Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/a96256ef56ff2bc3fe4e74fbc88ee7305db496bd.roa
File:                     a96256ef56ff2bc3fe4e74fbc88ee7305db496bd.roa (raw, json)
Hash identifier:          eb8TvwgrcP4d6DwJrtymCVM4CC8hCZa0IhMBRbiZkL0=
Subject key identifier:   18:E7:82:C8:28:35:46:92:B2:65:7F:4A:32:BA:D7:59:BC:DA:8E:AD
Certificate issuer:       /CN=2086a00004044e8c0e8b528587668a00a96069ba
Certificate serial:       0CC2C3
Authority key identifier: C9:6D:B0:C9:47:6E:B3:BC:86:FB:1C:7B:0F:4B:BD:EE:8C:78:0A:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2086a00004044e8c0e8b528587668a00a96069ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/a96256ef56ff2bc3fe4e74fbc88ee7305db496bd.roa
Signing time:             Wed 24 Mar 2021 14:35:50 +0000
ROA not before:           Wed 24 Mar 2021 14:35:49 +0000
ROA not after:            Tue 24 Mar 2026 14:35:49 +0000
asID:                     267842
IP address blocks:        45.174.224.0/23 maxlen: 23
                          192.92.154.0/24 maxlen: 24
                          2803:9460::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836291 (0xcc2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2086a00004044e8c0e8b528587668a00a96069ba
        Validity
            Not Before: Mar 24 14:35:49 2021 GMT
            Not After : Mar 24 14:35:49 2026 GMT
        Subject: CN=a96256ef56ff2bc3fe4e74fbc88ee7305db496bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:58:3c:93:73:21:9b:14:76:4f:f5:2d:9c:8a:
                    fc:88:21:73:55:60:a0:2c:31:fe:50:ec:c7:74:08:
                    50:22:b5:14:3a:7b:e9:4f:aa:25:58:27:9c:4d:fb:
                    3b:4c:c5:14:18:13:d0:55:4e:dd:e6:00:47:f2:53:
                    19:02:f8:c7:8a:0b:88:c3:c9:d7:54:08:b0:4f:5b:
                    8d:f3:21:09:01:c8:28:1c:be:00:a8:ae:03:82:06:
                    1a:b6:7e:58:00:ec:1d:71:8a:81:2a:ec:1d:d9:42:
                    10:6a:69:33:7e:e6:61:dd:1a:2d:bb:2b:c1:76:52:
                    5a:7f:f2:1f:28:fe:0a:12:8b:fc:2c:b8:62:09:91:
                    b1:37:92:a1:7c:08:0b:a6:d9:73:64:60:0c:9b:af:
                    54:9b:80:60:cc:42:8d:ae:0a:1f:b3:f8:ca:30:5e:
                    62:88:5c:e8:3f:a2:19:20:02:f4:70:ab:84:eb:5d:
                    01:3f:77:7e:ba:4a:16:65:8f:b0:6f:ab:30:5c:49:
                    30:d0:6b:ee:b5:db:40:e8:77:a4:ce:ff:f3:fc:9b:
                    4b:1c:1f:72:17:29:b1:14:27:21:be:1a:6e:ef:c8:
                    a4:2f:f4:ea:d1:97:40:6f:f3:2b:d2:9f:34:a4:d4:
                    72:af:24:d6:28:3e:1d:20:c0:0d:9c:9e:22:a2:a3:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:82:C8:28:35:46:92:B2:65:7F:4A:32:BA:D7:59:BC:DA:8E:AD
            X509v3 Authority Key Identifier:
                keyid:C9:6D:B0:C9:47:6E:B3:BC:86:FB:1C:7B:0F:4B:BD:EE:8C:78:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2086a00004044e8c0e8b528587668a00a96069ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/a96256ef56ff2bc3fe4e74fbc88ee7305db496bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a56b0113-e501-44ff-95d0-19727f48560e/2086a00004044e8c0e8b528587668a00a96069ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.224.0/23
                  192.92.154.0/24
                IPv6:
                  2803:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:01:0b:63:1f:1e:cc:a3:55:6f:38:27:ad:7f:02:fa:e9:f2:
         98:69:49:d9:9d:86:c9:c6:75:23:0d:c5:12:89:f3:f2:2c:17:
         67:77:c6:7d:73:a8:05:5f:89:99:96:c8:db:83:c4:87:43:9e:
         b2:44:31:c5:b9:9b:91:f1:75:4c:2d:a7:d1:8b:1e:c6:ec:95:
         56:50:e7:3f:24:9d:cb:32:4c:0d:3c:33:ca:a9:48:01:94:b3:
         ec:4d:5e:a8:21:cf:29:21:55:8b:af:3d:2f:d3:4d:16:fc:18:
         9e:2d:21:6a:12:e6:df:ee:fa:10:80:53:6d:65:ff:99:33:48:
         2a:61:d5:bd:b7:ce:5b:00:82:73:71:b5:a5:de:b5:76:30:88:
         cf:27:cc:99:79:a2:f2:76:92:ec:70:a4:d0:67:55:9c:8f:bd:
         cc:b7:ee:e9:7e:d3:e9:14:9e:78:b4:5e:bc:49:5a:ba:11:39:
         42:01:35:6d:40:c8:b4:b9:ed:83:d0:5f:6f:2c:57:ce:26:1c:
         02:49:e0:41:88:33:eb:7a:0d:ea:24:b3:ac:10:6e:15:d0:28:
         97:ea:e9:28:70:74:b6:77:cc:bf:2b:88:2b:f1:0f:1e:b7:d7:
         09:78:a6:9e:0b:f2:6e:11:5b:c2:9a:22:f3:3a:0b:83:ee:06:
         df:37:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----