Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/47a743b9f3f5e3511cf0ec19d8796ad53d6513f8.roa
File:                     47a743b9f3f5e3511cf0ec19d8796ad53d6513f8.roa (raw, json)
Hash identifier:          nT03lRcZhWCL1M0m5nXFMPDMk6Xuuhzd1gf6c9JE43c=
Subject key identifier:   FA:44:2C:21:33:E7:78:33:8A:39:B1:34:EA:6F:D4:FC:5A:85:31:3C
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       0BAAA7
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/47a743b9f3f5e3511cf0ec19d8796ad53d6513f8.roa
Signing time:             Wed 24 Mar 2021 14:34:40 +0000
ROA not before:           Wed 24 Mar 2021 14:34:40 +0000
ROA not after:            Tue 24 Mar 2026 14:34:40 +0000
asID:                     267823
IP address blocks:        45.172.222.0/23 maxlen: 24
                          45.173.12.0/24 maxlen: 24
                          2803:1860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764583 (0xbaaa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: Mar 24 14:34:40 2021 GMT
            Not After : Mar 24 14:34:40 2026 GMT
        Subject: CN=47a743b9f3f5e3511cf0ec19d8796ad53d6513f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:8c:73:15:f2:b9:17:31:8e:e4:11:67:2b:
                    d7:85:26:c1:4f:65:d6:95:6c:a3:a5:2f:51:8d:10:
                    cd:30:9a:95:94:c9:46:ad:70:3f:23:67:7f:72:d9:
                    62:9a:48:02:ff:39:ca:1e:6a:b7:4a:98:1b:fc:fe:
                    35:63:40:3e:15:aa:68:e9:a0:15:ba:9d:7f:ec:be:
                    8c:15:c8:a3:fe:15:f6:7c:44:51:4c:da:6c:ae:f2:
                    77:bf:2b:6f:50:04:d1:65:74:fd:60:34:34:64:ba:
                    3d:d3:72:72:23:7e:cd:82:a0:6f:f5:9c:0d:66:9c:
                    99:87:5d:1d:6b:62:62:be:f5:d0:60:e5:ee:d5:b2:
                    09:b5:15:ce:ff:f9:b1:a9:54:99:d8:62:9b:79:4d:
                    9f:b5:df:c3:6a:32:e9:6b:50:09:9a:f4:d7:12:d8:
                    2b:ea:c8:d2:c3:5b:b5:43:e3:79:0b:0f:67:c9:27:
                    3d:f5:6a:58:21:ac:4c:09:a4:20:77:70:f8:d9:83:
                    fb:18:7c:37:77:76:38:cc:9d:9d:17:32:0c:8c:a8:
                    98:da:13:3b:7e:a7:ab:c8:49:35:5e:aa:5f:f9:ca:
                    c9:30:da:e5:3a:05:3c:24:9c:00:d2:d9:5a:48:b3:
                    9e:9f:c2:15:67:96:d8:0b:34:44:b0:98:7b:1c:07:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:2C:21:33:E7:78:33:8A:39:B1:34:EA:6F:D4:FC:5A:85:31:3C
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/47a743b9f3f5e3511cf0ec19d8796ad53d6513f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.222.0/23
                  45.173.12.0/24
                IPv6:
                  2803:1860::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:22:c5:b2:2e:43:03:60:be:5a:47:ab:3e:be:74:d6:41:18:
         bf:22:ff:b7:8e:1d:30:3c:5b:ff:bd:5f:18:09:a4:97:62:27:
         7b:a9:ac:ac:e2:79:21:5e:db:e9:77:45:6f:2a:1c:f1:97:4a:
         b9:cc:77:04:0e:03:a3:1a:2a:62:e5:11:4f:0f:da:cb:5d:8e:
         ca:0e:19:1f:4a:a7:ca:4f:c2:b5:85:c6:35:f7:b0:ee:7e:40:
         8d:73:40:84:41:b3:ec:cf:09:bf:4b:f9:cc:cc:ad:46:c7:15:
         17:18:aa:5d:ae:cd:14:7e:2b:df:f1:5b:25:8f:8a:b2:c5:77:
         83:52:b0:23:1c:fd:24:8e:32:ba:ea:c8:e1:bd:24:88:4b:11:
         7f:f9:f2:42:61:4c:6b:42:60:21:b0:cf:2f:75:18:83:35:d5:
         6e:84:e1:de:86:15:bc:8e:f3:00:68:ec:63:16:f4:f1:a5:77:
         21:f8:fc:80:b9:fd:df:44:81:09:b3:61:13:22:a5:68:9d:cb:
         61:b9:c1:eb:fc:29:ef:58:c1:3b:fc:4d:99:72:72:c9:29:4b:
         cd:c4:f7:de:d1:72:38:58:a7:ee:99:28:60:7e:01:1d:b0:6c:
         67:6e:b9:12:71:6f:59:5a:5a:f5:0d:46:19:53:8b:e1:9a:4b:
         34:26:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----