Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/2ef4cbdb2e219b684d6d35f66becde789d3f487e.roa
File:                     2ef4cbdb2e219b684d6d35f66becde789d3f487e.roa (raw, json)
Hash identifier:          ZMcFoXaq1kWsTpl32o4d7I1Pp3bzI9tTFMBQvK2TARQ=
Subject key identifier:   C9:8C:17:39:BF:23:DF:A9:BC:C4:64:2B:93:27:48:B2:52:6C:58:7C
Certificate issuer:       /CN=0f385b55aff201749c5d3f77595f6566c0d0a75f
Certificate serial:       0DCB1B
Authority key identifier: 0A:6B:07:AA:2F:61:B2:FD:C4:28:2B:92:14:40:62:22:49:66:13:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f385b55aff201749c5d3f77595f6566c0d0a75f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/2ef4cbdb2e219b684d6d35f66becde789d3f487e.roa
Signing time:             Wed 09 Jun 2021 18:00:11 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     263754
IP address blocks:        45.174.24.0/22 maxlen: 24
                          2803:7060::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903963 (0xdcb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f385b55aff201749c5d3f77595f6566c0d0a75f
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=2ef4cbdb2e219b684d6d35f66becde789d3f487e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:98:ce:e2:0e:25:2e:d0:f3:ca:74:f3:3b:
                    9c:2e:d8:95:34:55:84:2a:37:27:8a:2e:c5:8c:0a:
                    5b:2d:0c:7b:03:01:7f:6c:27:d1:80:70:fa:96:0f:
                    96:db:18:f2:10:56:c1:40:1e:3e:15:0d:8f:b8:ac:
                    ee:d8:5f:62:6b:89:6f:72:1c:48:99:91:90:21:53:
                    4f:1d:4e:77:22:67:f1:97:d6:97:dc:eb:00:65:4b:
                    91:16:18:16:4e:26:45:72:ee:24:fb:c8:cf:2b:cd:
                    f4:49:4f:38:dc:27:ff:8e:32:66:c2:cf:17:8e:04:
                    50:4a:92:b6:12:f5:dc:98:75:53:76:ed:51:c7:01:
                    f2:19:2d:d6:49:5b:26:40:f5:23:95:01:73:d5:59:
                    42:6d:12:f9:bc:35:e5:3e:49:31:51:0b:38:3b:63:
                    21:11:c9:db:46:3b:a8:22:e1:32:41:4c:95:f1:35:
                    5a:6f:13:d0:e2:1d:ef:74:c1:fd:92:74:ea:94:10:
                    fe:5b:0e:e6:83:b9:04:aa:15:48:3d:fe:ae:b6:a6:
                    9b:e9:fb:5e:50:c9:0b:2a:ac:d7:bf:5c:97:89:c3:
                    5f:27:32:f0:ea:6a:2d:1c:3a:a7:aa:c4:e9:e8:1e:
                    1d:f2:ff:e5:ed:ae:e1:9c:72:8c:99:39:26:70:0e:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8C:17:39:BF:23:DF:A9:BC:C4:64:2B:93:27:48:B2:52:6C:58:7C
            X509v3 Authority Key Identifier:
                keyid:0A:6B:07:AA:2F:61:B2:FD:C4:28:2B:92:14:40:62:22:49:66:13:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f385b55aff201749c5d3f77595f6566c0d0a75f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/2ef4cbdb2e219b684d6d35f66becde789d3f487e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad4ecfd7-aac7-4776-bc6d-4c92383fbe53/0f385b55aff201749c5d3f77595f6566c0d0a75f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.24.0/22
                IPv6:
                  2803:7060::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:10:0b:c4:bf:14:0c:63:b4:03:2a:66:4f:6c:b8:10:2e:28:
         f8:51:22:48:a6:d4:32:b1:e0:11:ca:04:03:dc:71:eb:2b:f6:
         4d:e9:ed:3b:dd:c5:86:4f:45:d6:4d:67:ee:ce:ee:b1:4e:7d:
         1f:34:97:2a:18:26:0b:3c:ea:44:28:4b:10:b6:c5:b2:e8:7f:
         56:f7:ca:7a:bc:09:e3:74:94:e3:72:60:8e:35:9b:a0:8a:51:
         f6:32:6b:a4:f5:e4:db:c4:61:a6:b5:bd:38:88:4b:f7:56:e0:
         f2:6c:d6:bf:f2:21:4b:89:ca:04:16:11:17:10:78:af:87:53:
         44:cf:bc:9a:11:5b:61:e1:e5:65:87:46:9c:a7:6f:a7:9d:98:
         e1:eb:21:f7:af:49:7b:00:4a:7d:fc:18:fa:17:27:66:6d:0b:
         79:41:61:c0:a6:f8:17:cd:f5:82:59:38:6e:81:c4:2d:61:3f:
         f1:31:69:f5:8a:fd:9a:84:95:56:54:47:a3:ef:69:a8:77:9a:
         19:3b:c3:d9:46:fd:97:34:da:d4:2f:41:0b:c2:9e:34:92:27:
         d6:b6:dc:08:0f:be:7f:49:41:a7:2c:4c:b1:d8:4f:9b:d8:ff:
         10:a6:30:d1:d1:05:0b:f8:da:3a:20:38:bc:7a:8a:71:1b:39:
         6c:81:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----