Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/4a1874fafb57c47a1b7d5d278bd52cb352ab9023.roa
File:                     4a1874fafb57c47a1b7d5d278bd52cb352ab9023.roa (raw, json)
Hash identifier:          SFHcClUxn7OlJy+ciVOatmliQyWEdmsad+gwXJ421g4=
Subject key identifier:   E3:16:1B:41:95:6A:29:76:A6:AE:DF:3F:7A:A4:DC:0E:F9:0E:65:34
Certificate issuer:       /CN=49e352d14129558da17025255f13358c2326ee25
Certificate serial:       0F1626
Authority key identifier: 4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/4a1874fafb57c47a1b7d5d278bd52cb352ab9023.roa
Signing time:             Wed 21 Jul 2021 18:03:33 +0000
ROA not before:           Wed 21 Jul 2021 18:03:32 +0000
ROA not after:            Tue 21 Jul 2026 18:03:32 +0000
asID:                     267905
IP address blocks:        45.178.48.0/22 maxlen: 22
                          2803:3660::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988710 (0xf1626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e352d14129558da17025255f13358c2326ee25
        Validity
            Not Before: Jul 21 18:03:32 2021 GMT
            Not After : Jul 21 18:03:32 2026 GMT
        Subject: CN=4a1874fafb57c47a1b7d5d278bd52cb352ab9023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:09:60:04:37:b0:50:9c:bd:51:47:9d:a5:
                    8c:9b:e6:2c:a7:bd:6c:7f:aa:d1:5c:58:75:e8:0f:
                    13:da:34:4b:40:2d:7f:37:ef:d3:05:eb:f8:aa:2d:
                    35:6f:b8:61:59:37:c0:ee:91:21:ec:d3:6f:08:1e:
                    20:e8:c2:13:e1:5f:16:75:5d:59:70:97:1d:7c:33:
                    a5:8b:3a:2a:bf:2e:97:91:f1:5b:49:7d:73:f6:a2:
                    15:2c:8d:99:1d:14:c6:34:bc:56:f2:55:d4:e1:7e:
                    5c:0d:8f:2e:2a:45:ad:00:d1:1b:6c:79:a5:db:5b:
                    23:e5:47:8b:11:b3:4b:54:0b:49:04:b5:61:01:f1:
                    76:a7:c4:2a:31:0d:3b:d6:e7:4d:7f:b6:37:bb:df:
                    8d:48:21:b9:7e:f8:0b:ce:1b:f6:73:ae:dc:52:82:
                    41:2b:03:70:f4:ae:dc:ac:2f:68:f8:9b:8a:88:6a:
                    22:6a:70:ab:d6:42:9c:92:7b:1d:a5:c1:c0:ac:dc:
                    01:3e:fd:ce:d7:51:58:14:03:ed:ec:64:7d:60:46:
                    c4:a4:e8:80:c5:83:d2:72:66:88:b2:cd:13:08:96:
                    95:e6:1f:6b:82:a0:26:21:14:ca:76:75:b7:5c:46:
                    73:12:9c:4d:30:e5:5e:d5:e5:46:07:ec:e4:e7:dc:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:1B:41:95:6A:29:76:A6:AE:DF:3F:7A:A4:DC:0E:F9:0E:65:34
            X509v3 Authority Key Identifier:
                keyid:4E:B4:7D:BC:51:1F:32:83:F0:43:95:DB:EC:91:DE:21:A7:A1:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49e352d14129558da17025255f13358c2326ee25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/4a1874fafb57c47a1b7d5d278bd52cb352ab9023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b467762d-730c-47aa-a911-6c8764f20e4b/49e352d14129558da17025255f13358c2326ee25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.48.0/22
                IPv6:
                  2803:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:3b:26:57:6f:27:98:5f:6e:18:26:37:87:00:3e:9f:75:
         ad:dc:b3:35:10:e6:84:5a:86:64:ad:02:74:34:2f:3a:98:5d:
         a7:47:9c:9d:85:e1:06:79:36:1d:7b:20:7a:e3:c7:df:4f:12:
         ba:be:39:dd:f0:1b:a1:6f:85:a6:c3:f1:8d:17:68:7a:13:70:
         f2:90:f3:26:0e:64:b5:6f:63:1f:85:64:4d:57:3e:d1:2f:c5:
         c9:a0:bf:39:a6:39:d2:ab:9b:e3:bb:99:2e:5d:b9:17:45:b0:
         a2:21:0c:f5:7e:ac:a0:ea:03:ea:e6:89:ac:c2:b4:b5:f0:6f:
         d4:40:db:94:ca:1d:1f:90:8d:77:45:2f:8e:d3:85:8c:ee:51:
         9c:7b:12:7a:2f:0d:6e:0d:51:7f:ae:f9:f6:bf:5d:7a:29:d2:
         6f:5e:3c:da:a9:26:66:c4:4e:8e:9f:0c:d6:cb:28:ce:8d:da:
         0d:d3:82:8e:0c:33:68:82:09:99:e9:b6:65:8d:f3:21:30:0f:
         39:40:7a:06:2a:6c:85:f4:d9:cd:40:08:bc:6e:bc:91:1f:53:
         45:eb:67:a3:ff:c9:24:05:6c:bb:93:a6:1e:0c:97:f6:1f:82:
         34:0d:4e:b9:8f:8a:c7:29:1d:56:be:c5:a1:3f:2e:03:d3:55:
         99:81:1d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----