Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/b2d03c6b495bf8157dbf576a2c59895083e8f072.roa
File:                     b2d03c6b495bf8157dbf576a2c59895083e8f072.roa (raw, json)
Hash identifier:          bou+GmMy6EZEYy0JX7PM5T+1u0SUg/c6SAWn/O1qkK8=
Subject key identifier:   40:C0:3E:2B:4A:BF:AD:95:49:7F:C6:3D:8F:92:06:E7:FF:6D:46:26
Certificate issuer:       /CN=955d77e286553ae66ca30e8d9c9c76a1916a4be0
Certificate serial:       0BC0B1
Authority key identifier: 5D:D8:DC:68:AF:35:93:E2:94:16:7C:3B:61:A3:6D:26:6F:3A:EC:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/955d77e286553ae66ca30e8d9c9c76a1916a4be0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/b2d03c6b495bf8157dbf576a2c59895083e8f072.roa
Signing time:             Wed 24 Mar 2021 14:34:01 +0000
ROA not before:           Wed 24 Mar 2021 14:34:01 +0000
ROA not after:            Tue 24 Mar 2026 14:34:01 +0000
asID:                     267908
IP address blocks:        45.178.132.0/22 maxlen: 24
                          2803:b660::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770225 (0xbc0b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955d77e286553ae66ca30e8d9c9c76a1916a4be0
        Validity
            Not Before: Mar 24 14:34:01 2021 GMT
            Not After : Mar 24 14:34:01 2026 GMT
        Subject: CN=b2d03c6b495bf8157dbf576a2c59895083e8f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:45:ee:f5:21:f4:1c:24:8b:ea:04:dc:58:
                    a4:b9:02:3e:32:db:5b:d1:87:25:e5:9a:3d:36:6b:
                    e6:e8:ea:81:17:81:8c:ae:3b:e2:99:cf:fb:b4:61:
                    88:81:56:63:74:14:ba:cd:19:e6:00:4c:3b:90:53:
                    cc:e1:19:a6:e7:96:1a:7d:37:91:5b:97:60:7b:71:
                    a8:cf:0e:a9:9d:6b:ee:a8:bb:1f:a9:02:82:f9:50:
                    3d:09:80:d9:e6:56:24:b5:0c:cb:de:3b:7b:9a:95:
                    78:a4:d9:da:fd:a0:3b:ac:ab:4b:62:59:05:71:45:
                    fd:32:d6:ab:45:7f:43:46:03:4f:6b:a3:70:53:52:
                    02:27:04:15:80:c0:c5:7e:77:71:91:f3:35:49:95:
                    3c:26:d8:16:11:fe:8a:4c:f6:31:e5:52:6a:25:2c:
                    ed:b5:1b:8a:a8:c7:2a:e8:ae:fd:86:53:49:94:4d:
                    8e:c5:ae:ab:60:ea:f4:4e:f3:9f:9f:74:ca:ea:81:
                    78:29:a6:0b:c1:9e:a9:90:06:64:82:24:44:de:1d:
                    b6:71:5f:c3:5d:a1:e9:e7:b9:37:c7:c6:18:f5:5b:
                    ad:c0:e7:a2:c5:2c:06:48:a3:df:be:98:a7:c3:43:
                    b3:10:2e:21:7c:a3:bc:38:46:81:65:78:f4:71:3e:
                    41:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:3E:2B:4A:BF:AD:95:49:7F:C6:3D:8F:92:06:E7:FF:6D:46:26
            X509v3 Authority Key Identifier:
                keyid:5D:D8:DC:68:AF:35:93:E2:94:16:7C:3B:61:A3:6D:26:6F:3A:EC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/955d77e286553ae66ca30e8d9c9c76a1916a4be0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/b2d03c6b495bf8157dbf576a2c59895083e8f072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a022d176-4a6e-474f-b959-6d6b43537a1a/955d77e286553ae66ca30e8d9c9c76a1916a4be0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.132.0/22
                IPv6:
                  2803:b660::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:d4:b6:90:80:69:8c:5b:e6:f3:b8:4b:8f:43:85:4e:19:17:
         3a:04:a3:f4:57:cf:fc:f4:07:e7:9f:10:77:1d:d7:57:60:0f:
         75:f6:04:85:d0:35:ed:f7:37:64:c7:d5:ca:54:b2:a3:ba:da:
         9f:75:d5:ed:48:0c:1d:5a:ff:d9:a3:7f:13:61:45:8e:ca:8b:
         fd:bd:7a:e6:0c:56:99:05:cc:3f:82:7e:9b:82:9c:73:6a:e8:
         1f:d6:a3:43:d0:4b:7b:8b:b6:4e:13:75:43:cd:64:fa:89:6c:
         30:c6:ef:ca:29:d9:63:4a:e9:69:1f:9a:e4:7d:e0:88:4f:b1:
         c6:01:f4:08:f4:43:18:c2:99:be:38:9a:db:d4:9f:84:20:34:
         2e:01:02:e2:dc:cc:47:06:4e:63:b0:1c:c0:2e:99:0d:b6:c6:
         e7:bf:dc:04:b4:6d:4c:f0:72:c8:bc:86:88:16:73:3a:9c:5b:
         6a:d2:ba:91:3b:15:cc:4b:a6:df:e5:2a:5d:9a:b2:2e:c3:30:
         f5:ae:d7:3b:ef:85:2e:33:2f:b7:f2:54:36:a6:84:fb:26:5f:
         03:48:5c:ae:e0:21:ff:0b:21:f4:33:62:3d:ab:d0:a0:31:fa:
         e7:c2:4e:4e:f0:2e:35:75:a9:ef:2e:57:e5:df:e4:ab:84:da:
         3c:f6:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----