5a:2f:4e:18:aa:e4:4f:2f:
         9c:56:88:77:af:76:4d:07:40:ab:30:db:25:79:fe:28:3a:56:
         e0:ac:3a:55:ad:06:c3:13:91:64:6a:d1:70:f5:d3:e4:db:bb:
         c4:aa:2d:29:cf:12:ce:2a:77:f7:63:6a:f1:13:8e:7b:50:72:
         cb:68:37:2b:02:0f:08:64:21:90:1f:9a:e6:cb:4a:2d:db:f2:
         c6:9f:48:cb:31:0a:ef:3c:ee:c0:6d:a2:ef:ac:d0:c1:2b:52:
         22:ad:d3:da:a8:18:c0:5b:b0:94:50:e9:4b:40:f5:6a:cf:7a:
         8e:52:2c:c9:05:02:79:6b:e1:64:a0:8e:27:1a:f2:32:4b:59:
         34:7d:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----