Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/2b0173010d4c258142183b0b589e1e4757cb5f28.roa
File:                     2b0173010d4c258142183b0b589e1e4757cb5f28.roa (raw, json)
Hash identifier:          Q7Jy0xRhLIZkHyDpcmH2IeJs4GsogwQZQ+PaRqiAbgA=
Subject key identifier:   07:0A:FA:89:A2:87:E8:A9:73:DC:8B:DA:8F:2B:60:E1:0A:85:8C:E5
Certificate issuer:       /CN=a09df5d43f71e6cb12a3afb5d5b034307f575de7
Certificate serial:       0C5046
Authority key identifier: A2:0C:87:C7:9F:FC:9C:DC:C4:33:7C:BE:C0:E3:5D:D9:AF:8D:11:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a09df5d43f71e6cb12a3afb5d5b034307f575de7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/2b0173010d4c258142183b0b589e1e4757cb5f28.roa
Signing time:             Wed 24 Mar 2021 14:33:52 +0000
ROA not before:           Wed 24 Mar 2021 14:33:52 +0000
ROA not after:            Tue 24 Mar 2026 14:33:52 +0000
asID:                     266864
IP address blocks:        45.239.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806982 (0xc5046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09df5d43f71e6cb12a3afb5d5b034307f575de7
        Validity
            Not Before: Mar 24 14:33:52 2021 GMT
            Not After : Mar 24 14:33:52 2026 GMT
        Subject: CN=2b0173010d4c258142183b0b589e1e4757cb5f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:96:ed:76:3e:39:d8:1d:e6:4d:51:06:c1:
                    96:2d:41:95:6b:0c:30:f4:c7:61:e3:d9:b9:aa:2a:
                    9e:55:91:d1:9a:fa:f5:3a:5d:74:d3:71:ad:a3:b1:
                    0b:21:86:f1:7a:9d:28:1c:74:00:e9:1c:ac:9c:e6:
                    d1:8c:6f:17:fa:c9:95:fb:85:a2:72:57:e5:7e:2e:
                    83:f0:9e:f9:28:d4:66:3c:75:a7:60:6e:b0:08:33:
                    71:f1:6c:8f:45:d6:f7:78:71:ca:df:f6:e9:3c:ea:
                    c2:45:96:54:1c:d1:43:cb:57:e3:d7:25:7a:34:72:
                    d2:28:8b:30:39:80:3f:6a:b5:f9:23:22:35:ee:40:
                    41:12:e9:6f:6b:50:ad:5d:18:a5:f4:81:64:0a:50:
                    92:0e:f2:ae:60:7e:da:e0:f4:3a:9f:cf:56:65:ef:
                    e2:3d:00:bd:fb:a4:37:a7:57:f9:95:1e:7e:a5:2a:
                    0d:90:75:a5:a5:28:ed:8d:61:be:44:03:ff:a3:1f:
                    45:ac:27:50:4d:69:e8:06:71:b2:b5:c3:d5:52:5a:
                    6d:0e:48:6f:7d:85:9a:27:d8:03:c4:c7:a8:a0:56:
                    18:cf:e7:ce:92:5a:a3:dc:1f:53:a0:3d:83:72:5f:
                    c9:ce:83:84:8a:c2:d3:24:5e:6d:f1:bd:ec:32:23:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:FA:89:A2:87:E8:A9:73:DC:8B:DA:8F:2B:60:E1:0A:85:8C:E5
            X509v3 Authority Key Identifier:
                keyid:A2:0C:87:C7:9F:FC:9C:DC:C4:33:7C:BE:C0:E3:5D:D9:AF:8D:11:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a09df5d43f71e6cb12a3afb5d5b034307f575de7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/2b0173010d4c258142183b0b589e1e4757cb5f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/a09df5d43f71e6cb12a3afb5d5b034307f575de7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:32:bc:78:33:df:f2:b9:ff:bb:e1:fe:b6:97:a8:cc:52:
         f5:49:c4:d8:0e:59:34:23:c0:6c:68:4d:e4:ed:84:d3:c1:40:
         5a:ab:13:ed:17:71:d6:2e:a8:78:1d:6f:1b:40:21:2b:59:41:
         42:c8:24:76:29:d6:7e:c3:dd:82:d4:bc:06:a1:e6:7b:a1:f1:
         d2:31:3a:71:85:df:2b:61:d2:d5:a2:7c:8c:e6:05:31:f7:ea:
         ba:ab:2a:87:eb:28:8b:03:a3:c1:31:d7:3a:27:a2:3f:e6:70:
         58:f9:62:a8:e5:d4:73:82:ac:8e:7e:b3:ff:32:e7:4e:41:1c:
         cd:67:c6:14:10:cb:00:02:0d:2f:5d:c1:56:b6:e3:0b:8f:17:
         00:b8:13:b4:94:6c:ba:41:ba:d6:1e:ad:ac:3c:67:ee:46:ac:
         53:18:0b:3f:c3:db:be:8f:3e:e6:e2:6b:ed:2c:04:b5:7d:6b:
         5f:40:50:a0:55:d3:b8:d1:2c:5b:04:a6:9f:8f:f4:cd:0b:76:
         1c:b9:03:49:50:22:e1:c4:f2:c8:a6:83:52:8d:8f:64:17:5b:
         cf:cf:36:0b:ab:d4:ce:31:6e:f8:fe:51:50:a0:af:04:c0:fd:
         00:76:c5:ee:7f:bf:0b:46:e5:6d:e9:98:fd:d9:3c:55:7d:a3:
         16:9c:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----