Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/0c450f4fe1030b0d2ad0e99b2a58b86c9d1bd09d.roa
File:                     0c450f4fe1030b0d2ad0e99b2a58b86c9d1bd09d.roa (raw, json)
Hash identifier:          0uV3UvwxSXBb3RY3VGU+co++JwPUY8lfyEScXjX7IV8=
Subject key identifier:   B3:D4:95:B4:C1:31:FB:0B:8C:B0:56:3E:4F:4F:E6:5A:88:CF:98:BA
Certificate issuer:       /CN=57da31d041eab0b348be7e56e871dab78b2d6421
Certificate serial:       0D2D77
Authority key identifier: 78:00:B1:73:2E:68:6C:0B:8B:B4:57:AD:E7:2D:94:D3:9A:FB:69:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57da31d041eab0b348be7e56e871dab78b2d6421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/0c450f4fe1030b0d2ad0e99b2a58b86c9d1bd09d.roa
Signing time:             Wed 24 Mar 2021 14:32:37 +0000
ROA not before:           Wed 24 Mar 2021 14:32:37 +0000
ROA not after:            Tue 24 Mar 2026 14:32:37 +0000
asID:                     266659
IP address blocks:        45.227.244.0/22 maxlen: 22
                          2801:11:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863607 (0xd2d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57da31d041eab0b348be7e56e871dab78b2d6421
        Validity
            Not Before: Mar 24 14:32:37 2021 GMT
            Not After : Mar 24 14:32:37 2026 GMT
        Subject: CN=0c450f4fe1030b0d2ad0e99b2a58b86c9d1bd09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:77:ee:56:83:88:4c:54:0e:2a:af:bf:56:
                    4a:ff:77:a5:93:b8:8a:b3:cd:a1:f5:bb:77:bd:04:
                    0e:b5:6c:99:25:30:bf:c4:db:5c:e2:22:c0:d7:c2:
                    6c:53:73:0e:7e:fa:99:6c:ec:f6:ee:9a:53:ea:ee:
                    db:b2:94:34:91:a5:9e:2e:4f:a1:fc:b8:fd:a2:a0:
                    54:a2:1a:5b:d9:24:72:5b:a7:c1:fa:1b:c2:69:5f:
                    b9:ff:26:5d:da:d9:47:90:9b:0d:09:a3:16:98:30:
                    29:35:24:c0:59:fd:28:ea:94:47:37:4d:01:3c:27:
                    f2:b9:24:75:0e:20:ca:40:d4:0b:57:1e:cf:16:cf:
                    06:91:7a:0d:49:44:66:f5:aa:63:f2:ae:61:e5:1e:
                    71:4b:b5:ee:27:4f:30:77:84:fc:cd:69:4b:7f:f9:
                    7d:a3:ba:0a:72:af:2b:05:c2:18:a7:82:46:16:91:
                    a6:67:b3:fb:f9:4a:65:5b:d3:e6:3c:4d:7e:2f:82:
                    6e:9f:04:8c:8c:90:17:2f:7f:41:a1:92:02:bc:99:
                    5c:e7:9d:d7:f0:99:5f:3d:0a:76:38:5c:7c:63:4d:
                    0b:17:98:70:42:f8:09:8c:97:87:5d:45:14:0a:12:
                    0e:1b:23:dd:fd:6b:de:e4:ca:43:44:af:e0:59:6d:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:95:B4:C1:31:FB:0B:8C:B0:56:3E:4F:4F:E6:5A:88:CF:98:BA
            X509v3 Authority Key Identifier:
                keyid:78:00:B1:73:2E:68:6C:0B:8B:B4:57:AD:E7:2D:94:D3:9A:FB:69:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57da31d041eab0b348be7e56e871dab78b2d6421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/0c450f4fe1030b0d2ad0e99b2a58b86c9d1bd09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62d91e1-df91-4285-883e-7740a81ad8dc/57da31d041eab0b348be7e56e871dab78b2d6421.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.244.0/22
                IPv6:
                  2801:11:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:61:09:15:e4:d1:f5:57:2b:86:68:41:d2:22:94:58:c8:
         10:cf:65:89:59:8d:6f:85:00:24:25:48:77:70:4d:bf:6d:84:
         77:a0:90:ce:20:10:39:84:be:26:78:df:76:07:fd:6e:4f:f7:
         49:2d:bd:66:76:da:33:6f:d0:ad:dd:58:97:f4:db:3e:b1:91:
         11:cc:9e:66:bc:c1:76:e6:03:6a:9f:fa:30:5e:a6:e3:bd:c8:
         08:62:46:aa:90:be:f9:d9:e7:8c:81:2f:e0:7d:ce:1e:ff:5e:
         16:37:10:89:0e:27:fd:21:ad:98:4e:19:7b:12:85:d2:ee:09:
         14:16:7e:8e:3f:c9:7b:13:9d:c1:ee:9e:a5:f0:6a:b6:ea:fe:
         b5:07:d8:4f:05:e3:82:2e:c8:65:62:75:01:80:b6:80:d8:e3:
         a2:9f:74:f8:da:1f:64:6c:8a:a8:66:21:81:1c:28:d1:e7:71:
         8e:65:5b:20:e5:16:5c:80:bc:d1:5c:81:b5:3f:84:9b:36:02:
         66:5b:b6:20:d9:bf:2e:92:c6:3b:a4:35:33:a2:18:93:6f:76:
         3e:b0:b8:cf:82:6e:64:86:7c:36:ce:05:29:d5:0c:76:ce:0d:
         81:31:e9:f3:12:61:ec:0f:d4:d7:ca:8d:d5:cf:2f:8b:34:c9:
         6e:91:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----