Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/45ce56c355186ca6d26e598de676e3ac262fd55c.roa
File:                     45ce56c355186ca6d26e598de676e3ac262fd55c.roa (raw, json)
Hash identifier:          vQOGu0yR9hGeAfUvvQaX2Mnlo8CQJ+oRvddZasGEskA=
Subject key identifier:   35:21:D2:8F:F6:71:90:1C:1F:4E:A5:E4:4C:84:AD:85:A5:F9:9C:6E
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E853D
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/45ce56c355186ca6d26e598de676e3ac262fd55c.roa
Signing time:             Wed 24 Mar 2021 14:38:35 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     28006
IP address blocks:        2800:370::/32 maxlen: 48
                          2800:4f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951613 (0xe853d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=45ce56c355186ca6d26e598de676e3ac262fd55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:79:60:7a:bf:24:cf:b3:28:f8:4b:4c:17:
                    c1:d7:ac:55:9a:3d:76:a9:0c:06:a2:3a:66:9f:e1:
                    eb:d2:cb:05:dd:a3:ed:51:ba:ee:59:c0:44:2b:ac:
                    f5:2a:72:84:d2:d3:39:5d:d5:3c:a0:78:b3:76:47:
                    79:a1:04:33:42:e5:c2:ee:77:59:48:96:5b:6c:66:
                    aa:f9:e8:fd:40:c0:de:5c:90:7c:6c:58:0e:1a:02:
                    60:68:3e:4f:22:cd:45:a8:45:e7:08:9f:a0:63:bd:
                    3d:fb:48:4f:b1:d3:fd:6c:89:49:de:74:65:d3:01:
                    9b:16:7a:2d:04:2d:28:27:64:40:c0:d9:cb:be:58:
                    97:fb:d2:47:5f:d5:6b:97:eb:42:0f:c2:f1:0f:94:
                    dd:2a:6a:d3:2e:92:18:d8:4e:a7:5c:5a:30:b5:98:
                    0e:a9:9b:d8:3b:e6:dd:bb:24:43:19:f4:bf:37:f0:
                    a9:b3:9f:7e:c6:12:74:a7:dc:26:e5:01:59:e8:bb:
                    a4:8c:c5:1c:e0:95:4a:ca:a8:63:be:7f:a5:ef:a0:
                    2a:2c:52:14:05:4a:34:07:a8:75:33:6f:54:cd:b9:
                    00:e2:29:8b:73:b2:23:56:39:36:67:dc:18:5f:8c:
                    b7:d0:ee:20:1a:58:9b:91:b0:48:fb:2e:d5:28:f6:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:D2:8F:F6:71:90:1C:1F:4E:A5:E4:4C:84:AD:85:A5:F9:9C:6E
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/45ce56c355186ca6d26e598de676e3ac262fd55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:370::/32
                  2800:4f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:5d:4a:aa:47:12:7c:2e:f2:cf:8e:c8:c9:c9:fc:c9:b2:
         2f:dd:0a:c0:e4:25:55:ef:43:76:a9:06:fd:a8:51:e8:29:63:
         73:60:ef:2b:ff:52:43:b7:53:86:b3:71:a9:be:3a:c1:fb:c0:
         02:d7:0d:aa:75:57:91:3a:2d:aa:2b:b8:ff:09:1c:99:16:9b:
         b1:62:fe:b1:e8:dc:d6:cb:94:e0:95:68:f9:4c:86:9d:8a:c1:
         f9:bd:ee:aa:c7:22:70:57:f6:ea:c3:47:17:cc:04:4a:f4:5c:
         5e:aa:b6:95:03:77:b6:80:af:47:ea:2b:a7:18:21:14:1f:21:
         9d:17:c2:8b:b9:51:d2:c4:5c:b0:2d:f1:51:68:ac:6f:ad:7e:
         17:d0:40:95:b6:48:6c:5a:97:90:13:bc:02:4e:36:a6:ed:67:
         7b:89:16:b7:7e:2a:a0:cd:62:8c:4f:bc:c1:41:6f:d0:4e:b7:
         00:7a:bb:32:04:d2:85:23:11:0f:3d:10:52:dd:7d:e7:59:c4:
         4c:94:a3:3b:33:50:f7:ec:5e:e2:d8:2d:d9:49:a5:38:cc:d1:
         9a:a1:57:23:1f:39:9c:7b:56:16:73:08:f9:a5:31:05:8e:bf:
         a7:51:6a:cd:a4:d1:80:9f:9a:8c:13:a6:25:08:62:07:2e:a7:
         99:44:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----